Privacy & data-protection notice

Akarta Exports is a merchant export house based at 210 The Spire, 150 Feet Ring Road, Rajkot 360006, Gujarat, India, and part of the Ibiixo Group. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary for the personal data described here; if you are in the EU or UK, we act as controller under the GDPR.

This notice is written in plain English and is available on request in another language. For any question about it, write to business@akarta.in.

When you complete the request-for-proposal form we store the details you enter — your name, business email, telephone number, country and city, company name and website, business type, the divisions and products you are interested in, your specification, quantity, delivery term and destination port, certification requirements and any notes you add.

We use that data for one specified purpose: to prepare, send and follow up a commercial offer, and to execute and document the resulting export order. We do not use it for profiling, automated decision-making or advertising, and we never sell it.

If you email or call the export desk, we keep the correspondence for the same purpose. Server logs may record an IP address and browser type for security and abuse prevention.

We process enquiry data on the consent you give when submitting the form — the consent request is presented alongside this notice, is limited to the purpose above, and is not bundled with anything else. Where you are an existing customer, we may also process data as reasonably necessary to perform the contract between us and to comply with Indian tax, customs and FEMA record-keeping duties.

You may withdraw consent at any time by emailing business@akarta.in with the subject "Withdraw consent". Withdrawal is as easy as giving consent. We will stop processing for the quotation purpose and erase the data, except where retention is required by law; withdrawal does not affect processing already carried out, and it may mean we can no longer quote for you.

We disclose only what is needed, and only to: the Indian manufacturer or brand owner quoting your requirement; third-party inspection agencies you ask for (SGS, Bureau Veritas, Intertek, TÜV) and destination conformity schemes such as SONCAP, PVoC, SASO or COC; freight forwarders, shipping lines and customs brokers handling the consignment; our banks for documentary collection or letters of credit; and our IT, hosting, email and CRM providers acting on our written instructions.

These providers act as Data Processors under contract, may process the data only for our stated purpose, and must apply reasonable security safeguards. We do not authorise them to use your data for their own purposes.

This website sets no advertising cookies. Where analytics are enabled, we use Google Tag Manager to load measurement tags and Microsoft Clarity to record anonymised interaction data — which pages were viewed, how far they were scrolled and where visitors clicked — so we can improve the technical information on each division page.

These tools load only after you press Accept on the cookie bar. If you decline, no analytics script is loaded and no analytics cookie is set; only strictly necessary browser storage that remembers your choice and any unsent form draft is used.

You can change your mind at any time using the cookie settings link below or in the footer.

Enquiries that do not lead to an order are erased within 24 months. Where an order is placed, the commercial record is retained for eight years from the end of the relevant financial year, as Indian tax, GST, customs and foreign-exchange rules require, and then erased.

We apply reasonable security safeguards, including encrypted transport (HTTPS), access control on the enquiry database with row-level security, role-restricted admin access and least-privilege credentials. If a personal data breach occurs we will notify the Data Protection Board of India and every affected Data Principal without undue delay, as the DPDP Act requires.

This is a business-to-business website intended for commercial buyers. We do not knowingly collect the personal data of anyone under 18, we do not track or behaviourally target children, and we will erase any such data brought to our notice. Please do not submit enquiries on behalf of a minor.

Under the DPDP Act you may ask us for a summary of the personal data we hold about you and how it is processed, for the identities of the Data Fiduciaries and Processors it has been shared with, for correction, completion or updating of inaccurate data, and for erasure once the purpose is served. You may also nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

If you are in the EU or UK, you additionally have the GDPR rights of access, rectification, erasure, restriction, portability, objection and complaint to your local supervisory authority.

Email business@akarta.in with the subject "DPDP request" and enough detail to identify your enquiry. We respond within 30 days. Requests must be made in good faith: the Act requires Data Principals to furnish authentic information and not to file false or frivolous grievances.

Grievance Officer: The Export Desk Manager, Akarta Exports, 210 The Spire, 150 Feet Ring Road, Rajkot 360006, Gujarat, India. Email business@akarta.in (mark it "Grievance — data protection"), telephone +91 99137 96777, Monday to Saturday 09:30–19:00 IST.

We acknowledge grievances within 7 working days and aim to resolve them within 30 days. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

Akarta Exports operates from India and your enquiry data is processed there. Transfers out of India are made only to countries not restricted under section 16 of the DPDP Act. For buyers in the EU or UK, transfers to India are made on the basis of your explicit consent and the European Commission's standard contractual clauses with our processors where applicable. Analytics providers named above process data on their own infrastructure under their published terms.

We update this notice when our processing changes. The version in force is the one published here; material changes affecting your rights will be highlighted on this page, and where the change requires it we will ask for your consent again. Last reviewed August 2026.