1. Introduction
Welcome to www.babasupersign.com (the "Website"), owned by Baba Supersign Private Limited (the "Company", "we", "us" or "our"). The Website is built, operated and maintained by M/s. ny3media on behalf of the Company.
We process personal data in accordance with applicable Indian data protection and information technology laws and are implementing measures aligned with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as and when their respective provisions become applicable.
This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our Website, engage our signage and branding services or place an order with us.
2. Information We Collect
To effectively serve your project needs and process orders, we collect the following types of information:
2.1 Information you provide directly
- Personal Identifiers: Name, mobile number and email address. This allows us to call you back, communicate effectively and share prepared quotes or proposals.
- Project Specific Data: Site address, site photographs, area measurements, business name, business address and GST number. This information is essential for conducting site survey/reconnaissance ("recce"), planning manufacturing and installation and generating accurate invoices.
- Order Information: Shipping and billing address, order details, delivery preferences, artwork files, design briefs, dimensions and materials specifications for custom signage orders.
- Payment Information: Card or UPI details are entered on the secure payment gateway page and are not stored on our servers. We receive only a transaction reference and status confirmation.
- Communication Records: WhatsApp message content and attachments and email correspondence may be retained for service quality and dispute resolution.
2.2 Information collected automatically
- Technical Data: Browser type, device information and IP address, collected automatically to ensure website functionality, perform updates and improve user experience.
- Cookies and similar technologies: Small files placed on your device to remember preferences and recognise returning visitors.
- Usage data: Pages visited, time on site, referring URLs and approximate location (based on IP address).
- Log data: Server logs recording access time, IP address and pages requested, used for security and troubleshooting.
3. Purpose of Data Collection
We use the collected information strictly for the following purposes:
- Prepare and share customised signage quotations and proposals.
- Coordinate site visits, manufacturing and onsite installation.
- Process and fulfil orders, including production, shipping and delivery.
- Provide customer support, project updates and post installation service.
- Process payments and prevent fraudulent transactions.
- Communicate with you about your orders, projects and account.
- Improve the Website, our products and our services through analytics.
- Send marketing or promotional offers, only where you have provided separate, explicit consent. You may unsubscribe at any time.
- Comply with applicable legal, tax and regulatory obligations under Indian law.
4. Legal Basis and Consent
When you voluntarily provide personal data while requesting a quotation, site visit, order or service, we process that data to respond to and fulfil that specific request. Where consent is required, we will obtain it through a clear affirmative action, such as an unticked consent checkbox on our inquiry forms.
Consent for marketing communications will be obtained separately and will not be combined with consent required for processing an inquiry or order. You have the right to withdraw your consent at any time by contacting our Grievance Officer, though this may affect our ability to provide ongoing or future services.
5. How We Share Your Information
We do not sell, rent or trade your personal data to third parties. We share your information only in the following circumstances:
- Project Execution: With our internal design, manufacturing and installation teams who require the data to execute your project.
- Subcontractors and Partners: Where necessary for project execution, limited information may be shared with authorised installation partners, transporters, subcontractors or site coordinators. They will receive only the information reasonably necessary for their assigned work.
- Trusted Service Providers: With third party vendors who assist us in website hosting, payment processing, logistics and email delivery, strictly bound by confidentiality agreements.
- Legal Compliance: If required to comply with applicable Indian laws, regulations, legal processes or lawful governmental requests.
- Business Transfer: In connection with a merger, acquisition or sale of our business assets, subject to confidentiality.
6. Third Party Services We Use
We rely on trusted third party service providers to operate the Website. We use the following categories of service providers. The providers used may change from time to time, but each provider is permitted to process personal data only for the relevant authorised purpose.
