PRIVACY STATEMENT & COOKIE POLICY
How We Safeguard Your Information
Whether you are browsing our resources or purchasing specialized nutrition products, we handle your personal data with the highest standards of care and confidentiality. Learn how we collect, store, and use your information, and how you can manage your cookie preferences.
Scope
Compact India Private Limited (“CIPL”) is part of Compact food solutions, which is committed to protecting the personal data of individuals and to comply with the Indian data privacy norms including Digital Personal Data Protection Act, 2023 together with the rules made thereunder (the “DPDP Act”). This Statement explains what personal data we collect, why and how we use and retain it, the legal grounds relied upon for processing, the safeguards we implement, the rights available to you, and how to exercise those rights.
Compact India Private Limited (“CIPL”) is part of Compact food solutions, which is committed to protecting the personal data of individuals and to comply with the Indian data privacy norms including Digital Personal Data Protection Act, 2023 together with the rules made thereunder (the “DPDP Act”). This Statement explains what personal data we collect, why and how we use and retain it, the legal grounds relied upon for processing, the safeguards we implement, the rights available to you, and how to exercise those rights.
Who is the Data Fiduciary
Compact India Private Limited (“CIPL”) is part of Compact food solutions, which is committed to protecting the personal data of individuals and to comply with the Indian data privacy norms including Digital Personal Data Protection Act, 2023 together with the rules made thereunder (the “DPDP Act”). This Statement explains what personal data we collect, why and how we use and retain it, the legal grounds relied upon for processing, the safeguards we implement, the rights available to you, and how to exercise those rights.
Compact India Private Limited (“CIPL”) is part of Compact food solutions, which is committed to protecting the personal data of individuals and to comply with the Indian data privacy norms including Digital Personal Data Protection Act, 2023 together with the rules made thereunder (the “DPDP Act”). This Statement explains what personal data we collect, why and how we use and retain it, the legal grounds relied upon for processing, the safeguards we implement, the rights available to you, and how to exercise those rights.
What Personal Data We May Collect
CIPL collects only such personal data which is reasonably necessary for the purposes listed in the notices for each service. An inclusive list of such categories (“Personal Data”) is given below:
- Identity and Contact details: name, date of birth, gender, postal address, e-mail, mobile number, passport, PAN and Aadhar card details, etc.
- Authentication and security: passwords (hashed), authentication tokens, IP address, device identifiers, browser/OS, log files (for security, fraud-prevention and system operation).
- Communications: content of e-mails/messages you send to us (to respond to enquiries).
- Recruitment / applicant data: CVs, application forms, references (separate applicant privacy notice applies).
- Cookies and similar: Session cookies strictly necessary for website function (we do not use non-essential tracking cookies without separate valid consent).
- Demographical data: such as your age, gender, country of residence, preferred language, passport number, citizenship, date of birth, to meet our contractual or legal obligations to airport, port, customs, or other regulatory authorities.
- Social media: username and any other profile data when you submit any enquiry, comment, etc. on our social media pages
How and Why We Collect and Use Personal Data
We may collect your personal data:
When you visit our website
We collect data through cookies during your access or use of the website https/www.compactfoods.com and allied websites/ digital platforms or applications (“Website”).
Our Website may have links to third-party websites. This privacy statement does not apply to such third-party websites.
We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. Prior to using any third-party websites, we recommend that you read the privacy statements applicable to such websites.
When you Contact us
When you contact us, for example through our Websites or in other ways, we will process personal data about you.
The personal data we collect will typically be contact information such as name, email address, telephone number and other information you share with us, which is necessary to collect to respond to your inquiry.
The basis for this processing is our legitimate interest in being able to respond to your inquiry.
Our business activity
When we enter into a business partnership with you (or the company you work for) for providing or availing any services.
It may be necessary for us to process personal data about you if you are employed with one of our suppliers, customers, or business partners.
The personal data we process in this context will most often be contact information such as your name, email address and telephone number, as well as information about your employer and your position.
Furthermore, we will process other information which you provide to us, or which emerges from our contact with you, to the extent this is necessary for the specific task.
