← All policies

Privacy Notice

Effective 29 August 2026

BNCW Enterprises Private Limited ("BNCW", "we", "us") operates bncw.in. This notice explains the personal data the website processes, why it is processed, who receives it, how long it is kept, and how to raise a request or grievance.

Who is responsible

BNCW Enterprises Private Limited is responsible for the processing described in this notice.

Privacy and grievance contact: hello@bncw.in

Postal address: A1/87, 4th Floor, Main Road, Near Netaji Subhas University of Technology, Dwarka, New Delhi, Delhi 110059, India

Data we process and why

When you visit the website

We process:

  • browser and device information, language, approximate location derived from your IP address, referring page, pages viewed, and visit times;
  • first-party Google Analytics client and session identifiers; and
  • interactions such as page views and calls-to-action, including campaign parameters and the service page that led you to the contact page.

We use this data to understand website traffic, measure which content and campaigns are useful, diagnose problems, prevent abuse, and improve the website. Contact-form text, names, email addresses, and phone numbers are not sent to Google Analytics.

When you contact us

The contact form requires your name, email address, enquiry topic, and message. Company and phone number are optional. The form backend also receives your IP address, browser user-agent, first-touch campaign and referrer information, recent page history, and Google Analytics client and session identifiers when those cookies are available.

We use this information to deliver and respond to your enquiry, route it to the appropriate team, prevent spam and abuse, keep a record of the conversation, and take steps you request before entering into a business relationship. If you do not provide the required fields, we cannot process the form.

Infrastructure and security

Our hosting, content-delivery, and form systems process ordinary request data such as IP address, URL, time, user-agent, and diagnostic or security events. We use it to serve and secure the website, investigate failures, and protect our systems and users.

We do not currently use this website for user accounts, online payments, personalised advertising, person-level visitor identification, or session replay. We will update this notice before enabling processing that materially changes these statements.

Service providers and disclosures

We do not sell or rent personal data. We disclose only what is needed to operate the website and handle enquiries:

  • Google LLC processes website measurement data through Google Tag Manager and Google Analytics 4. Google Tag Manager loads and controls our analytics tags; Google Analytics processes the resulting usage data. These services are governed by the Google Analytics Terms, Google Ads Data Processing Terms, and Google Privacy Policy.
  • Amazon Web Services, Inc. provides infrastructure used to receive, store, and email contact-form submissions. See the AWS Privacy Notice.
  • Cloudflare, Inc. provides content delivery, network security, and DNS services for the website. See the Cloudflare Privacy Policy.
  • Enquiry details may pass through the email, workflow, or messaging services configured to notify our team. We use those providers to deliver and handle the message internally, subject to their terms.

We may also disclose data when required by law, to protect rights or safety, or as part of a merger, acquisition, financing, or sale of the business, subject to appropriate safeguards.

Retention

  • Google Analytics event-level and user-level data is configured to be retained for 14 months. Aggregated reports may remain after the underlying identifiers expire or are deleted.
  • Google Analytics cookies normally last for 2 years and their expiry may be refreshed when you revisit. Browser limits can shorten that period. See the Cookie Policy for details.
  • The service-page attribution stored in your browser's session storage lasts until the browser session ends.
  • First-touch campaign information and up to 20 recent page views are used for up to 90 days so an enquiry can be attributed across visits. An expired trail is discarded on the next visit and can be removed earlier by clearing site data.
  • Enquiries and related correspondence are kept while needed to respond, manage the resulting business relationship, maintain necessary business or legal records, resolve disputes, or meet legal obligations. We delete or anonymise them when they are no longer needed, and consider verified deletion requests subject to any lawful need to retain them.
  • Infrastructure and security records are retained for the operational periods set by the relevant provider and longer only when needed to investigate an incident or comply with law.

International processing

Our providers may process data in India and other countries. When personal data is transferred internationally, we rely on the provider's contractual and organisational safeguards and any transfer mechanism required by applicable law.

Your choices and rights

Depending on applicable law, you may ask us to:

  • confirm whether we process your personal data and provide a summary;
  • correct incomplete or inaccurate data;
  • erase personal data that is no longer needed or must otherwise be deleted;
  • withdraw consent where processing relies on consent;
  • identify the service providers or other recipients involved; or
  • address a grievance about our handling of your data.

Email hello@bncw.in with enough detail to identify the relevant data and request. We may ask for proportionate information to verify your identity. We will acknowledge and address the request within the period required by applicable law.

If you are not satisfied with our response, first allow us a reasonable opportunity to resolve the grievance. You may then complain to the Data Protection Board of India or another competent data-protection authority where applicable, using the official procedure published by that authority. The Ministry of Electronics and Information Technology publishes India's current data-protection rules and official notices.

Children

The website is directed to businesses and is not intended for children. We do not knowingly solicit personal data from children through it. A parent or guardian who believes a child submitted data may contact us to request its removal.

Security

We use reasonable technical and organisational safeguards designed to protect personal data. No internet transmission or storage system can be guaranteed completely secure. Please do not send secrets, credentials, government identifiers, financial information, or other sensitive data through the contact form.

Changes to this notice

We may update this notice when our processing or legal obligations change. The effective date at the top identifies the latest version. We will provide additional notice when a material change requires it.