1. Introduction & Overview

Bhagwan Engineering Works (BEW) is one of the leading agricultural equipment and implements manufacturers in India, addressing the basic agricultural necessities by providing eminent solutions since 1968. This website and its services are operated by KS AGROTECH Private Limited ("we," "us," "our," or the "Company"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and in your interactions with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, and engage with our organization.

We take data privacy seriously and comply with all applicable laws and regulations, including the Information Technology Act, 2000 (ITA), the Digital Personal Data Protection Act, 2023 (DPDP Act), the General Data Protection Regulation (GDPR), and other jurisdiction-specific privacy laws. Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.

Contact Information:
If you have questions about this Privacy Policy or our privacy practices, please contact us at:

• Email: info@ksagrotech.org  /  sales@ksagrotech.org
• Toll-free: 1800 1200 04455
• Domestic Sales: +91 98725 96155, +91 92170 70755, +91 92170 71755, +91 92170 70555
• Overseas Sales: +91 98725 96155, +91 92160 15055
• Dealership: +91 92170 70555, +91 92160 15055
• Service: +91 92170 71255
• Address: KS AGROTECH Private Limited, Raikot Road, Malerkotla, District Sangrur, Pincode: 148023, Punjab, INDIA

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration: When you create an account, we collect your name, email address, phone number, company name, and other business details you provide.
• Contact Forms & Inquiries: When you submit contact forms, quote requests, product enquiries, dealership enquiries, or service inquiries, we collect the information you enter, including your name, email, phone, company, requirement details, and any attachments.
• Communications: We collect records of emails, chat messages, and correspondence you send to us through our website, email, or support channels.
• Payment Information: When you make purchases or subscribe to services, we collect billing address, payment method details (processed securely via third-party payment gateways), invoice information, and transaction history.
• Client Portal Data: Users of our client portal may provide project briefs, preferences, feedback, change requests, and other project-related content.
• Testimonials & Reviews: If you provide testimonials or reviews, we collect that content along with your name and company (with your consent).

2.2 Information Collected Automatically

• Browser & Device Data: IP address, browser type, operating system, device identifier, and device type.
• Cookies & Tracking: We use cookies, web beacons, and similar tracking technologies to remember preferences, analyze site usage, and improve user experience.
• Usage Analytics: Pages visited, time spent, clicks, scroll depth, referral sources, search queries, and interaction patterns.
• Location Data: Approximate geographic location based on IP address (if consent-based location services are enabled).
• Server Logs: Access logs, error logs, and performance metrics for security and troubleshooting.

2.3 Information from Third Parties

• Social Media & SSO: If you sign in via social media (Google, LinkedIn, etc.), we receive your profile information from those platforms.
• Business Partners: We may receive information about you from our partners, dealers, affiliates, or vendors for service delivery or marketing purposes.
• Public Sources: We may collect publicly available information about your business from websites, directories, or industry databases for business intelligence.
• Payment Processors: Payment confirmation and verification data from our payment gateway partners.

3. How We Use Your Information

We use the information we collect for various legitimate business purposes:

3.1 Service Delivery

• Processing and fulfilling your service requests, quotes, and orders.
• Providing technical support, customer service, and account management.
• Delivering products, documents, or information you've requested.
• Managing your access to our client portal and tracking progress.
• Sending service-related notices and transactional emails.

3.2 Communication & Marketing

• Responding to your inquiries and feedback.
• Sending newsletters, product updates, and promotional offers (only with your consent where required).
• Conducting surveys, feedback requests, and market research.
• Personalizing your experience based on your interests.

3.3 Legal & Security

• Complying with legal obligations, court orders, and regulatory requirements.
• Preventing fraud, abuse, and ensuring platform security.
• Protecting our rights, privacy, safety, and property.
• Enforcing our terms of service and other agreements.

3.4 Analytics & Improvement

• Analyzing website usage patterns and user behavior.
• Improving website functionality, design, and user experience.
• Measuring the effectiveness of marketing campaigns.
• Conducting business analytics and trend analysis.

3.5 Business Operations

• Managing billing, invoicing, and payment collection.
• Auditing, accounting, and financial reporting.
• Backup and disaster recovery purposes.
• Statistical analysis and business intelligence.