The basis for this processing is our legitimate interest in being able to perform tasks linked to our business activity, including for example enabling a cooperation with your employer.
Statutory obligations
We are required by law to process personal data in certain cases, for instance to document compliance with obligations within tax, accounting or legal processes.
In this connection, it may be necessary to process personal data about you.
This could, for example, be necessary if your name is listed on an invoice or contract subject to retention obligations.
The legal basis for such processing is the legal obligation to which we are subject.
Recruitment
When you apply for a job with us, or send us an open application.
How and Why We Collect and Use Personal Data
We may collect your personal data:
When you visit our website
We collect data through cookies during your access or use of the website https/www.compactfoods.com and allied websites/ digital platforms or applications (“Website”).
Our Website may have links to third-party websites. This privacy statement does not apply to such third-party websites.
We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. Prior to using any third-party websites, we recommend that you read the privacy statements applicable to such websites.
When you Contact us
When you contact us, for example through our Websites or in other ways, we will process personal data about you.
The personal data we collect will typically be contact information such as name, email address, telephone number and other information you share with us, which is necessary to collect to respond to your inquiry.
The basis for this processing is our legitimate interest in being able to respond to your inquiry.
Our business activity
When we enter into a business partnership with you (or the company you work for) for providing or availing any services.
It may be necessary for us to process personal data about you if you are employed with one of our suppliers, customers, or business partners.
The personal data we process in this context will most often be contact information such as your name, email address and telephone number, as well as information about your employer and your position.
Furthermore, we will process other information which you provide to us, or which emerges from our contact with you, to the extent this is necessary for the specific task.
The basis for this processing is our legitimate interest in being able to perform tasks linked to our business activity, including for example enabling a cooperation with your employer.
Statutory obligations
We are required by law to process personal data in certain cases, for instance to document compliance with obligations within tax, accounting or legal processes.
In this connection, it may be necessary to process personal data about you.
This could, for example, be necessary if your name is listed on an invoice or contract subject to retention obligations.
The legal basis for such processing is the legal obligation to which we are subject.
Recruitment
When you apply for a job with us, or send us an open application.
When you participate in our events
If you sign up for any of our events, we can register personal data such as your name, contact information and, if you so desire, preferences related to food and beverage.
Social Media pages
We may collect your personal data through our social media pages.
As administrators of our pages on the social media platforms, we are joint data fiduciaries with the relevant social media provider for processing of the data generated through such pages, therefore, such social media provider shall be solely responsible for processing of your personal data as undertaken by them without our involvement.
Other means
When you voluntarily provides your personal information through any online or offline interactions.
Please remember that we may not be able to provide the services or products you have requested or fulfill our contractual obligations if you do not wish and consent to share your personal data with us.
We may seek, either directly or through our trusted third parties, your express consent to collect and process your personal data for a specific purpose.
CIPL collects and process personal data only for certain legitimate uses as mentioned here in below:
Performing obligations under any Contract
We may need to process your personal data to:
- Store (and update) your contact details in our systems so that we can contact you in relation to our agreements.
- Manage and maintain our relationship with you, including responding to an inquiry, question or comment made by you and providing you with other customer support.
- Processing the payment in a secure manner in respect of transactions took place pursuant to commercial agreements between us.
- Completion of order and shipping of the products being ordered.
Know Your Client
Processes to identify potential risk factors we need to take into consideration including sharing personal data with credit or third-party agencies before transacting with you.
Marketing and Events
- To conduct marketing activities, such as sending promotional offers/material, newsletters, sending merchandize or targeted advertisements based on your preferences and interests.
- In the context of trade fair events/shows, we may collect photos/videos in which individual(s) are not in focus, photos/videos of large groups that mainly capture the overall impression of the event and/or in which individual(s) are in the background, photos of person(s) that play a central role in the event (e.g., speakers).
- If such photographic materials (photos/videos) of you in which you are prominently visible are published in our PR/press releases, you may object anytime at such processing by contacting our grievance officer.
