Privacy Policy

Bagful International LLP ("Bagful", "we", "us") operates bagful.net and control.bagful.net. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, purchase our services, or interact with our team.

By using our services, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

1. Information We Collect

Information you provide directly

When you create an account, place an order, or contact us, we collect:

• Full name, business name, and contact details (email, phone number)
• Billing and postal address
• GST Identification Number (if provided)
• Payment information (processed securely via CCAvenue — we do not store card details)
• Domain names registered or transferred through us
• Support tickets, emails, and chat messages you send us

Information collected automatically

When you visit our website, we automatically collect:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent on each page, and referring URLs
• Cookies and similar tracking technologies (see our Cookie Policy)

Information from third parties

We may receive information from domain registries (ICANN, .IN Registry), payment processors (CCAvenue), and analytics providers (Google Analytics).

2. How We Use Your Information

We use your information to:

• Provision, manage, and support your hosting, domain, and cloud services
• Process payments, generate invoices, and maintain billing records
• Communicate with you about your account, services, and support requests
• Send service-critical notifications (maintenance, security alerts, renewals)
• Improve our website, services, and customer experience
• Comply with legal and regulatory obligations
• Detect and prevent fraud, abuse, or security incidents

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Basis for Processing

We process your personal data on the following grounds:

• Contract performance: To deliver the services you have purchased
• Legitimate interest: To operate and improve our business, prevent fraud, and ensure security
• Legal obligation: To comply with Indian tax law, IT Act 2000, and applicable regulations
• Consent: Where you have explicitly opted in, such as for marketing communications

4. Data Sharing

We share your data only as necessary to deliver our services:

• Payment processors: CCAvenue, for secure payment processing
• Domain registries: ICANN-accredited registrars and ccTLD registries, as required for domain registration
• Infrastructure partners: Akamai (Linode), AWS, and Microsoft Azure, when your services are provisioned on their platforms
• Analytics: Google Analytics, for website usage analysis (anonymised where possible)
• Legal authorities: When required by law, court order, or to protect our rights

5. Data Storage and Location

Your data is primarily stored on servers located in India. Where your services are hosted in other regions (based on your requirements and target audience), your service data may reside in those regions. Billing and account data is stored in India.

We implement industry-standard security measures including encrypted connections (TLS/SSL), firewalled server infrastructure, regular backups, and access controls limited to authorised personnel.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. After account termination:

• Billing and tax records are retained for 8 years as required by Indian tax law
• Support correspondence is retained for 3 years
• Server logs and access records are retained for 90 days
• You may request deletion of non-essential data at any time

7. Your Rights

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for optional processing activities
• Request a copy of your data in a portable format
• Object to processing based on legitimate interests

To exercise any of these rights, contact us at support@bagful.net. We respond to all requests within 30 days.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users or through a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.