4. Legal Basis for Processing

Under the DPDP Act, GDPR, and similar privacy laws, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to perform services you've requested or to enter into a contract.
• Legitimate Interests: Processing for our legitimate business interests (e.g., security, analytics, marketing) that do not outweigh your rights.
• Consent: Processing based on your explicit consent (e.g., marketing emails, non-essential cookies).
• Legal Obligation: Processing required by law (e.g., tax records, regulatory compliance).
• Vital Interests: Processing necessary to protect your health and safety in emergency situations.

5. Sharing & Disclosure of Information

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your privacy is fundamental to our business.

5.2 We May Share Information With:

• Service Providers: Cloud hosting providers, payment processors, email service providers, analytics tools, and CRM systems that help us deliver services (under data processing agreements).
• Team Members: Our employees and contractors who need access to your information to perform their job functions.
• Authorised Dealers: Where you request dealership or product information, we may share your enquiry with the relevant authorised dealer to serve you better.
• Legal Requirements: Law enforcement, courts, or government agencies when required by law or legal process.
• Business Transfers: In case of merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you of any such change.
• Trusted Partners: With your consent, we may share information with affiliated businesses, referral partners, or co-marketing partners.

5.3 Data Processing Agreements

All service providers who access your personal data are bound by confidentiality and data protection agreements. We ensure they maintain adequate security measures and comply with applicable privacy laws.

6. Data Security & Protection

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: Sensitive data is encrypted in transit (SSL/TLS) and at rest using industry-standard encryption protocols.
• Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data.
• Firewalls & Intrusion Detection: We maintain firewalls and monitor systems for unauthorized access attempts.
• Regular Audits: Periodic security assessments and compliance audits to identify vulnerabilities.
• Employee Training: All employees receive data protection and privacy training.
• Incident Response Plan: We maintain a documented plan to respond to data breaches and will notify affected parties where required by law.
• Secure Infrastructure: We host data on secure, compliant servers with redundant backups and disaster recovery.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide services and fulfill contractual obligations.
• Comply with legal and regulatory requirements.
• Resolve disputes and enforce agreements.
• Support business operations and analytics.

Retention Periods by Category:

• Account Information: Retained for the duration of your account plus 2 years post-closure for regulatory compliance.
• Transaction Records: Retained for 7 years for tax and legal purposes.
• Support Tickets: Retained for 3 years for reference and dispute resolution.
• Marketing Communications: Retained until you unsubscribe; opt-out records retained for 2 years.
• Analytics Data: Aggregated data retained indefinitely; personal identifiers removed within 13 months.
• Cookies: Session cookies deleted after browser closure; persistent cookies retained per cookie policy (typically 1-2 years).

After the retention period ends, we securely delete or anonymize your information. If deletion is not possible (e.g., archived backups), we will isolate and secure the data.

8. Your Rights & Choices

Depending on your location and applicable laws, you have the following rights regarding your personal data:

8.1 India Privacy Rights (ITA & DPDP Act, 2023)

• Right to know how your personal data is collected and used.
• Right to access and correct your personal data.
• Right to erasure of your personal data (subject to legal retention).
• Right to grievance redressal and data protection remedies.
• Right to opt-out of marketing and non-essential processing.

8.2 GDPR Rights (EU/EEA Residents)

• Right to Access: Request a copy of your personal data we hold.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your data (subject to legal retention obligations).
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a portable, machine-readable format.
• Right to Object: Opt-out of marketing communications, profiling, and certain processing activities.
• Right to Withdraw Consent: Withdraw consent for consent-based processing at any time.
• Right to Lodge a Complaint: File a complaint with your local data protection authority.

8.3 Marketing Preferences

• Every marketing email includes an unsubscribe link. Click it to opt-out immediately.
• You can manage communication preferences in your account settings.
• We honor "Do Not Track" (DNT) signals where supported.

8.4 Cookie Management

• You can disable cookies in your browser settings (though some features may not work properly).
• Use browser privacy modes or extensions to block tracking.
• Visit allaboutcookies.org for detailed instructions.

