Legal & Compliance

Privacy Policy

Effective Date: June 12, 2026

This Privacy Policy explains how your personal and business information is collected, used, disclosed, and safeguarded when you access the Baalvion Mining platform (the "Platform"), a B2B mineral trade, escrow/settlement, and KYC verification service. Please read this policy carefully.

1. Data Controller Identity

The Platform is operated by Baalvion Industries Private Limited ("we", "us", "our"), the legal entity behind the brand Baalvion Mining Inc., a company incorporated in India.

  • Corporate Identification Number (CIN): U43121OD2025PTC048479
  • Registered Office: C/o Dilip Kumar Kuldeep, Upper Mania, PO Pakjhola, Semiliguda, Koraput, Odisha – 764036, India
  • Headquarters: Altamount Road, Lodha Altamount, Mumbai, Maharashtra – 400026, India
  • Email: trade@baalvion.com · Phone: +91 89512 84770

As the entity that determines the purposes and means of processing personal data on the Platform, we act as the data fiduciary/controller under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian law.

2. Information We Collect

We collect the following categories of data:

  • Account data: name, business email, phone number, login credentials, role, and organisation profile.
  • KYC / identity documentation: identity documents, proof of incorporation, business licences, authorised-signatory details, and verification records required to onboard your organisation.
  • Business & financial data: trade listings, order and settlement records, bank/payout details, tax registrations, and escrow-related information.
  • Usage data: device and browser information, IP address, log data, and interactions with the Platform collected through cookies and similar technologies.

3. Purposes & Legal Bases

We process your data for the following purposes and on the corresponding legal bases:

  • To provide the Platform and perform our agreement with you — account creation, trade facilitation, escrow and settlement (performance of contract).
  • To verify identity and meet KYC/AML obligations — legal obligation and our legitimate interest in preventing fraud.
  • To operate, secure, and improve the Platform — our legitimate interests, subject to your rights.
  • To communicate with you — service notices, support, and (where required) your consent for non-essential communications.

Where the DPDP Act requires consent, we rely on the consent you provide and you may withdraw it at any time.

4. Cookies & Tracking

We use cookies and similar technologies to operate the Platform, remember your preferences, and understand usage. For full details on categories, retention, and how to manage your choices, see our Cookie Policy.

5. Data Sharing & Sub-Processors

We do not sell your personal data. We may share data with the following generic categories of recipients, strictly as needed:

  • Identity-verification and KYC/AML screening service providers.
  • Payment, escrow, and settlement service providers.
  • Cloud hosting, storage, and infrastructure providers.
  • Analytics, security, and communications service providers.
  • Professional advisers, auditors, and regulators or authorities where legally required.

Sub-processors are bound by contractual obligations to protect your data and process it only on our instructions.

6. International Transfers

Where data is transferred or processed outside India, we take steps to ensure such transfers comply with the DPDP Act and applicable law, including contractual safeguards with recipients. We do not transfer personal data to any jurisdiction restricted by the Government of India.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described above:

  • Account and profile data: for the life of your account and a reasonable period thereafter (typically up to 1–3 years), unless a longer period is required by law.
  • KYC and transaction records: retained for the period required under applicable AML and record-keeping obligations (commonly 5–8 years from the end of the business relationship or transaction).
  • Usage and log data: typically retained for a shorter period (often up to 12–24 months) for security and analytics.

When data is no longer required, we securely delete or anonymise it.

8. Security Measures

We implement reasonable technical and organisational measures to protect your data, including encryption in transit and at rest, role-based access controls, network safeguards, and ongoing monitoring. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

9. Your Rights

Subject to the DPDP Act and applicable law, you have the right to:

  • Access a summary of the personal data we process about you.
  • Correction of inaccurate or incomplete data.
  • Erasure of your data, subject to legal retention obligations.
  • Portability of certain data you have provided.
  • Grievance redressal and the ability to nominate another person to exercise rights in case of incapacity or death.

To exercise any right, email trade@baalvion.com with your request and sufficient detail to verify your identity. We will respond within the timeframes required by applicable law.

10. Grievance Officer

In accordance with the DPDP Act and the Information Technology Act, 2000 (and the IT Rules, 2021), you may contact our Grievance Officer for any concern relating to the processing of your data:

Grievance Officer (designation)

Baalvion Industries Private Limited

C/o Dilip Kumar Kuldeep, Upper Mania, PO Pakjhola, Semiliguda, Koraput, Odisha – 764036, India

Email: trade@baalvion.com

We will acknowledge and address grievances within the timeframes prescribed under applicable law.

11. Children's Data

The Platform is intended solely for business (B2B) use by adults authorised to act on behalf of an organisation. It is not directed at children, and we do not knowingly collect personal data of children. If we learn that we have collected such data, we will delete it.

12. Breach Notification

In the event of a personal-data breach, we will assess the incident and notify the relevant Data Protection Board and affected individuals where required, in the manner and within the timeframes prescribed by the DPDP Act and applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by other appropriate means. The "Effective Date" above indicates when this version took effect.

14. Contact Us

For any questions about this Privacy Policy or our data practices, contact Baalvion Industries Private Limited at trade@baalvion.com or +91 89512 84770.

This document is provided for transparency and does not constitute legal advice. Baalvion Mining Inc. is a brand operated by Baalvion Industries Private Limited, incorporated in India under CIN U43121OD2025PTC048479.