Privacy Policy
How AG Impex collects, uses, stores, and protects the personal and business data of our wholesale partners and website visitors.
Overview & Data Controller
AG Impex ("Company", "we", "us", "our") is committed to protecting the privacy and security of personal and business data shared with us by our wholesale partners, website visitors, and enquirers. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights available to individuals and businesses whose data we hold.
AG Impex acts as the data controller for all personal information collected through our website, order management systems, and direct business communications. Our registered business address in India is the point of legal contact for all data-related enquiries.
This policy applies to all individuals who interact with AG Impex, including wholesale account holders, prospective buyers, website visitors, and representatives of corporate clients. It does not apply to the internal processing practices of third-party platforms we may link to.
Data We Collect
We collect only the data necessary to operate our wholesale business and comply with applicable laws. The categories of data we collect include:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, government ID, date of birth | Account registration, KYC verification |
| Business Data | Company name, registration number, trade licence, GST/VAT number | Account registration, order forms |
| Contact Data | Email address, phone number, WhatsApp, business address | Registration, enquiry forms, communications |
| Transaction Data | Order history, invoices, payment records, shipment details | Order placement and fulfilment |
| Financial Data | Bank account details, wire transfer records, credit references | Payment processing, credit applications |
| Communications Data | Email correspondence, chat logs, support tickets | Direct communications with our team |
| Technical Data | IP address, browser type, device information, cookies | Website usage, analytics |
How We Use Your Data
We use collected data strictly for the purposes described below. We do not sell, rent, or trade personal data to third parties for marketing or commercial purposes.
Legal Basis for Processing
AG Impex processes personal data on the following legal bases under applicable Indian data protection law (Information Technology Act, 2000 and associated Rules) and, where relevant, international frameworks including GDPR for buyers in the European Economic Area:
Contractual Necessity
Processing required to enter into and perform our supply agreement with you, including account verification, order processing, and shipment management.
Legal Obligation
Processing required to comply with KYC, AML, customs, tax, and export control regulations under Indian and international law.
Legitimate Interests
Processing for fraud prevention, IT security, debt recovery, and improvement of our business operations, where these interests are not overridden by your rights.
Consent
For marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Data Retention
We retain personal and business data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are:
| Data Type | Retention Period | Reason |
|---|---|---|
| KYC & Identity Documents | 7 years after account closure | AML regulatory requirement |
| Transaction & Invoice Records | 8 years from transaction date | Tax and accounting obligations |
| Export Documentation | 7 years from export date | Customs and DGFT compliance |
| Account & Contact Data | Duration of relationship + 3 years | Contractual and dispute resolution |
| Marketing Preferences | Until consent withdrawn | Consent-based processing |
| Website Analytics (anonymised) | 26 months | Website improvement analysis |
Security Measures
AG Impex implements technical and organisational security measures appropriate to the sensitivity of the data we hold. Given the high-value nature of our trade, we treat data security as a business-critical priority.
Encryption
All data stored in our systems is encrypted at rest using AES-256. Data in transit between our systems and external parties uses TLS 1.2 or higher.
Access Controls
Access to personal data is restricted on a need-to-know basis. All staff with data access undergo role-specific training and are bound by confidentiality obligations.
System Security
Our systems are protected by firewalls, intrusion detection, and regular security patches. We conduct periodic security reviews and vulnerability assessments.
Breach Response
In the event of a data breach affecting your personal data, we will notify affected parties and relevant authorities within the timelines required by applicable law.
Cookies & Tracking
Our website uses cookies and similar tracking technologies to ensure the website functions correctly and to analyse usage patterns. We use the following categories of cookies:
Your Rights
Subject to applicable law and certain legal exemptions, you have the following rights in relation to personal data we hold about you. We will respond to all valid requests within 30 days.
Right of Access
Request a copy of the personal data we hold about you and how it is used.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold.
Right to Erasure
Request deletion of your data where there is no overriding legal basis for retention.
Right to Restrict Processing
Request that we limit how we process your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format where technically feasible.
Right to Withdraw Consent
Withdraw consent for marketing or non-essential processing at any time without penalty.
Children's Privacy
AG Impex's services are directed exclusively at businesses and their authorised representatives, all of whom must be at least 18 years of age. We do not knowingly collect personal data from individuals under the age of 18.
If we become aware that personal data from a person under 18 has been submitted to us, we will delete that data promptly. If you believe we have inadvertently collected such data, please contact us at the address below.
Contact & Complaints
For all privacy-related queries, data rights requests, or concerns about how we handle your information, please contact our data team:
info@agcustomjewelry.com
Response within 30 days for data rights requests.
Supervisory Authority
If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction, or with India's Ministry of Electronics & IT.