| Service Category | Purpose and Data |
|---|---|
| Analytics | Traffic analysis; collects cookies, device and usage data to help us improve the Website. |
| Payment Processing | Processes card and UPI payments securely through the engaged payment gateway; we do not store your full card or bank details. |
| Social Media Plugins | Enables sharing and messaging through Facebook, Instagram or WhatsApp; may collect data via their own cookies when you interact with these features. |
| Email and Marketing Tools | Delivers order updates and optional newsletters through the engaged email service provider. |
7. Data Retention
We retain your personal and project specific data only for as long as necessary to fulfil the purposes outlined in this policy. The table below indicates our general retention approach:
| Data Category | Retention Approach |
|---|---|
| Unsuccessful quotation or inquiry | 12 to 24 months after last communication. |
| Customer and project records | Project duration plus warranty or claim period. |
| Invoice, GST and accounting data | Period required under applicable tax and accounting law. |
| Artwork and fabrication files | 5 years after completion, unless another period is agreed. |
| Marketing data | Until withdrawal of consent or 24 months without engagement. |
| Security and server logs | 12 months, unless a longer period is legally required. |
| Consent and withdrawal records | 5 years after withdrawal or last processing activity. |
Once the data is no longer needed, it is securely deleted or anonymised. You may request earlier deletion subject to legal retention requirements.
8. Data Security
We implement reasonable security practices and procedures, including SSL (HTTPS) encryption for our Website and encrypted payment processing through PCI DSS compliant gateways, to protect your personal data from unauthorized access, disclosure, alteration or destruction.
Access to your data is strictly restricted to employees and contractors who need it to perform their job functions. If a personal data breach occurs, we will take reasonable steps to contain and assess the incident, preserve relevant records and provide notifications to affected individuals and competent authorities where required under applicable law. No method of transmission or storage is completely secure and we cannot guarantee absolute security.
9. Cookies and Tracking Technologies
Our Website uses cookies and similar tracking technologies to analyse trends, administer the site and gather basic demographic information. Essential cookies enable core functionality. Analytics cookies help us understand how visitors use the Website so we can improve it.
You can control or disable cookies through your browser settings; note that some features may not function correctly without them. Where required, we will seek your consent for non essential cookies before they are activated.
10. Your Rights (Data Principal Rights)
Under the DPDP Act, 2023, you have the following rights regarding your personal data:
- Right to Access: Request a summary of the personal data we hold about you and the purposes of processing.
- Right to Correction: Request correction of inaccurate, misleading or incomplete data.
- Right to Erasure: Request deletion of your personal data, subject to overriding legal or contractual obligations.
- Right to Grievance Redressal: Lodge a complaint if you believe your data is being mishandled.
- Right to Withdraw Consent: Withdraw any consent you have given to data processing at any time.
- Right to Opt out: Unsubscribe from marketing emails at any time via the link in each email.
- Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity, where applicable.
- Right to Complain: Approach the Data Protection Board of India after using our grievance mechanism, where applicable.
To exercise any of these rights, contact our Grievance Officer using the details in Section 13. We will respond within 30 days of receiving a verified request.
11. Children's Privacy
Our Website and services are not directed at children under 18 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
12. International Data Transfers
Some authorised service providers may process personal data outside India. Where such transfers occur, we will take reasonable steps to ensure that they are made subject to applicable Indian law, contractual safeguards and any restrictions or requirements notified by the Central Government.
13. Grievance Officer
If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact our designated Grievance Officer:
- Designation
- Privacy and Grievance Officer
- right@babasupersign.com
- Phone
- +91 99117 33306
- Address
- 55 Lane-2, Westend Marg, Saiyad Ul Ajaib Village, Saket, New Delhi, Delhi 110030
14. Portfolio and Photographs
We may photograph completed work for internal project records. Photographs containing identifiable individuals, confidential information or non public client premises will not be used for promotional or portfolio purposes without the client's permission.
For commercial portfolio use, the applicable quotation, order confirmation or separate approval may specify the permitted photographs, purpose and publication channels. A client may withdraw permission for future use by contacting us, subject to material already lawfully printed or published.
15. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices or legal requirements. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Material changes will be notified via the Website or by email where appropriate.
16. Website Maintenance
This Website is developed, hosted and maintained with assistance from authorised service providers, including M/s. ny3media, on behalf of Baba Supersign Private Limited. Such providers may process personal data only on our documented instructions, for authorised purposes and subject to appropriate confidentiality and security obligations.
Baba Supersign Private Limited remains responsible for addressing privacy requests and concerns relating to personal data processed through the Website.
17. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of India. The medium of language for all jurisdiction and execution purposes shall be English. Subject to applicable law, disputes arising from this policy will be subject to the jurisdiction of competent courts in New Delhi, India.
Nothing in this clause restricts any right of a consumer to approach a consumer commission or other authority having jurisdiction under applicable law.