Legal
Privacy Policy
Effective date: 25 August 2026Last updated: 25 August 2026
1. About this policy
This Privacy Policy explains how Niluza handles personal data when you visit niluza.com, submit a trade enquiry, or communicate with us.
Niluza is currently a business in formation, coordinating Naga King Chilli trade enquiries from Dimapur, Nagaland, India. Until formal company particulars are published, “Niluza”, “we”, “us”, or “our” means the person or business operating the Niluza website and responding to Niluza enquiries.
For privacy questions or requests, contact:
- Email: contact@niluza.com
- Postal address: will be published when company particulars are available.
- India grievance contact: trade enquiries via contact@niluza.com (a named role will be published when appointed).
When Niluza’s legal entity is formed, this policy should be updated with its full legal name, registered address, and registration particulars.
2. Personal data we collect
Information you provide through the trade-enquiry form
The form asks for:
- your name;
- company name;
- phone number, including country code;
- work email address;
- the country in which your company is based;
- product interest: fresh whole, dried whole, or both/not yet decided;
- approximate required volume;
- preferred packing format;
- destination city, port, and country;
- desired timing;
- notes or requirements, including specifications, testing, documentation, or packing requirements; and
- your confirmation that Niluza may use the submitted details to review and respond to the enquiry, as described in this Privacy Policy.
Some fields are required for the form to be submitted. Destination, timing, and notes may be optional where the form identifies them as such.
Please do not include passwords, payment-card details, bank information, government identification numbers, medical information, or other sensitive information in the notes field.
Other communications
If you contact us by email, telephone, or another agreed channel, we may receive your contact and professional details, the contents of your message, documents or specifications you provide, and records of our correspondence.
Technical information
When you access the website, its hosting, network, or security infrastructure may automatically receive standard technical information needed to deliver and protect the site. Depending on the infrastructure actually used, this can include IP address; browser, device, and operating-system information; requested pages and files; date, time, and approximate duration of requests; referring page; and error, security, and diagnostic events.
Niluza does not claim in this policy to use analytics, advertising trackers, or profiling technology. If those technologies are introduced, this policy and any required cookie controls must be updated.
3. How and why we use personal data
We may use personal data to:
- receive, validate, and respond to your enquiry;
- understand the requested product, volume, packing, destination, and timing;
- assess whether an enquiry appears commercially and operationally viable;
- ask follow-up questions;
- discuss potential availability, sourcing, packing, documentation, logistics, and commercial terms;
- prepare or discuss an indicative proposal or quotation;
- maintain enquiry and business-correspondence records;
- protect the website, detect misuse, and troubleshoot technical problems;
- comply with applicable legal, regulatory, accounting, or record-keeping obligations;
- establish, exercise, or defend legal claims; and
- manage the formation and legitimate administration of the Niluza business.
Submitting an enquiry does not create an order, supply commitment, or other contract. We will not use enquiry details for unrelated promotional messages unless we have another lawful basis and provide any notice or choice required by law.
4. Legal grounds for processing
India
Where the relevant provisions of India’s Digital Personal Data Protection Act, 2023 apply, we intend to process personal data based on the consent you provide when submitting an enquiry; your voluntary provision of data for the stated enquiry purpose; any applicable “certain legitimate use” or other lawful ground recognised by the Act; and compliance with legal obligations or the exercise of legal rights.
The Act and Digital Personal Data Protection Rules, 2025 have staged commencement dates. Some operative duties governing notice, consent, security, retention, and individual rights are scheduled to commence after this policy’s inspection date. Niluza intends this policy to support readiness for those requirements, but the rights and duties available at any time are those then in force.
The Information Technology Act, 2000 and associated rules may also apply. The enquiry form is not designed to request categories classed as sensitive personal data or information under the 2011 SPDI Rules. Please do not submit such information through the form.
European Economic Area and United Kingdom
If the EU GDPR or UK GDPR applies, the relevant legal bases may be:
- steps requested before a contract: responding to an enquiry and considering a requested transaction;
- legitimate interests: handling genuine business enquiries, maintaining relevant records, securing the website, and administering the business, provided those interests are not overridden by your rights;
- consent: where we specifically ask for consent and it is the appropriate basis; and
- legal obligations and legal claims: where processing is necessary to comply with law or establish, exercise, or defend legal rights.
Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully. We may retain limited information where another lawful basis requires or permits it.
5. Is providing information mandatory?
You are not legally required to submit a trade enquiry. If you do not provide information marked as required, we may be unable to receive or meaningfully assess it. Optional information can help us understand your requirement but is not necessary merely to contact us.
7. International transfers
Because Niluza receives international enquiries, communications may involve people in more than one country. Niluza should confirm where its website, email, and enquiry systems store or process data before publication.
If personal data is transferred from the EEA, United Kingdom, or another jurisdiction that regulates international transfers, we will use a legally recognised mechanism where required, such as an adequacy decision, approved contractual clauses, or another lawful safeguard. You may contact us for information about safeguards relevant to your data.
8. Retention
We keep personal data only as long as reasonably necessary to review and respond to the enquiry, continue a relevant commercial discussion, maintain appropriate records, comply with applicable duties, and establish, exercise, or defend legal claims.
Retention may depend on whether an enquiry progresses, further communication occurs, or a transaction is agreed. When data is no longer reasonably required, we will delete, anonymise, or securely isolate it, subject to legal and technical limitations. Niluza should adopt an internal retention schedule. No fixed period is stated because no verified retention practice was provided.
9. Security
We use, or will require relevant providers to use, reasonable administrative, technical, and organisational safeguards appropriate to the data and risks involved. No website, email system, or internet transmission can be guaranteed completely secure. Avoid sending confidential or sensitive information unless necessary and an appropriate secure method has been agreed. If a personal-data breach occurs, we will investigate and make notifications required by applicable law.
11. Your choices and rights
You can choose not to submit an enquiry, omit optional information, ask us to stop corresponding, and withdraw consent where processing relies on it.
Subject to applicable law, you may also have rights to:
- obtain information about or access your personal data;
- correct inaccurate or incomplete data;
- request deletion or erasure;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain data in a portable format;
- complain about our handling of your data;
- nominate another person to exercise rights in circumstances recognised by Indian law; and
- avoid a decision based solely on automated processing where applicable law provides that right.
We do not currently state that enquiry decisions are made solely by automated means.
To make a request, email contact@niluza.com. Describe your request and provide enough information to identify the relevant records. We may request proportionate verification. Rights are subject to legal conditions, exceptions, and commencement of relevant statutory provisions.
12. Additional information for people in India
Where applicable Indian provisions are in force, you may raise a grievance using:
- Grievance contact: trade enquiries (a named individual or role will be published when appointed).
- Email: contact@niluza.com
- Postal address: will be published when company particulars are available.
We will respond within the period required by applicable law. Where the DPDP Act provides access to the Data Protection Board of India, the applicable statutory grievance process may need to be completed first.
A Data Protection Officer will be identified only if Niluza is legally required to appoint one, including if designated a Significant Data Fiduciary. No such designation or appointment is claimed.
13. EEA and UK complaints
If the EU GDPR applies, you may complain to the supervisory authority in the EEA country where you live, work, or believe an infringement occurred. Niluza should assess whether an EU representative is required under Article 27; no EU establishment or representative is claimed.
If the UK GDPR applies, you may complain to the UK Information Commissioner’s Office at ico.org.uk. Niluza should assess whether a UK representative is required; no UK establishment or representative is claimed.
14. Children
The website and form are intended for adults acting in a business or professional capacity and are not directed to children. Do not submit an enquiry if you are below 18 or below the age at which you can validly provide the information under applicable law. If we learn that a child submitted personal data, we will take reasonable steps to remove it unless retention is required by law. A parent or guardian may contact contact@niluza.com.
15. Third-party websites
The website may link to third-party websites. Their handling of personal data is governed by their own policies. Niluza is not responsible for third-party privacy practices.
16. Changes to this policy
We may update this policy when the business, website, enquiry process, providers, or law changes. The current version will be posted on niluza.com with an updated date. If a change materially affects previously collected data, we will provide any additional notice or choice required by law.
17. Contact and complaints
- Niluza
- Email: contact@niluza.com
- Address: will be published when company particulars are available.
- India grievance contact: trade enquiries via contact@niluza.com (named details to be published when appointed).
We encourage you to contact us first so we can try to resolve the issue.