Privacy notice

Draft for legal review. This text is a working draft for Indus Experts to review and approve before launch. Items in [brackets] must be confirmed.

1. Who we are

HBF Venture is operated by HBF Direct Limited, 910–911, Iconic Corenthum, Sector 62, Noida 201301, Uttar Pradesh, India ("HBF", "we"). HBF is the Data Fiduciary for personal data processed through hbfventure.com and the HBF Venture platform under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. What we collect

• Everyone: name, email, mobile number, city, role, organisation, information you share in applications or messages, sign-in records and the actions you take on the platform.
• Founders and MSMEs: business details, progress updates, documents you upload, bookings and Studio Pass records.
• Investors: KYC details and documents, membership status, holdings, notices and votes.
• Firms, providers and professionals: business and professional details, services, case work, invoices and settlement records.
• Students and builders: education, skills and programme participation. We accept only people aged 18 and above.

3. Why we use it

• To review applications, verify identity where needed and run your account.
• To deliver platform services: bookings, credits, cases, settlements, notices and introductions you agree to.
• To meet legal obligations, including tax, company law and KYC requirements.
• To send HBF news and event invitations, only if you opt in.

We rely on your consent, which you can withdraw at any time, and on legitimate uses allowed by the DPDP Act, such as complying with the law. Withdrawing consent does not affect processing already done, and some records must be kept by law.

4. Who we share it with

We share only what each role needs: for example, a venture's booking details with the provider doing the work, filing details with the assigned CA or CS firm, and authorised information with approved investors. We use service providers for hosting, email and sign-in, under contracts that protect your data. We do not sell personal data.

5. How long we keep it

We keep data while your account is open and for as long as the law requires afterwards. On erasure, your name, contact details, sign-in and profiles are erased. Records the law or our rules require us to keep, such as ledger entries, deals, invoices, cap tables, KYC records and the audit log, are kept linked to an ID without your name.

6. Your rights

• Get a summary of your data and how it is used, or download a copy from your account.
• Correct or update your data.
• Ask for erasure. An admin checks that nothing open depends on it and tells you the outcome, within [30] days.
• Withdraw consent.
• Raise a grievance, and escalate to the Data Protection Board of India if unresolved.
• Nominate someone to exercise your rights if you cannot.

7. Security

Every account uses two-step sign-in. Access is role-based, and actions are recorded in an audit log. [Confirm hosting location and any transfer outside India.]

8. Cookies

This website uses no advertising or analytics cookies. Fonts are loaded from Google Fonts, which receives your IP address. [Update if analytics are added.]

9. Grievance officer

Kunal, Grievance Officer, HBF Direct Limited, at the address above. Email: [email protected]. We acknowledge grievances within [48 hours] and resolve them within [30] days.

10. Changes

We will post changes here with a new version number and tell account holders about material changes.