Privacy Policy

1. Introduction

Panana Global LLP ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at pananaglobal.com and use our import-export trade services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services. By continuing to use our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Fill out contact forms or inquiry forms on our website
• Request a quotation, product samples, or custom sourcing
• Subscribe to our newsletter or marketing communications
• Enter into a business relationship or trade agreement with us
• Communicate with us via email, phone, or other channels
• Participate in surveys, promotions, or other interactive features

The personal information we collect may include:

• Full name, job title, and designation
• Company name, business address, and registration details
• Email address and telephone number
• Trade references, business credentials, and import/export license details
• Payment information, banking details, and billing address (for transactions)
• Shipping preferences and delivery instructions

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain technical information through cookies and similar technologies, including:

• IP address, browser type, and version
• Device information, operating system, and screen resolution
• Pages visited, time spent on each page, and navigation patterns
• Referring website, search terms, and traffic source
• Geographic location at the country or region level
• Date and time of access

For more information about cookies, please refer to our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Respond to your inquiries, provide customer support, and facilitate trade discussions
• Process transactions, fulfil orders, and arrange shipping and logistics
• Send quotations, invoices, pro-forma invoices, and shipping documentation
• Communicate about products, services, promotions, and market updates
• Improve and optimise our website, services, and user experience
• Comply with legal, regulatory, and tax requirements in applicable jurisdictions
• Prevent fraud, detect security incidents, and protect against malicious activity
• Analyse website usage patterns and generate aggregate statistics

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, our legal basis for collecting and using your personal information depends on the specific context in which we collect it:

• Consent: You have given explicit consent for processing for one or more specific purposes
• Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party, or to take pre-contractual steps at your request
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, provided these are not overridden by your rights
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject

5. Information Sharing and Disclosure

We may share your information with the following categories of recipients:

• Service Providers: Logistics companies, freight forwarders, payment processors, IT service providers, and other third parties who assist in our business operations under contractual obligations
• Business Partners: Suppliers, manufacturers, and trade partners as necessary to fulfil your orders, arrange inspections, or facilitate trade transactions
• Legal Authorities: Government agencies, regulatory bodies, or law enforcement when required by law, subpoena, court order, or to protect our legal rights
• Professional Advisors: Lawyers, accountants, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Any sharing of data is conducted under strict contractual agreements that ensure the protection of your information.

6. International Data Transfers

As an international trade company, your information may be transferred to and processed in countries other than your country of residence, including India, where our headquarters are located. These countries may have different data protection laws than your home country.

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Binding Corporate Rules where applicable
• Your explicit consent for specific transfers

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Transaction and trade records are retained for a minimum of 7 years as required by Indian tax, customs, and business laws
• Contact form submissions are retained for up to 2 years from the last interaction
• Marketing preferences are retained until you withdraw your consent
• Website analytics data is retained for up to 26 months

When your data is no longer required, we will securely delete or anonymise it in accordance with our data retention and disposal policies.

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data, subject to legal obligations
• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format
• Right to Object: Object to processing of your data for direct marketing or based on legitimate interests
• Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances
• Right to Withdraw Consent: Withdraw your consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at dev@pananaglobal.com. We will respond to your request within 30 days (or as required by applicable law).

8.1 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, used, shared, or sold about you
• Right to Delete: Request deletion of personal information we have collected from you
• Right to Opt-Out: Opt-out of the sale or sharing of your personal information for cross-context behavioural advertising
• Right to Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit: Limit use and disclosure of sensitive personal information

Important: We do not sell personal information to third parties. We may share information with service providers under written contracts to facilitate our business operations, as permitted by the CCPA.

To exercise your California privacy rights, contact us at dev@pananaglobal.com or visit our Do Not Sell My Personal Information page.

If you are not satisfied with our response, you may file a complaint with the California Attorney General's Office at https://oag.ca.gov/consumer.

8.2 Canadian Privacy Rights (PIPEDA)

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):

• Right to Access: Request access to your personal information held by us
• Right to Challenge: Challenge the accuracy and completeness of your information and have it amended as appropriate
• Right to Withdraw Consent: Withdraw consent for the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
• Right to File a Complaint: File a complaint with the Office of the Privacy Commissioner of Canada

For complaints or inquiries regarding Canadian privacy rights, you may contact:

8.3 UAE Data Protection Rights

If you are located in the United Arab Emirates, you have rights under UAE Federal Law No. 45 of 2021 on the Protection of Personal Data (PDPL):

• Right to Access: Request access to your personal data and information about how it is processed
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of personal data when it is no longer necessary for the purpose it was collected
• Right to Object: Object to the processing of personal data in certain circumstances
• Right to Data Portability: Receive your personal data in a structured and commonly used format

To exercise your UAE privacy rights, contact us at dev@pananaglobal.com.

8.4 Indian Data Protection Rights (DPDPA)

Under India's Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to access your personal data, request correction and erasure, nominate a representative, and seek grievance redressal. To exercise these rights, contact our Grievance Officer at the address provided in Section 14 below.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand user preferences. These technologies include cookies, web beacons, pixel tags, and local storage.

For comprehensive information about the types of cookies we use, how to manage your preferences, and how to opt out, please see our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Secure servers with restricted access controls and firewall protection
• Regular security assessments, vulnerability scanning, and penetration testing
• Employee training on data protection, confidentiality, and security best practices
• Data minimisation practices — we only collect information that is necessary

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

11. Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated or controlled by us. We are not responsible for the privacy practices, content, or security of these external sites. We strongly encourage you to review the privacy policies of any third-party site before providing personal information or engaging with their services.

12. Children's Privacy

Our website and services are intended for business use and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information from our records.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact:

If you are located in the EEA and believe that our processing of your personal data infringes applicable data protection laws, you have the right to lodge a complaint with your local Data Protection Authority (DPA). A list of EU DPAs can be found at https://edpb.europa.eu.