Legal Obligations
- Comply with applicable legal, regulatory or professional requirements, such as archiving and keeping records of the contracts and relevant documents; financial/accounting – tax rules; managing claims and legal files, resolving requests and addressing communications from the competent authorities.
- Protect or enforce our legal rights, for example defending the Company in case of legal disputes.
- Prevention, detection, or investigation of a crime; loss prevention; or fraud.
Job Opportunities
To communicate with you about job or career opportunities about which you have inquired.
Specific Purposes
For any other specific purposes as prescribed in the respective consent form or for which you have voluntarily submitted the information.
Who we share personal data with
We do not rent, sell, or share your personal data to third-parties or non-affiliated companies except to provide the services you have requested.
CIPL only discloses personal data to its Data Processors, service providers, law enforcement agencies or other public authorities where legally required or to such other parties for whom you have given explicit consent.
CIPL contractually requires its Data Processors to process the data only in the manner as instructed by it and to implement adequate security.
Where CIPL transfers personal data to any third-party platforms such as social networks, map services, etc., those providers’ privacy policy apply to the personal data processed on their systems, however CIPL does not control their practices.
We limit the disclosure of Personal Data to our employees, independent contractors including vendors, affiliates, consultants, business associates, service providers and distributors of our services, on a “need-to-know” basis under written contracts, and only if the disclosure will enable that entity to provide us with business, professional, or technical support or fulfil your request.
International Transfer of Your Personal Data
When we share your Personal Data with our affiliated companies or other companies with whom we contract, such companies may be located outside India, in countries with different laws for protection of Personal Data than the laws in India.
However, if we transfer your Personal Data outside India, then we will take steps to ensure that such data will receive at least the same level of protection as if it was being processed within India, in accordance with applicable laws.
How Do We Keep Personal Data Secure
We will take reasonable precautions to protect your Personal Data against loss, misuse, or alteration.
Among other measures, we ensure the security of your Personal Data by means of encryption, password protection and by otherwise restricting access to it.
We maintain reasonable security safeguards appropriate to the risk, as may be applicable, including encryption, tokenisation, access controls, logging and monitoring, network protections, secure storage and secure disposal/erasure practices.
The Rules set out baseline expectations (encryption / virtual tokenisation / access controls / logging / organisational measures) that we commit to observe.
We also require our Data Processors to abide by comparable security obligations and to implement contractual safeguards.
Further, we employ reasonable technological, physical and operational security procedures intended to protect your personal data from loss, misuse, alteration, or unintentional destruction.
We require privacy, information security, and other applicable training on a regular basis for our employees and contractors who have access to personal data.
Unfortunately, the transmission of information via the internet is not completely secure.
Although we will do our best to protect your Personal Data as required by law, we cannot guarantee the security of your Personal Data transmitted to us using unsecured means; any such transmission is at your own risk.
However, please take note that, in case despite our security measures, should there be any data breach of your Personal Data, we shall intimate each of you, whose Personal Data has or is likely to be breached through the email address provided by you for Account creation.
Where we store your Personal Data
CIPL, as part of a global conglomerate, is committed to ensuring that personal data is processed in accordance with this Privacy Statement and applicable data protection laws, regardless of where the data is stored or accessed.
To support our business operations, workforce, and customers, we and our affiliates may engage with trusted third parties—including cloud service providers, suppliers, and technology partners—across various jurisdictions.
We implement appropriate safeguards to ensure that all personal data is handled, secured, and transferred in compliance with relevant legal requirements.
If we transfer your Personal Data outside India, then we will take steps to ensure that such data will receive at least the same level of protection as if it was being processed within India, in accordance with applicable laws.
How long do we keep your Personal Data
The Personal Data collected by the Company is deleted or blocked or erased as soon as the intended purpose for which the Personal Data was collected, is completed or on withdrawal of the consent, whichever is earlier.
We retain your Personal Data in accordance with applicable laws, for a period no longer than is required for the purpose for which it was collected or as required under any applicable law.
However, we may retain data related to you if we believe it may be necessary to prevent fraud or future abuse, to enable us to exercise its legal rights and/or defend against legal claims or if required by law or for other legitimate purposes.
