Privacy Policy

East West Business Solutions Private Limited (“East West Business Solutions”, “Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose information when you use our website https://eastwestbusinesssolutions.com (“Website”) and related services.

Territorial Eligibility Notice: Our franchise opportunities are currently open only within India and exclusively for Indian residents. International visitors may access the Website for information, but are not eligible to apply for a franchise at this time.

Scope

This Policy applies to personal information collected through our Website, forms, and communications (email, phone, SMS/OTP). It does not cover third-party websites or services that we do not control.

Information We Collect

2.1 Information you provide to us

• Identity and contact details (e.g., name, email, phone, city/state, pin code).
• Business details (e.g., organization/legal form, operating address, GSTIN if applicable).
• Application/interest details (e.g., preferred territory, investment range, timeline, questionnaire responses).
• Communications (emails, messages, call recordings where legally permitted).

2.2 Information collected automatically

• Device and usage data (IP address, browser type/version, OS, pages visited, time on page, referring/exit pages).
• Cookies and similar technologies (see Section 10).

2.3 Information from third parties

• Service providers (e.g., cloud hosting, analytics, identity/OTP verification, SMS gateway providers, payment/receipt processors), lead partners, and publicly available sources.

Note: Where we collect any government-issued ID or financial details, we will only do so if strictly necessary for verification/compliance, and we will process such data with enhanced safeguards.

How We Use Your Information

We use personal information to:

• Operate, maintain, and improve the Website and our services.
• Process franchise inquiries/applications (India only) and communicate updates.
• Verify identity and eligibility (including OTP/phone verification) and prevent fraud.
• Respond to questions, provide customer support, and manage relationships.
• Comply with legal obligations (e.g., accounting, taxation, record-keeping).
• Conduct analytics, reporting, and quality assurance.
• Send service communications and, where permitted, marketing communications (you can opt out at any time).

Legal Bases / Lawful Grounds

Depending on the context, we rely on one or more of the following grounds to process personal information:

• Consent: e.g., submitting a form, opting in to marketing, or verifying via OTP.
• Contractual necessity: to take steps at your request before entering into a contract with us.
• Legal obligations: e.g., tax, corporate, or regulatory compliance.
• Legitimate interests: e.g., securing our services, preventing misuse/fraud, improving user experience (balanced against your rights).

Sharing of Information

We do not sell your personal information. We may share it with:

• Service providers / processors under contract (hosting, analytics, email/SMS/OTP delivery, security, professional advisors, customer support).
• Affiliates and group entities (if any) for purposes consistent with this Policy.
• Authorities, regulators, courts where required by law or to protect our rights, users, or the public.
• Business transfers: in connection with a merger, acquisition, or restructuring (your information will remain protected by this Policy or a successor policy with comparable protection).

Cross-Border Transfers

We may store and process information on servers located in India or in other countries (e.g., secure cloud providers). Where we transfer data across borders, we apply appropriate safeguards and transfer only as permitted by applicable law. If you access the Website from outside India, you understand your data may be processed in India or other jurisdictions that may have different data protection rules than your country of residence.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes in this Policy, satisfy legal/regulatory requirements, resolve disputes, and enforce agreements. Illustrative periods (to be tailored by you):

• Franchise inquiry/application records: 24–36 months from last interaction (or longer if mandated by law).
• Contracts and transactional records: 8–10 years (tax/regulatory).
• OTP and verification logs: 90–180 days.
• Marketing preferences and consent logs: while active + 24 months.
• Website analytics logs: 12–24 months in aggregate/anonymized form where possible.

Your Choices & Requests (Current Capabilities in India)

At this time, there are no self-service tools for managing personal information. We currently support the following:

• Deletion by email (subject to law): You may request deletion of your personal information by emailing us at the address in Section 15. We will assess whether deletion is legally permissible and technically feasible and will delete the information we are not required to retain (e.g., for tax, accounting, fraud prevention, or legal claims).

The following data rights are not yet available through self-service or standardized workflows on our Website: access/export (portability), detailed account-level correction tools, and general objection/restriction mechanisms. If you believe an essential correction is needed (for example, your contact details are incorrect and affecting communications), please write to us, and we will use reasonable efforts to update basic contact information after verifying your identity.

Important: Nothing in this section limits any rights you may have under applicable law. Where such rights apply, you may exercise them by contacting us, and we will handle requests on a case-by-case basis within the constraints of our current systems and legal obligations.

We may ask for information necessary to verify your identity before acting on a request and may decline or limit a request if it is manifestly unfounded or excessive, or if honoring it would conflict with legal obligations or our ability to provide services.

Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls, need-to-know permissions, logging/monitoring, and vendor due diligence. No method of transmission or storage is 100% secure; we work to continuously improve our controls.

Cookies & Similar Technologies

We use cookies and similar technologies to enable core functionality (e.g., session management), understand website performance, and personalize content where permitted. You can manage cookies through your browser settings. Disabling certain cookies may affect site functionality.

Marketing Communications

Where permitted, we may send you updates about our services. You can opt out at any time by using the unsubscribe link in emails or by contacting us. Even if you opt out of marketing, we may still send transactional or service messages (e.g., OTPs, confirmations, policy changes).

Children’s Privacy

Our Website and franchise program are not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information, please contact us so we can take appropriate steps.

Links to Third-Party Sites

Our Website may link to third-party websites/services. We are not responsible for their privacy practices. Please review their policies before providing any information.

Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with the “Last Updated” date. Substantive changes will be highlighted where appropriate.

Contact & Grievance Redressal

We will acknowledge and address grievances expeditiously and within one (1) month from receipt, in accordance with applicable rules. If we need more information from you to resolve your request, we will let you know.

Governing Law & Jurisdiction

This Policy and any disputes arising from it are governed by the laws of India. Subject to applicable law, courts/tribunals at Hyderabad (Telangana) shall have exclusive jurisdiction.

Additional Notes on India’s Evolving Privacy Regime

India’s dedicated personal data protection law (the Digital Personal Data Protection Act, 2023) has been enacted but is pending full operationalisation via subordinate rules/notifications. Until then, our privacy practices align with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable. We will update this Policy as and when the new rules come into force.