How to Exercise Your Rights

To exercise any of these rights, please submit a request to info@ksagrotech.org with:

• Your full name and email address.
• A clear description of your request.
• Proof of identity (Aadhaar/PAN/passport copy or equivalent).

We will respond within 30 days (or as required by applicable law). Some requests may take longer depending on complexity.

9. Third-Party Links & Services

Our website may contain links to third-party websites, social media platforms, and external services that are not operated by us. This Privacy Policy does not apply to those external sites, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party sites before providing your information. Common third-party services we may integrate with include:

• Analytics: Google Analytics, Hotjar (usage tracking and heatmaps).
• Payment Processing: Razorpay, PayU, Stripe, PayPal (secure payment handling).
• Email Services: Mailchimp, SendGrid, Brevo (newsletter distribution).
• CRM & Chat: HubSpot, Intercom (customer communication).
• Social Media: Facebook, Instagram, LinkedIn, YouTube (social widgets and login).
• Cloud Hosting: Managed cloud/server infrastructure providers.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device that help us remember your preferences and understand how you use our website. We use both session cookies (deleted when you close your browser) and persistent cookies (remain until expiration).

10.2 Types of Cookies We Use

• Essential Cookies: Required for core functionality (login, security, cart). No consent required.
• Analytical Cookies: Help us understand user behavior and improve the website. Requires consent in certain jurisdictions.
• Marketing Cookies: Used for personalized advertising and retargeting. Requires explicit consent.
• Social Media Cookies: Set by social platforms for integration and tracking. Check their privacy policies.

10.3 Cookie Consent

When you first visit our website, you may see a cookie consent banner. You can accept all cookies, reject non-essential cookies, or customize your cookie preferences. You can change your preferences at any time via our cookie settings link.

10.4 Disabling Cookies

Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect website functionality.

11. Children's Privacy

Our services are not directed to children under the age of 18 (or the minimum digital age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected data from a child without verifiable parental consent, we will delete it promptly.

If you are a parent or guardian and believe your child has provided information to us, please contact us at info@ksagrotech.org.

12. International Data Transfers

We are based in India and primarily process data in India. If you are located outside India, your data may be transferred to, stored in, and processed in India and other countries where we or our service providers operate. These countries may have different data protection laws than your country of origin.

By using our services, you consent to the transfer of your information to countries outside your country of residence. We implement appropriate safeguards, including:

• Standard contractual clauses (SCCs) between data processors.
• Adequacy decisions under GDPR where applicable.
• Your explicit consent for certain transfers.

13. California Consumer Privacy (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request what personal information we collect and how it's used.
• Right to Delete: Request deletion of your personal information (with exceptions).
• Right to Opt-Out: Opt-out of the sale or sharing of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Limit Use: Limit how we use your sensitive personal information.

To submit a CCPA/CPRA request, email info@ksagrotech.org.

14. Policy Changes & Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify you via email (for significant changes).
• Post the updated policy on our website.
• Request your consent if required by law.

Your continued use of our services after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

15. Contact & Grievance Redressal

Privacy & Data Protection Contact

For any privacy-related questions, concerns, or to exercise your rights, please contact:

• Email: info@ksagrotech.org  /  sales@ksagrotech.org
• Toll-free: 1800 1200 04455
• Service: +91 92170 71255
• Address: KS AGROTECH Private Limited, Raikot Road, Malerkotla, District Sangrur, Pincode: 148023, Punjab, INDIA
• Web Form: Submit Privacy Inquiry

Grievance Redressal

If you have concerns about how we handle your data, please contact us using the information above. We commit to:

• Acknowledging receipt of your complaint within 24 hours.
• Investigating thoroughly and providing a detailed response within 30 days.
• Taking corrective action where necessary.
• Keeping you informed throughout the process.

Regulatory Authorities

If you are not satisfied with our response, you may file a complaint with the relevant data protection authority:

• India: Data Protection Board of India (under the DPDP Act, 2023).
• EU/EEA: Your country's Data Protection Authority.
• UK: Information Commissioner's Office (ICO).
• California: California Privacy Protection Agency (CPPA).