Privacy & Cookie Policy

This policy explains how BRITBASKET PRIVATE LIMITED (“Britbasket”, “we”, “us”, “our”) collects, uses and protects personal data when you visit britbasket.in or contact us. We are the data controller for that information.

We are an India-registered export company serving business customers in the United Kingdom, so this policy is written to meet both the UK GDPR and the Data Protection Act 2018 (for UK visitors) and India's Digital Personal Data Protection Act, 2023.

What we collect

We deliberately collect very little. This website has no user accounts, no login, and no payment processing.

• Enquiry details you choose to send us — your name, company, email address, phone number, product interest and message. Note: our enquiry form does not transmit anything to our servers. It opens a pre-filled message in your own email application, and nothing reaches us until you press send yourself.
• Analytics data, only if you consent — via Google Analytics 4: pages viewed, approximate location (country/region, derived from a truncated IP address), device and browser type, referring site, and time on page. This is set only after you accept analytics cookies.
• Technical server logs — our hosting provider records standard request data (IP address, user agent, timestamp) for security, abuse prevention and reliability. This happens for every website and does not require consent.
• WhatsApp and telephone contact — if you use a WhatsApp button or call us, that conversation and your phone number are processed by WhatsApp (Meta) and your telecoms provider under their own terms, and are then held by us as business correspondence.

Cookies and how we use them

We use no advertising cookies, no marketing pixels and no cross-site tracking of any kind.

Analytics cookies (Google Analytics 4) are disabled by default. When you first visit, a banner asks for your choice, and we run Google Consent Mode so that no analytics cookies are written and no analytics data is sent unless and until you accept. If you decline, GA4 remains in a consent-denied state.

Your choice is remembered in your browser's local storage under the key “bb-consent”. This is a strictly necessary preference, not a tracking identifier — it never leaves your device. Clearing your browser data will make the banner appear again so you can change your answer.

Why we process it, and our legal basis

• To respond to your enquiry and quote for, arrange and fulfil an export order — legal basis: performance of a contract, or steps taken at your request before entering one.
• To keep the website secure, available and free from abuse — legal basis: our legitimate interests in running a safe service.
• To understand which pages are useful and improve the site — legal basis: your consent, which you may withdraw at any time.
• To meet export, customs, tax and company-law record-keeping obligations in India and the UK — legal basis: compliance with a legal obligation.

Who we share it with

We do not sell personal data, and we never share it for advertising.

• Vercel Inc. — website hosting and content delivery (server logs).
• Google Ireland/LLC — Google Analytics 4, only where you have consented.
• Our email and domain provider — to receive and store your enquiry correspondence.
• Our UK partner companies, freight forwarders and customs agents — only the details necessary to clear and deliver your specific consignment, and only once you place an order.
• Government authorities — where disclosure is required by law, including customs, tax and port health authorities in India and the UK.

International transfers

We are established in India and our staff and email systems are located there, so information you send us — including enquiries from the United Kingdom — is transferred to and stored in India. Where personal data is transferred out of the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism, and take reasonable steps to ensure your data remains protected to an equivalent standard.

How long we keep it

• Enquiries that do not lead to an order — up to 24 months, then deleted.
• Customer and transaction records — retained for the periods required by Indian and UK company, tax and customs law (generally 6 to 8 years).
• Analytics data — retained in Google Analytics for 14 months, in aggregated and pseudonymised form.
• Server logs — short-term, typically 30 days.

Your rights

Wherever you are, you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent — as we do for analytics — you can withdraw it at any time, and doing so does not affect anything done beforehand.

To exercise any of these rights, email business@britbasket.in or call +91 70563 59259. We will respond within one month. We will not charge you or treat you differently for asking.

If you are in the UK and are unhappy with our response, you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you are in India, you may raise a grievance with us first and then approach the Data Protection Board of India.

Security

The site is served entirely over HTTPS with HSTS enabled. We keep access to enquiry correspondence limited to the people who need it to do their job. No method of transmission or storage is completely secure, so while we take reasonable and appropriate measures, we cannot guarantee absolute security.

Children

This is a business-to-business website and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, contact us and we will delete it.

Changes to this policy

We may update this policy as our services or the law change. The date at the top of this page shows when it was last revised; where a change is significant we will make that clear on the site.