Privacy Policy

1. Who is responsible for your data

Jugaad Studio Tradex Private Limited, trading as TenderBuddy, based in New Delhi, India, decides how and why your personal data is processed. Under the Digital Personal Data Protection Act, 2023, that makes us the Data Fiduciary and you the Data Principal.

For any question, correction or deletion request, write to info@tenderbuddy.in with “Privacy” in the subject line. We answer within 30 days, and in any event within the 90 days the DPDP Rules allow.

2. What we collect

When you send an enquiry

Name, company, phone number, email address, what you are enquiring about, and your message.

When you book a consultation or workshop seat

The same details, plus your chosen date and time. For paid bookings we also keep a payment reference and the amount — but never your card, UPI or bank credentials (see section 4).

When you subscribe to the newsletter

Your email address and the date you subscribed. Nothing else.

When you engage us for a service

Whatever the work requires — company registration documents, GST and PAN details, product and financial information, bid documents, and correspondence. Where we work alongside your GeM or other portal account, we handle access as described in our Data Security and Retention Policy.

Automatically

Our hosting provider keeps standard server logs — IP address, browser type, pages requested, timestamps — for security and troubleshooting.

3. Why we use it, and on what basis

• To answer your enquiry — you asked us to.
• To deliver a service or booking you asked for — to perform our agreement with you.
• To send the newsletter — only with your consent, withdrawable at any time.
• To meet legal and accounting obligations — invoicing, tax and record-keeping.
• To keep the site secure — our legitimate interest in preventing abuse.

We do not use your data to make automated decisions about you, and we do not profile you for advertising.

4. Payments

What reaches us is a transaction reference, the amount, and whether the payment succeeded — which we keep as proof of purchase and for accounting.

5. Bookings, calendar invitations and video meetings

When you book a consultation we create a calendar event and a video meeting link. Doing so shares your name, email address and the details you gave us with Google, so that the invitation and the meeting link can be delivered to you. Google processes that data under its own privacy policy.

The invitation goes to you and to us. Other attendees are not added, and we do not record meetings unless you ask us to and agree to it beforehand.

6. Who else sees your data

We share personal data only where it is needed to run the service:

• Our hosting provider, which stores the site and the data behind it.
• Our payment provider, which processes the transaction.
• Google, for calendar invitations and meeting links.
• Our email provider, which carries our correspondence with you.
• Government portals and buyers, where an engagement requires us to file, submit or correspond on your behalf — with your approval, and only what the filing needs.
• Our accountants and advisers, where they need it, under confidentiality.
• Authorities, where the law requires disclosure.

We do not sell your personal data, and we do not share it for anyone else’s marketing.

7. Where your data is held

Our site and its data are hosted on servers operated by our hosting provider. Some of our service providers — for calendar, video meetings and email — operate internationally, so your data may be processed outside India by them. We use established providers who offer contractual protection for the data they handle.

8. How long we keep it

• Enquiries that go nowhere — up to 24 months, then deleted.
• Client engagement records — for the engagement and up to 8 years afterwards, to meet tax and accounting requirements.
• Booking and payment records — up to 8 years, for the same reason.
• Newsletter subscriptions — until you unsubscribe.
• Server logs — a short rolling period set by our host.

Fuller detail is in our Data Security and Retention Policy.

9. Your rights

You can ask us to:

• Tell you what we hold about you, and what we have done with it.
• Correct anything inaccurate or incomplete.
• Delete what we hold, where we are not required to keep it.
• Withdraw consent — for the newsletter, or anything else you consented to.
• Nominate someone to exercise these rights if you are unable to.

Email info@tenderbuddy.in. We may ask you to confirm your identity before acting, so that we do not disclose your data to someone else.

If you are not satisfied with how we have handled a request, you may complain to the Data Protection Board of India.

10. Children

This is a business service and is not directed at children. We do not knowingly collect personal data of anyone under 18. If you believe we have, tell us and we will delete it.

11. A note on the law as it stands

The Digital Personal Data Protection Act, 2023 and the Rules made under it are being brought into force in stages, with the main obligations around consent, notice and security taking effect from 13 May 2027. We have written this policy to that standard now rather than waiting, and we will update it as the remaining provisions commence.

12. Changes

We may update this policy. The date at the top shows when this version was issued. Material changes affecting how we use data you have already given us will be notified to you directly where we hold your contact details.

13. Contact

Jugaad Studio Tradex Private Limited, trading as TenderBuddy
New Delhi, India
info@tenderbuddy.in · +91 95993 36133