Privacy Policy

The Virtuous Group (that includes 'We/we', 'us' and 'Our/our' in this policy) is committed to protecting the privacy and security of all personal information entrusted to us by visitors, clients, suppliers, and partners. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000 and applicable rules framed thereunder.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

The Virtuous Group (trading under 3 registered companies namely Virtuous Industries LLP,
Virtuous Global USA LLC & Virtuous Global Exim Pvt. Ltd.) is a global export, sourcing, and supply chain solutions company headquartered in Noida, Uttar Pradesh, India and serves both Indian MSMEs and international buyers.

In this document, 'The Virtuous Group' includes all our registered companies wherever used and need not mention these companies separately for the sake of simplicity. Hence, the poilcy is applicable to each of our companies mentioned at the start of this section.

Data Fiduciary / Data Controller: The Virtuous Group acts as the Data Fiduciary/Controller under
India's Digital Personal Data Protection Act, 2023 and The Information Technology (IT) Act, 2000
as and where applicable in the capacity of a commercial company website hosted on public domain.

This Privacy Policy applies to:

• All visitors to our website having domain name as virtuousind.com, regardless of the geographic location, type of communication device or network
• Prospective and existing clients, buyers, and suppliers who interact with us online
• Individuals who contact us via email, phone, WhatsApp, or social media
• Newsletter subscribers and eBook download requestors
• Partners, consultants, and third parties who provide or receive information through our website

This Policy is governed by and construed in accordance with the laws of India. Disputes shall be subject to the exclusive jurisdiction of courts in Noida / Gautam Buddha Nagar, Uttar Pradesh, India.

Note for International Clients:

3.1 Personal Identification Data

• Full name
• Business and personal email address
• Phone number and WhatsApp contact
• Company name, designation, and website
• Country and region of business operations

3.2 Inquiry & Communication Data

• Nature of inquiry (export, sourcing, partnership)
• Product categories or services of interest
• Messages and correspondence
• Voluntarily shared attachments (specifications, credentials)

3.3 Technical & Usage Data

• IP address and approximate geographic location
• Browser, OS, device type
• Pages viewed, time spent, referral source
• Interaction data (clicks, scrolls, navigation patterns)

3.4 Cookies & Tracking Technologies

• Essential Cookies — required for site functionality
• Analytics Cookies — Google Analytics and similar
• Marketing/Preference Cookies — retargeting where applicable
• Third-Party Cookies — embedded social media and YouTube

3.5 Social Media Interactions

Platforms like Facebook, LinkedIn, Instagram, and X may collect data under their own privacy policies. We receive only aggregated insights unless you contact us directly.

3.6 Data You Voluntarily Submit

• eBook download requests
• Newsletter sign-ups
• Testimonials or feedback
• Business credentials for qualification

We do not use your data for automated decision-making or profiling and process it only for specific, legitimate business purposes as stated below:

• Service Delivery — responding to inquiries, processing sourcing/export requests, quotations
• Client & Partner Communication — proposals, order updates, shipment and compliance matters
• eBook & Newsletter Distribution — delivering requested resources and opt-in insights
• Website Improvement — analysing usage patterns and optimising user experience
• Compliance & Legal Obligations — Indian and international laws, tax, export-import
• Security & Fraud Prevention — detecting unauthorised access or abuse
• Marketing Communications — only where you've opted in; opt out anytime
• Supplier & Buyer Qualification — evaluating partners as part of supply chain services

For EU/EEA and UK users, we process personal data under these lawful bases:

• Contractual Necessity — to perform or prepare a contract
• Legitimate Interests — business development, security, analytics
• Consent — marketing, newsletters, non-essential cookies
• Legal Obligation — GST, export regulations, court orders

For India's DPDPA, processing is based on consent and/or legitimate uses as defined under the Act.

6.1 Operational Partners

• Verified Indian suppliers and manufacturers
• Export logistics and freight forwarders
• Quality inspection agencies and auditors
• Customs clearing agents and trade compliance consultants
• Third-party warehousing and supply chain providers

6.2 Technology & Service Providers

• Website hosting, cloud storage, IT services
• Email marketing and CRM platforms
• Analytics providers (e.g., Google Analytics)
• Payment processors (if applicable in future)

6.3 Legal & Regulatory Disclosure

We may disclose information to government authorities or law enforcement where required by law, court order, or to protect rights and safety.

6.4 Business Transfers

In the event of a merger, acquisition, or sale, your data may be transferred subject to the same privacy protections. We will notify you of such transfers as required under applicable law.

We retain your personal data only as long as necessary:

• Active business relationships — duration plus statutory period
• Inquiries that don't convert — up to 2 years from last interaction
• Newsletter/eBook subscribers — until you unsubscribe
• Legal and compliance records — as per Indian law
• Analytics data — per platform retention settings

After the applicable period, data is securely deleted or anonymised.

We implement industry-standard technical and organisational measures:

• SSL/TLS encryption for data transmitted via our website
• Secure email communication practices
• Access controls on a need-to-know basis
• Regular review of security practices and policies
• Contractual data protection obligations on all third-party partners

While we take all the necessary and possible precautions including the updated security certificates, firewalls and trusted hosting services only for our website, it is not practical for us to claim total ownership of data protection in any manner as no method of internet transmission is absolutely secure and accordingly, no legal responsibility can be imposed on us in case of any data breach in any circumstances whatsoever. We highly recommend that you follow safe browsing practices and use the authorised communication networks only to stay protected all the time. Your safety is our priority.

Depending on your jurisdiction, you have the following rights:

To exercise any of these rights, contact us at [email protected]. We respond within 30 days (or the statutory period). We may need to verify your identity first.

Our website and services are intended solely for business use by individuals 18+. We do not knowingly collect data from minors. If you believe we have, contact us immediately for prompt deletion.

Our website may link to third-party sites, blog platforms (LinkedIn Pulse, Medium, Blogger), and social media. This Privacy Policy does not govern those external sites. Embedded YouTube content collects data per Google's privacy policies.

When you contact us via these channels, your phone number, name, and conversation content are stored in our business records. WhatsApp messages are subject to WhatsApp's own Privacy Policy. We do not share WhatsApp data for marketing without explicit consent. Reply 'STOP' or email us to be removed from broadcast lists.

We may use AI-enabled tools, CRM systems, email automation, lead research platforms, analytics, and productivity software to organise inquiries and improve service delivery. We do not intentionally input highly sensitive personal data unless required with appropriate safeguards.

We may collect publicly available business contact information from company websites, professional networks, trade directories, exhibitions, chambers of commerce, and authorised B2B data providers for legitimate development, sourcing, and partnership outreach. Recipients may opt out at any time.

As part of our services, we may collect supplier and buyer qualification info including credentials, product categories, certificates, compliance documents, business registrations, technical specs, and commercial correspondence. Access is restricted on a need-to-know basis.

Confidential business information including technical specs, drawings, RFQs, pricing, quotations, designs and inspection reports is handled under our confidentiality practices, NDAs, or applicable business terms. Do not submit sensitive personal information unless necessary.

For material changes, we will endeavour to notify registered subscribers or active clients via email. Continued use of our website following changes constitutes your acknowledgment of the updated policy.

For any questions, concerns, or complaints related to this Privacy Policy, feel free to contact us:

Disclaimer: This document is for informational purposes and does not constitute legal advice. For jurisdiction-specific compliance guidance, please consult a qualified legal professional in India.

The DPDPA 2023 and its rules are still being finalised by the Government of India. We will update this Policy as and when final rules and notifications are issued or any new changes are made in the prevailing laws.