Privacy Policy
1. Introduction
This Privacy Policy explains how Ballia Corpus collects, uses, stores and protects personal information when you interact with balliacorpus.com (the “Website”) or communicate with us in the context of our contract manufacturing, private‑labelling and third‑party manufacturing services. Ballia Corpus specialises in producing nutraceuticals, dietary supplements, organic cosmetics and personal care products for business clients worldwide. By accessing the Website or submitting information to us, you agree to the practices described in this Policy.
This Policy is intended for a global audience. It is designed to meet the requirements of relevant data protection laws, including the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and India’s Digital Personal Data Protection Act (DPDP). Where local laws provide stronger protections, we will comply with those obligations. We do not conduct direct consumer sales on the Website; our services are directed towards businesses. However, personal data may still be collected from individual representatives of business partners and prospective clients.
2. Information We Collect
We may collect and process the following categories of personal information:
2.1 Contact Information
Personal identifiers such as your name, job title, company name, business email address, postal address, telephone number and other contact details you provide when submitting inquiries or requests for quotations.
2.2 Business and Project Information
Details about your company’s manufacturing requirements, product specifications, formulations, packaging preferences, order quantities, and any other information necessary to prepare proposals or fulfil contracts.
2.3 Technical Data
Information about your device and interaction with the Website, such as IP address, browser type and version, operating system, referring website, pages visited, time spent on the Website, and cookies or similar identifiers. For more information on our use of cookies, please see our Cookie Policy.
2.4 Communications
Records of communications with you, including emails, phone calls, meeting notes, purchase orders and contracts, as well as the content of your inquiries and our responses.
2.5 Sensitive Information
We do not intentionally collect sensitive personal information (such as health data, racial or ethnic origin, religious beliefs, or biometric identifiers) through the Website. We also do not seek payment card details via the Website. Please refrain from submitting sensitive data through general inquiry forms.
3. How We Use Personal Information
We use the personal information we collect for legitimate business purposes, including:
Providing Services. To respond to inquiries, develop product formulations, prepare quotations, negotiate and conclude contracts, manufacture products and deliver services.
Communication. To contact you regarding your inquiries, orders, or projects; to provide updates on our products, services and capabilities; and to respond to support requests.
Business Development and Marketing. To send newsletters, updates or promotional materials about our services that may be of interest to you, in compliance with applicable marketing laws and your preferences.
Regulatory Compliance. To comply with legal obligations (such as tax, customs, pharmaceutical and food safety regulations) and to meet record‑keeping requirements.
Fraud Prevention and Security. To protect our business and the Website, prevent fraud and misuse, and ensure the safety and integrity of our networks and systems.
Analytics and Improvement. To understand how users interact with the Website, improve its functionality and content, and enhance our services.
4. Legal Bases for Processing
Depending on your jurisdiction, we rely on one or more of the following legal bases to process personal information:
Performance of a Contract. Processing is necessary to enter into or perform a contract with you or your company (e.g., preparing quotations, manufacturing products, delivering services).
Legitimate Interests. We have a legitimate interest in communicating with business partners, improving our products and services, safeguarding the Website, and growing our business. We always balance our interests against your rights and freedoms.
Consent. We rely on your consent for certain marketing communications and, where required, for the use of non‑essential cookies or analytics tools. You may withdraw consent at any time.
Legal Obligations. Compliance with applicable laws and regulations may require us to process or retain personal information (e.g., tax, customs, regulatory inspections).
5. Sharing Personal Information
We do not sell personal information. We may share personal information with the following categories of recipients:
Service Providers. Third parties who perform services on our behalf, such as contract manufacturers, logistics providers, laboratory and quality‑testing facilities, IT providers, cloud hosting, customer relationship management platforms, consultants and marketing agencies. These providers are bound by contractual obligations to protect personal information and use it only for the purposes we specify.
Business Partners. Suppliers or third‑party manufacturers with whom we collaborate to fulfil your project requirements. We only share information necessary for production, quality control and delivery.
Legal and Regulatory Authorities. Government agencies, regulators or law enforcement when required by law, court order or other legal process, or to protect the rights, property or safety of Ballia Corpus, its employees, clients or the public.
Professional Advisors. Accountants, auditors, insurers and lawyers engaged by Ballia Corpus who are bound by confidentiality obligations.
Corporate Transactions. If Ballia Corpus engages in a merger, acquisition, corporate reorganisation or sale of assets, your information may be transferred as part of that transaction and continue to be used in accordance with this Policy.
6. Cross‑Border Data Transfers
Because Ballia Corpus serves clients worldwide, your personal information may be processed in or transferred to jurisdictions outside your country of residence. We implement appropriate safeguards to ensure that such transfers comply with applicable data protection laws, such as using Standard Contractual Clauses approved by relevant authorities or transferring to jurisdictions recognized as providing adequate protection for personal data. By using the Website or providing information to us, you acknowledge and consent to these cross‑border transfers.
7. Security Measures
We implement appropriate technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include, but are not limited to:
Secure servers and firewalls
Encryption of data during transmission and, where appropriate, at rest
Access controls and authentication protocols
Regular security assessments and training for staff
Despite these precautions, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we strive to protect your information to the best of our ability.
8. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law and legitimate business needs. Factors determining retention periods include:
The nature of your relationship with us and the status of any contracts or projects
Legal obligations to maintain records (e.g., tax or regulatory requirements)
Statutory limitation periods for potential claims
When personal information is no longer needed, we will securely delete or anonymise it.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
Right to Access. Obtain confirmation that we process your personal information and request a copy of that information.
Right to Rectification. Request correction of inaccurate or incomplete personal information.
Right to Deletion. Request that we delete your personal information when it is no longer needed or processing is based on consent that you withdraw, subject to certain exceptions.
Right to Restrict Processing. Request that we restrict processing of your data under certain circumstances (e.g., while verifying accuracy).
Right to Object. Object to the processing of your personal data based on our legitimate interests or for direct marketing.
Right to Data Portability. Request a copy of your data in a structured, commonly used, machine‑readable format and have it transferred to another controller (where technically feasible).
Right to Withdraw Consent. Withdraw your consent at any time for processing activities based on consent. This will not affect prior processing.
Right to Lodge a Complaint. Lodge a complaint with a supervisory authority or data protection regulator if you believe we have not complied with data protection laws.
