Privacy Policy

Welcome to BachatLal ("we," "our," or "us"). We operate the business discovery and listing portal accessible via https://bachatlal.com.

We are committed to respecting your privacy and protecting the personal and business information you share with us. This Privacy Policy explains what information we collect, how we process and protect it, and the choices available to you regarding your data.

By accessing or using BachatLal, creating an account, or submitting a business listing or customer enquiry, you acknowledge that you have read and understood the practices described in this policy.

We collect information that is necessary to deliver our discovery services, authenticate users, facilitate inquiries between customers and merchants, and verify business authenticity.

The types of information collected depend on how you interact with BachatLal—whether as a general visitor browsing directory listings, a registered user, or a business owner managing a profile.

When you use BachatLal to browse, submit feedback, or send a general inquiry through our contact channels, we may collect:

• Full name and contact email address
• Phone number (when provided for callbacks or messaging)
• Subject line, message content, and category selections
• Customer review ratings, comments, and submitted feedback

When you register and list a business on BachatLal, we collect details necessary to display your public business storefront:

• Trading name, legal entity name, and brand description
• Physical address, landmark, city, postal code, and GPS map coordinates
• Official business phone numbers, WhatsApp contact numbers, and public email
• Primary category, subcategories, amenities, and operational hours
• Social profile links (Instagram, Facebook, LinkedIn, Twitter/X)
• Verification documents (such as GSTIN, trade licenses, or utility records submitted strictly for admin verification)

When creating an account to manage business listings or save preferences, we collect your name, email address, password hash, and role permissions. Passwords are cryptographically hashed and never stored in plain text.

Session cookies and tokens are utilized solely to keep you securely signed in to your Business Dashboard.

When a visitor submits an inquiry form on a published business profile, BachatLal securely transmits the visitor's name, email, phone number, and message to the respective business owner's dashboard and notification feed.

BachatLal does not sell or distribute lead data to unrelated third-party marketing companies.

Business owners may upload visual assets such as logos, cover banners, and storefront photo galleries. These files are securely processed and hosted via modern cloud storage networks (such as Cloudinary and Supabase Storage) to ensure high-speed delivery.

Do not upload photos containing sensitive personal identification numbers or confidential private documents to public gallery fields.

We use the collected information for the following legitimate purposes:

• Publishing and indexing verified business profiles in search results
• Routing customer enquiries directly to business operators
• Authenticating registered users and preventing unauthorized portal access
• Verifying ownership and business authenticity during the verification workflow
• Monitoring platform security, mitigating spam, and enforcing rate limits
• Providing system notifications regarding listing status, reviews, or policy updates

Information designated as public (such as your business name, address, public contact number, photos, and opening hours) is displayed openly across BachatLal so customers can find and contact your establishment.

We do not sell, rent, or lease your private personal contact details to third-party data brokers. Private information is only shared under the following conditions:

• Direct Inquiries: When a user sends an inquiry to a specific business, that business receives the provided details.
• Legal Compliance: When required by applicable Indian law, judicial court orders, or law enforcement requests.
• Protection of Rights: To protect the security, rights, and safety of BachatLal, our users, or the general public.

We partner with vetted infrastructure and cloud service providers to maintain the platform:

• Cloud hosting and deployment (e.g., Vercel)
• Database and authentication storage (e.g., PostgreSQL / Supabase)
• Media optimization and CDN delivery (e.g., Cloudinary)
• Spam prevention and rate limiting (e.g., Upstash Redis)

These providers are bound by strict data protection agreements and only process information as instructed by BachatLal.

We implement industry-standard technical and organizational security measures to protect your data, including HTTPS encryption in transit, cryptographic password hashing, access control lists, and automated rate limiting against brute-force attacks.

While we maintain stringent security protocols, no digital transmission or electronic storage method is 100% immune to potential risks. We encourage users to maintain strong, unique passwords.

BachatLal uses essential cookies to manage authenticated sessions, preserve user preferences, and secure API requests. We do not deploy invasive third-party cross-site advertising trackers.

For comprehensive details on how cookies are utilized and how to manage them, please review our dedicated Cookie Policy.

We retain personal and business listing information for as long as your account remains active or as needed to provide you with directory services. If you delete your account or request listing removal, we will remove public visibility and delete or anonymize personal data, except where required by law or legitimate accounting requirements.

You have the following rights concerning your data on BachatLal:

• Access & Correction: You can review and update your business profile details at any time through your dashboard.
• Account Deletion: You may request the deletion of your account and removal of your business listing.
• Communication Preferences: You can opt out of non-essential promotional notifications while retaining transactional notices.

To exercise any of these rights, contact us at support@bachatlal.com.

BachatLal is designed for general audiences and business owners. We do not knowingly collect personal data from children under the age of 18. If we learn that personal information of a minor has been collected without parental consent, we will promptly take steps to delete such data.

We may update this Privacy Policy periodically to reflect enhancements in our services, statutory requirements, or operational practices. The revised version will be indicated by an updated "Last updated" date at the top of this page.

We encourage you to review this policy periodically to stay informed about how we safeguard your data.

If you have any questions, grievances, or requests regarding this Privacy Policy or our data handling practices, please contact us at: