01Who we are and what this policy covers
BNQ InTech (OPC) Private Limited (“BNQ InTech”, “we”, “us”) is an IT and IT-enabled services company registered in India, with its office at GF1 & GF2, Tirath Technospace, Beside B U Bhandari Mercedes Showroom, Baner, Pune 411045, Maharashtra, India. For the personal data described here we are the Data Fiduciary (the “controller”).
This policy applies to bnqintech.com, its forms, customer accounts, newsletter, careers and partner applications, and our related emails. It does not cover data we process on behalf of our clients under a services contract — that data is governed by the client contract and the client’s own privacy notice, and we act only on the client’s documented instructions.
02Laws we follow
We handle personal data in line with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and its Rules as they come into force. Where the EU or UK General Data Protection Regulation applies to you, you also have the rights it gives.
03Personal data we collect
Data you give us:
- Contact and quote requests — first and last name, email, phone / WhatsApp, country, state, city, company, the service you need, timeline and your message.
- Customer accounts — name, company, GSTIN (optional), address, email, mobile number, preferences, orders, wallet entries, requests and sign-in history (date, device type, approximate location from IP).
- Job applications — your details, experience, links and the CV you upload.
- Partner applications — your or your organisation’s details, business category, territory, experience and network information you choose to share.
- Business Partner portal — for approved partners: your name, contact details, place and photo, the reports you submit about your activities and clients (including the client contact details you enter), our follow-ups with those clients, work orders and your earnings records. Visible to you, your Sales Manager and our sales management; never to other partners.
- Profile photo or logo — only if you upload one in your account; it is resized, stripped of hidden camera data (such as location) and visible only to you and our account staff. You can remove it at any time.
- Newsletter — your email address. We register it only after you click the confirmation link we email you (double opt-in).
04Data collected automatically
- Server logs — IP address, browser, page requested, time and response code, kept for 14 days for security and troubleshooting.
- Visitor logs and analytics — for each visit we record the IP address, approximate location derived from it (country, state, city), browser and device type, the page visited, the page you came from, and date and time. We use these logs to count visitors, understand how the website is used, improve it, and detect abuse. This analysis uses no cookies and no advertising identifiers, and we do not use it to build advertising profiles.
- Security signals — to stop spam we check form timing and, if enabled, a Cloudflare Turnstile challenge. Each enquiry record keeps the IP address it came from for fraud prevention.
- Cookies — only the sign-in cookies described in our Cookie Policy. We use no advertising or cross-site tracking cookies.
05What we ask you not to send
Please do not send passwords, bank or card details, health information, government ID numbers or other sensitive personal data through our website forms. We do not need them to answer an enquiry. If a service requires such data, we agree a secure way to receive it in writing first.
06Why we use your data, and on what basis
07Consent and withdrawing it
Where we rely on consent, you can withdraw it at any time by emailing info@bnqintech.com or using the unsubscribe link in our emails. Withdrawal does not affect processing already done. If you withdraw consent needed to answer an enquiry or keep an account, we may not be able to continue that service.
09International transfers
Our main systems are in India. Some providers (such as email delivery) may process data in other countries. Where data leaves India we do so only as permitted by Indian law and with contractual safeguards; for EU/UK visitors we rely on appropriate safeguards such as standard contractual clauses.
10How long we keep data
After these periods we delete or anonymise the data, unless the law requires us to keep it longer or it is needed for a legal claim.
When a record is deleted in our systems (for example when you ask us to close your account), it is first taken out of all active use and kept in a restricted archive that only senior staff can open, so that mistakes can be undone and legal records kept. It is not used for any other purpose.
11How we protect data
We use reasonable security practices proportionate to the data: encrypted connections (HTTPS), a firewall and intrusion protection on our servers, access limited to people who need it, passwordless sign-in with short-lived codes, signed and HTTP-only session cookies, spam protection, and regular updates and backups.
No method of transmission or storage is completely secure. If a personal-data breach occurs, we will act quickly to contain it and inform affected people and the Data Protection Board of India (and other regulators where required) as the law requires.
12Your rights
Subject to the law that applies to you, you may:
- get a summary of the personal data we hold about you and how we use it;
- have inaccurate or incomplete data corrected, completed or updated;
- have data erased when it is no longer needed or you withdraw consent (unless we must keep it by law);
- withdraw consent and unsubscribe from our emails;
- nominate another person to exercise your rights in case of death or incapacity;
- have your grievance handled by our Grievance Officer, and then complain to the Data Protection Board of India; EU/UK residents may also object, restrict processing, request portability and complain to their supervisory authority.
To use these rights, email info@bnqintech.com. We may ask you to confirm your identity and will reply within 30 days. Signed-in customers can also update their details and request deletion from Sign-in & security.
13Children
This website and our services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us data, contact us and we will delete it.
14Other websites
Links to other websites, WhatsApp or social networks are run by others under their own privacy policies. We are not responsible for their practices.
15Changes to this policy
We may update this policy. The date above shows the latest version; for significant changes we will place a notice on the website and, where we have your email and the law requires it, tell you directly.
16Grievance Officer & contact
BNQ InTech (OPC) Private Limited, GF1 & GF2, Tirath Technospace, Beside B U Bhandari Mercedes Showroom, Baner, Pune 411045, Maharashtra, India.
Grievance Officer / privacy contact: email info@bnqintech.com with the subject “Privacy / Grievance”, or write to the address above. We acknowledge grievances within 72 hours and aim to resolve them within 30 days, or sooner where the law requires.
This document was last updated on 10 November 2026. Previous versions are available on request.