Privacy Policy

1. Introduction & Regulatory Scope
This Privacy Policy governs the collection, storage, processing, and disclosure of digital personal data across all web properties, e-commerce applications, and digital platforms operated by Bluekites ("Company", "We", "Us", or "Our"). Bluekites offers diverse products and multi-vertical services, including Healthcare & Medical Supplies, Food & Consumer Goods, Electronic Products, Travel Facilitation, Real Estate Consultancy, and IT Services.
This policy is framed in strict compliance with:
 * The Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025.
 * The Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
 * The Consumer Protection (E-Commerce) Rules, 2020.
2. Personal Data We Collect
We collect personal data based on the explicit products or services you engage with:
 * Account & Contact Data: Name, email address, phone number, physical billing and shipping address, date of birth.
 * Healthcare Products: General order metadata, shipping addresses for personal care or medical devices (Note: We do not process health condition data unless explicitly required for fulfilling customized medical orders).
 * Food & Consumer Products: Delivery preferences, dietary flags, and location data.
 * Electronics & IT Services: Hardware specifications, IP addresses, browser environment, system logs, and corporate domain details.
 * Travel Services: Passport details, government IDs (Aadhaar/PAN for mandatory travel verification), traveler names, travel itineraries, and emergency contacts.
 * Real Estate Consultancy: Property preferences, financial eligibility metadata, contact details, and site visit schedules.
 * Payment Data: Payment transactions are processed via PCI-DSS compliant payment gateways. Bluekites does not store debit/credit card numbers or UPI PINs.
3. Purpose & Lawful Basis of Data Processing
In accordance with the DPDP Act, 2023, your personal data is collected only with your explicit, affirmative consent for specified, lawful purposes:
 * Fulfilling product orders, service bookings, and logistics deliveries.
 * Facilitating travel reservations with third-party airlines, hotels, and operators.
 * Managing real estate site visits, property matching, and consulting leads.
 * Delivering technical, software, and IT consulting support.
 * Transactional communication (order updates, flight status, service alerts via SMS/WhatsApp/Email).
 * Compliance with statutory tax, legal audit, and anti-fraud mandates under Indian law.
4. Data Sharing and Third-Party Disclosures
Bluekites does not sell or rent your personal data to third parties. We share data strictly on a need-to-know basis with verified third-party Data Processors under legally binding confidentiality agreements:
 * Logistics & Warehousing Partners: Shipping details shared for order fulfillment.
 * Travel Service Providers: Passenger and booking details shared with airlines, hotels, cab vendors, and global distribution systems (GDS).
 * Real Estate Partners: Client contact information shared with property developers or verified sellers strictly upon request for site visits.
 * Payment Gateways & Fraud Prevention: To secure online transactions.
 * Statutory Authorities: Disclosures made only when mandated by court orders, law enforcement, or statutory regulations under Indian law.
5. Data Retention and Security Safeguards
 * Security Standards: We implement enterprise-grade technical and organizational security measures, including SSL encryption, secure firewall architecture, and restricted access protocols to prevent unauthorized access, loss, or data breaches.
 * Retention Policy: Personal data is retained only for as long as necessary to fulfill the specified processing purpose or to comply with statutory legal requirements. Data is securely purged or anonymized post the retention window.
6. Rights of the Data Principal (Your Rights)
Under the DPDP Act, 2023, as a consumer/user ("Data Principal"), you hold the following rights:
 * Right to Access: Obtain a summary of personal data being processed by Bluekites.
 * Right to Correction & Erasure: Request correction of inaccurate data or complete deletion of your personal data.
 * Right to Withdraw Consent: Revoke your processing consent at any time (withdrawal does not affect processing conducted prior to revocation).
 * Right of Grievance Redressal: Seek immediate resolution for any privacy concerns through our designated Grievance Officer.
 * Right to Nominate: Nominate an individual to exercise data rights in the event of incapacity or death.
7. Protection of Children's Data
Bluekites platforms are not directed at minors under 18 years of age without verifiable parental/guardian consent. We do not engage in targeted advertising or behavioral tracking of minors.
8. Grievance Officer & Contact Information
In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of the Nodal Grievance Officer for privacy and data protection concerns are:
 * Grievance Officer: Privacy & Compliance Manager
 * Company Entity: Bluekites
 * Email: [Insert Compliance Email Address]
 * Address: [Insert Registered Business Address, India]
 * Response Window: All privacy complaints and data access requests will be acknowledged within 24 hours and resolved within 30 days.