Legal

Privacy Policy

Last updated 8 September 2026

This policy explains what we collect when you use this website or engage us, why we collect it, who else sees it, and what you can ask us to do with it.

1. Who is responsible for your data

Jugaad Studio Tradex Private Limited, trading as TenderBuddy, based in New Delhi, India, decides how and why your personal data is processed. Under the Digital Personal Data Protection Act, 2023, that makes us the Data Fiduciary and you the Data Principal.

For any question, correction or deletion request, write to contact@tenderbuddy.in with “Privacy” in the subject line. We answer within 30 days, and in any event within the 90 days the DPDP Rules allow.

2. What we collect

When you send an enquiry

Name, company, phone number, email address, what you are enquiring about, and your message.

When you book a consultation or workshop seat

The same details, plus your chosen date and time. For paid bookings we also keep a payment reference and the amount — but never your card, UPI or bank credentials (see section 4).

When you subscribe to the newsletter

Your email address and the date you subscribed. Nothing else.

When you engage us for a service

Whatever the work requires — company registration documents, GST and PAN details, product and financial information, bid documents, and correspondence. Where we work alongside your GeM or other portal account, we handle access as described in our Data Security and Retention Policy.

Automatically

Our hosting provider keeps standard server logs — IP address, browser type, pages requested, timestamps — for security and troubleshooting.

Cookies and measurement

This site runs two measurement tags on every page: Google Analytics 4 and the Meta pixel. They tell us which pages get read, which adverts bring people here, and how many registrations finish. Between them they set cookies in your browser and send Google and Meta your IP address, the pages you open, and the actions you take on them — an enquiry sent, a document downloaded, a seat paid for.

Those two companies are separate data controllers for what they receive, and they process it under their own terms: Google under the Google Privacy Policy and Meta under the Meta Privacy Policy.

You can switch both off. Blocking third-party scripts in your browser, or any standard content blocker, stops them: every page on this site works normally without them. Google also publishes an Analytics opt-out add-on, and Meta's ad preferences are at accountscenter.facebook.com.

We do not sell your personal data, and nothing we measure is shared with anyone else for their own marketing.

3. Why we use it, and on what basis

To answer your enquiry — you asked us to.
To deliver a service or booking you asked for — to perform our agreement with you.
To send the newsletter — only with your consent, withdrawable at any time.
To meet legal and accounting obligations — invoicing, tax and record-keeping.
To keep the site secure — our legitimate interest in preventing abuse.
To measure the site and our advertising — our legitimate interest in knowing what works, and in not spending on adverts that do not.

We do not use your data to make automated decisions about you. The measurement tags described above may be used to show you our own adverts on Google and Meta platforms afterwards; they are never used to build a profile of you for anyone else.

4. Payments

We never see or store your payment credentials. Card numbers, UPI IDs, bank logins and one-time passwords are entered on the payment provider’s own screens and handled entirely by them under their privacy terms.

What reaches us is a transaction reference, the amount, and whether the payment succeeded — which we keep as proof of purchase and for accounting.

5. Bookings, calendar invitations and video meetings

When you book a consultation we create a calendar event and a video meeting link. Doing so shares your name, email address and the details you gave us with Google, so that the invitation and the meeting link can be delivered to you. Google processes that data under its own privacy policy.

The invitation goes to you and to us. Other attendees are not added, and we do not record meetings unless you ask us to and agree to it beforehand.

6. Who else sees your data

We share personal data only where it is needed to run the service:

Our hosting provider, which stores the site and the data behind it.
Our payment provider, which processes the transaction.
Google, for calendar invitations and meeting links.
Google Analytics and Meta, for the site measurement described in section 2 — page views and the actions you take on this site, not the content of your enquiry.
Our email provider, which carries our correspondence with you.
Government portals and buyers, where an engagement requires us to file, submit or correspond on your behalf — with your approval, and only what the filing needs.
Our accountants and advisers, where they need it, under confidentiality.
Authorities, where the law requires disclosure.

We do not sell your personal data, and we do not share it for anyone else’s marketing.

7. Where your data is held

Our site and its data are hosted on servers operated by our hosting provider. Some of our service providers — for calendar, video meetings, email and site measurement — operate internationally, so your data may be processed outside India by them. We use established providers who offer contractual protection for the data they handle.

8. How long we keep it

Enquiries that go nowhere — up to 24 months, then deleted.
Client engagement records — for the engagement and up to 8 years afterwards, to meet tax and accounting requirements.
Booking and payment records — up to 8 years, for the same reason.
Newsletter subscriptions — until you unsubscribe.
Server logs — a short rolling period set by our host.
Analytics and pixel data — held by Google and Meta on their own retention schedules, which we set to the shortest each offers.

Fuller detail is in our Data Security and Retention Policy.

9. Your rights

You can ask us to:

Tell you what we hold about you, and what we have done with it.
Correct anything inaccurate or incomplete.
Delete what we hold, where we are not required to keep it.
Withdraw consent — for the newsletter, or anything else you consented to.
Nominate someone to exercise these rights if you are unable to.

Email contact@tenderbuddy.in. We may ask you to confirm your identity before acting, so that we do not disclose your data to someone else.

If you are not satisfied with how we have handled a request, you may complain to the Data Protection Board of India.

10. Children

This is a business service and is not directed at children. We do not knowingly collect personal data of anyone under 18. If you believe we have, tell us and we will delete it.

11. A note on the law as it stands

The Digital Personal Data Protection Act, 2023 and the Rules made under it are being brought into force in stages, with the main obligations around consent, notice and security taking effect from 13 May 2027. We have written this policy to that standard now rather than waiting, and we will update it as the remaining provisions commence.

12. Changes

We may update this policy. The date at the top shows when this version was issued. Material changes affecting how we use data you have already given us will be notified to you directly where we hold your contact details.

13. Contact

Jugaad Studio Tradex Private Limited, trading as TenderBuddy
New Delhi, India
contact@tenderbuddy.in · +91 95993 36133