We may continue to retain your data in anonymized form for analytical and research purposes.
Where CIPL intends to treat a purpose as no longer being served and destroy the Personal Data as a result, it will notify the Data Principal at least 48 hours prior to deletion or erasure of the Personal Data.
Your Rights & Duties
You have the right to:
- You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
- Right of access: You have the right to access the personal data and information about the processing of personal data.
- Right to rectification: you have the right to supplement, correct and have your personal data deleted or blocked whenever you wish, as long as we are not required by law to keep the information.
- If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
- You may request for identities of our vendors, affiliates and other entities with whom your Personal Data has been shared by us, along with the description of your personal data so shared.
- You may register a complaint with us for any processing activity related to the processing of your personal data; if you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India – (data protection supervisory authority).
- To nominate another individual who, in the event of your death or incapacity, shall exercise your data protection rights, as stipulated under the preceding paragraphs.
You have the duty to:
- Not to impersonate another person while providing your Personal Data.
- Ensure not to register a false or frivolous grievance or complaint with the us or the Data Protection Board of India.
- Ensure not to suppress any material information while providing your personal data for any documents issued by Government or any of its authorities; and
- Furnish only such information as is verifiably authentic.
- If you have given us your consent to process your Personal Data, you may subsequently withdraw it at any time by contacting us using the details provided in the “How to Contact Us” section or unsubscribe to our communications.
Children & Vulnerable Person
The DPDP Act requires processing personal data of children (below the age of 18) or persons with disability, after obtaining verifiable parental/guardian consent from the parents or lawful guardians.
CIPL does not perform any behavioral tracking or targeted advertising directed at children.
Any data processing likely to be detrimental to a child’s wellbeing is strictly prohibited.
Limitations
CIPL shall not be liable for breach of security during internet transmission of personal information, including any unintended loss, misuse, alteration or disclosure of such information.
Furthermore, notwithstanding anything to the contrary, we will not be responsible for any loss, damage or misuse of personal information, if such loss, damage or misuse is attributable to an event of force majeure or to any reason attributable to you.
Governing Law & Jurisdiction
The laws of India and the prevailing data protection legislation in India shall govern this Privacy Statement.
The courts at Gurugram, Haryana, India alone shall have exclusive jurisdiction to hear and determine any issues relating thereto.
Disclaimer
We shall not be liable for any loss or damage sustained by reason of any disclosure (inadvertent or otherwise) of any information concerning the User’s account and/or their verification process and particulars nor for any error, omission or inaccuracy with respect to any information so disclosed and used whether or not in pursuance of a legal process or otherwise.
The terms in this Privacy Statement may be changed by us at any time.
Please read this Privacy Policy carefully as it affects your rights and liabilities under law.
If you do not accept the Privacy Policy stated herein or disagree with the way we collect and process personal information collected on the Website, please do not use it.
How to Contact us
If you have questions or comments regarding your personal data shared with us, please contact our grievance officer at:
Name: Sunil Kumar
E-mail: sunil.kumar@compactfoods.com
Telephone: +91-9991310826
In the event you are dissatisfied with the actions/inactions taken by the above Grievance Officer, you have the right to appeal to us by providing a written request at:
Appellate Officer:
Name: Nikita Dubey
E-mail: nikita.dubey@compactfoods.com
Telephone: +91-9717693938
We aim to acknowledge and investigate your complaint and shall provide a response within the time period as required under the DPDP Act and Rules.
While making a complaint/request, please provide:
- Your name and contact details.
- Sufficient information to identify yourself (authorisation where you act for another).
- The right(s) you want to exercise and the data/service involved.
- Copies of reasonable ID if required for verification.
If you remain unsatisfied, you may lodge a complaint with the Data Protection Board of India established under the Act (the Board will have digital filing mechanisms) (the “Board”).
The Board shall operate as a digital office and its procedures and contact points will be notified by the Government from time to time and published on the Board’s platform.
Appeals from Board orders lie to the designated Appellate Tribunal.
You may contact the grievance officer for any further information regarding filing of complaint with the Board.