Loading
Surat → GlobalClick to skip

Legal

Privacy Policy

Draft privacy notice under the Digital Personal Data Protection Act, 2023 (India), the EU GDPR, and UK GDPR governing international commercial trade.

Last updated
2026-09-13
Review status
Internal review
Questions to
hello@trivoxagroup.com

Legal status and review notice

[DRAFT REQUIRING FORMAL LEGAL REVIEW PRIOR TO PRODUCTION USE - NOT CURRENTLY COUNSEL APPROVED]

This policy outlines how Trivoxa Group (Surat, Gujarat, India) collects, stores, and safeguards commercial contact information and technical telemetry. It is prepared in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India), Regulation (EU) 2016/679 (EU GDPR), and the UK Data Protection Act 2018 / UK GDPR.

What we collect, and why

Trivoxa Group is a B2B international trade house. We collect and process personal data exclusively to respond to requests for quotation (RFQs), manage export shipments, coordinate factory audits, and distribute subscribed market intelligence.

  • Commercial contact data: name, corporate title, business email address, corporate telephone number, and company name.
  • Shipment specifications: target product lines, technical grades, estimated order quantities (MOQ), destination ports, and selected Incoterms.
  • Market intelligence subscribers: business email address and opt-in timestamp for category and trade lane updates.
  • Automated security tokens: ephemeral telemetry processed via Cloudflare Turnstile to prevent bot submissions and DDoS attacks.

Processing infrastructure and storage

Form submissions (/rfq, /contact, /api/subscribe) are processed server-side through encrypted transaction channels.

Transactional data is securely persisted in our private database cluster (Supabase / AWS ap-south-1 Mumbai region) using AES-256 encryption at rest and TLS 1.3 in transit.

Commercial notifications and quotations are delivered via Resend with authenticated SPF, DKIM, and DMARC enforcement.

Cookies and client-side storage

trivoxagroup.com does not set advertising, retargeting, or persistent behavioural cookies. We do not run third-party tracking scripts.

Cloudflare Turnstile executes ephemeral, privacy-preserving cryptographic challenges on form pages to distinguish human buyers from automated scrapers without tracking user browsing across third-party websites.

Data sharing and logistics third parties

We never sell, rent, or trade buyer data to commercial data brokers.

Where an export order is executed, strictly necessary shipment details are shared with validated execution partners: our parent mill (Shiveshwar Textiles), partner manufacturing facilities, licensed customs house agents (CHAs), ocean carriers, and destination customs authorities.

Retention and statutory obligations

General commercial inquiries and unexecuted quotation requests are retained for three years from the date of last contact to facilitate re-quotes.

Executed export records, customs manifests, and tax invoices are retained for eight financial years in compliance with Section 17 of the Indian Customs Act, 1962 and Section 36 of the Central Goods and Services Tax (CGST) Act, 2017.

Newsletter subscribers remain on the registry until consent is withdrawn via the one-click unsubscribe mechanism.

Your legal rights

Under the DPDP Act 2023, EU GDPR, and UK GDPR, international buyers and site visitors hold enforceable rights regarding their personal data:

  • Right to access: request a structured copy of all personal data held about you.
  • Right to correction: request rectification of inaccurate commercial or contact records.
  • Right to erasure: request deletion of records where statutory customs retention laws do not mandate preservation.
  • Right to withdraw consent: withdraw consent for market intelligence updates at any time.
  • Right to lodge a complaint: European and British buyers retain the right to complain to their national Data Protection Authority (e.g. the ICO in the UK).

Data Controller and contact details

The Data Fiduciary / Controller is Trivoxa Group, Surat, Gujarat, India.

For privacy questions, access requests, or grievance redressal, write directly to hello@trivoxagroup.com marked for the attention of the Managing Director. All verified requests receive a written response within 30 days.

Questions about this document go to hello@trivoxagroup.com, marked for the attention of the Managing Director.

Contact the group