India's Trusted Import Export B2B Marketplace - Serving 50+ Countries
contact@kexim.co+91 70119 95460
Legal & Compliance

Privacy Policy

We are committed to protecting your privacy and ensuring the security of your personal data. This policy explains what we collect, why we collect it, and how you can control your information.

Effective Date: 1 January 2025
Last Updated: 10 May 2026
Applicable to: Website & Mobile App
Compliant with IT Act 2000 & DPDP Act 2023
Back to Top

This Privacy Policy applies to Kexim (operated by Kexim Dealers Pvt. Ltd.), accessible at www.kexim.co and through the Kexim's mobile application HipTok - Hydroponics Intelligent Platform on Google Play. By using our platform, you agree to the collection and use of information as described here.

1

Who We Are

Kexim is India's trusted import-export B2B marketplace, connecting verified suppliers, manufacturers, and global buyers across 50+ countries. We facilitate trade in PET resin, spices, medical devices, borosilicate glassware, timber, and hydroponic solutions, with end-to-end logistics and supply chain services.

Data Controller: Kexim Dealers Pvt. Ltd.
Email: contact@kexim.co
Phone: +91 70119 95460
Website: www.kexim.co

2

Information We Collect

We collect information to provide and improve our marketplace services.

CategoryExamplesSource
Identity DataFirst name, last name, company name, GST number, business typeProvided by you at registration
Contact DataEmail address, phone number, WhatsApp number, billing/shipping addressProvided by you
Transaction DataOrders placed, payment amounts, subscription planGenerated during use
Payment DataRazorpay transaction ID, UPI reference (we do not store card numbers)Razorpay payment gateway
Technical DataIP address, device type, OS version, browser, app version, session logsAutomatically collected
Usage DataPages visited, search queries, products viewed, time on platformAutomatically collected
Communication DataMessages sent via the platform, WhatsApp inquiries, support ticketsProvided by you

We do not collect sensitive personal data such as government ID numbers, biometric data, health data, or financial account credentials. Payment processing is handled entirely by Razorpay and UPI under their respective privacy policies.

3

How We Use Your Data

PurposeLegal Basis
Create and manage your accountContract performance
Process orders, payments, and subscriptionsContract performance
Connect buyers and sellers on the marketplaceContract performance / Legitimate interest
Send transactional notificationsContract performance
Send marketing emails and WhatsApp messages (with consent)Consent (opt-out available)
Improve platform features and analyse usageLegitimate interest
Verify business identity and prevent fraudLegal obligation / Legitimate interest
Comply with Indian tax and regulatory requirementsLegal obligation
4

Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share your information only in the following limited circumstances:

  • Verified Trading Partners: Relevant contact details are shared with suppliers or buyers to facilitate the trade when you make an inquiry or place an order.
  • Payment Processors: Razorpay and UPI receive transaction data required to process payments securely.
  • Logistics Partners: Address and order data may be shared with freight and logistics providers for shipment tracking and delivery.
  • CRM Tools: We use HubSpot for CRM and marketing automation. Data shared is governed by HubSpot's privacy policy.
  • Legal Requirements: We may disclose data to Indian government authorities, courts, or law enforcement when required by law.
  • Business Transfer: In the event of a merger or acquisition, user data may be transferred with appropriate notice to users.
5

Cookies & Tracking Technologies

Our website and mobile app use cookies and similar tracking technologies to enhance your experience and analyse platform performance.

Cookie TypePurposeOpt-Out
EssentialSession management, login state, security tokensNot possible (required for function)
AnalyticsPage views, bounce rate, user journey (Google Analytics)Browser settings
MarketingRetargeting ads, HubSpot tracking pixelConsent banner / opt-out link
PreferenceLanguage, search filters, display preferencesBrowser settings
6

Data Retention

  • Account Data: Retained for the lifetime of your account plus 3 years after account closure.
  • Transaction and Payment Records: Retained for 7 years as required by Indian tax law (GST Act).
  • Marketing Data: Retained until you withdraw consent or unsubscribe.
  • Technical Log Data: Retained for up to 12 months for security and debugging purposes.

Upon expiry of the retention period, your data is securely deleted or anonymised.

7

Data Security

  • HTTPS / TLS encryption for all data in transit between your device and our servers.
  • Payment data is handled exclusively by PCI-DSS compliant processors (Razorpay). We do not store card numbers or CVVs.
  • Access to personal data is restricted to authorised Kexim personnel on a need-to-know basis.
  • Regular security assessments and vulnerability scanning of our platform.
  • Secure, encrypted cloud storage with access logging and audit trails.

In the event of a data breach affecting your rights and freedoms, we will notify affected users and relevant authorities within 72 hours of becoming aware, as required by applicable law.

8

Your Rights

Under India's Digital Personal Data Protection (DPDP) Act 2023, you have the following rights:

📋
Right to Access
Request a copy of the personal data we hold about you.
✏️
Right to Correction
Request correction of inaccurate or incomplete data.
🗑️
Right to Erasure
Request deletion of your data, subject to legal retention obligations.
🚫
Right to Withdraw Consent
Withdraw consent for marketing or non-essential processing at any time.
📦
Right to Data Portability
Receive your data in a structured, machine-readable format.
🛑
Right to Object
Object to processing based on legitimate interest or for direct marketing.

To exercise any of these rights, email contact@kexim.co with the subject line "Data Rights Request". We will respond within 30 days.

9

Children's Privacy

Kexim is a B2B marketplace intended exclusively for business use by individuals aged 18 years and older. We do not knowingly collect personal data from children under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@kexim.co.

10

Third-Party Links

Our platform may contain links to third-party websites including payment gateways, logistics portals, and social media sites. Once you leave our platform, this Privacy Policy does not apply. We encourage you to read the privacy policies of any third-party sites you visit.

11

Changes to This Policy

  • We will update the "Last Updated" date at the top of this page when changes are made.
  • We will send a notification via email or in-app alert to registered users for material changes.
  • Where required by law, we will request renewed consent for significant changes to data processing activities.

Your continued use of Kexim after the effective date of any changes constitutes your acceptance of the revised policy.

12

Contact Us

Kexim Data Protection Team

We aim to respond to all privacy-related enquiries within 5 business days. For formal data rights requests, the response window is 30 days.

Phone+91 70119 95460