Privacy Policy

1. Introduction

AAJ Supply Chain Management (“AAJ SCM”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, https://www.aajscm.com/, submit an enquiry, request a quotation, interact with our forms, or communicate with our team.

It also explains your choices and rights regarding your personal information under applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, as and when applicable.

By using our website, you acknowledge that you have read this Privacy Policy. Where consent is required by law, we will seek it separately and in an appropriate manner. Merely visiting our website does not constitute consent to every form of data processing described in this Policy.

2. Information We Collect

We collect personal information that you voluntarily provide, information generated when you use our website and information received from authorised third parties where applicable.

3. How We Use Your Information

We use personal information for specific and lawful business purposes, including:

• Responding to enquiries and requests for information.
• Providing warehouse, fulfilment, transportation and other supply chain service information.
• Preparing quotations, proposals and customised service recommendations.
• Contacting prospective customers to discuss their stated business requirements.
• Managing customer relationships and business communications.
• Improving website functionality, content, usability and performance.
• Understanding website traffic and evaluating marketing campaign effectiveness.
• Measuring advertising performance and, where enabled and appropriately permitted, creating or measuring relevant advertising audiences.
• Maintaining website security, preventing fraud and addressing technical issues.
• Meeting applicable legal, regulatory, contractual and record-keeping obligations.

We will not use personal information for purposes that are incompatible with the purpose communicated to you, unless permitted by applicable law.

4. Consent and Lawful Processing

We process personal information on an appropriate lawful basis under applicable law. Depending on the circumstances, this may include your consent, a permitted legitimate use under applicable legislation, or another lawful basis recognised by law.

Where consent is required, we will provide relevant information about the data being collected and the purpose of its use before or when seeking consent.

Consent, where required, should be freely given, specific, informed and unambiguous. You may withdraw consent through the available method communicated to you. Withdrawal will not affect processing lawfully carried out before the withdrawal and some information may need to be retained where required by law or necessary for an applicable lawful purpose.

Withdrawing consent for optional marketing or advertising activities will not automatically prevent us from responding to a business enquiry you have requested.

5. Marketing Communications

If you enquire about our services, we may contact you to respond to your request and discuss the relevant business requirements.

Where required, we will seek your consent before sending promotional communications or using your personal information for optional marketing activities. You may opt out of promotional emails or messages using the unsubscribe option, where available, or by contacting us through the details provided in this Policy.

Opting out of promotional communications will not prevent us from sending essential service-related or administrative communications where appropriate.

6. Cookies and Advertising Technologies

Our website may use cookies, pixels, tags and similar technologies to support website functionality, understand visitor behaviour and measure advertising performance.

Depending on the technologies enabled on our website, these may include:

• Essential cookies: Support website functionality, security and basic operations.
• Analytics technologies: Help us understand traffic, page performance and visitor interactions.
• Advertising technologies: Help measure advertising effectiveness, understand campaign conversions and, where enabled, support relevant advertising or retargeting.

We may use services such as Google Analytics, Google Ads conversion tracking or Meta advertising technologies, including the Meta Pixel, if these tools are implemented on our website. These providers may collect technical identifiers and website interaction data in accordance with their own terms and privacy policies.

Where consent is required for non-essential cookies or tracking technologies, we will provide an appropriate consent mechanism. You should be able to make an informed choice about optional tracking, change your preferences where supported and withdraw consent through the available controls. You can also manage cookies through your browser settings. Blocking certain cookies may affect some website functionality.

7. How We Share Information

We do not disclose personal information indiscriminately. We may share relevant information with the following categories of recipients when necessary for the purposes described in this Policy and subject to applicable law:

• Technology and hosting providers: To operate, maintain and secure our website and business systems.
• CRM and communication providers: To manage enquiries, customer relationships and requested communications.
• Analytics and advertising providers: To measure website performance and advertising effectiveness, subject to applicable consent requirements.
• Professional advisers: Such as legal, accounting or compliance advisers, where necessary.
• Business partners and service providers: Where sharing is necessary for a specific service or business request and is lawful.
• Government authorities and regulators: Where disclosure is required by law or a valid legal process.

We require appropriate confidentiality, security and data-handling safeguards from service providers where applicable.

8. Data Storage, Retention and Deletion

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, manage business relationships, resolve disputes, maintain appropriate records and meet applicable legal or regulatory requirements.

Retention periods may vary depending on the type of information, the nature of the enquiry, the status of the business relationship and any applicable legal obligations.

When personal information is no longer required for a lawful purpose, we will take appropriate steps to delete or anonymise it, subject to applicable retention requirements. You may request deletion of your personal information, subject to applicable law and any legitimate requirement to retain certain records.

9. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

Depending on the systems involved, these measures may include access controls, authentication mechanisms, secure hosting, encryption where appropriate, monitoring and periodic review of security practices. Access to personal information is limited to authorised personnel and service providers who require it for legitimate business purposes.

Although we take reasonable steps to protect information, no website, electronic transmission or storage system can be guaranteed to be completely secure. If a personal data breach occurs, we will assess and address it and provide notices to affected individuals or authorities where required by applicable law.

10. Your Privacy Rights

Subject to applicable law and its commencement provisions, you may have the right to:

• Access information: Request information about the personal data we process and the purposes for which it is used.
• Correction and updating: Request correction of inaccurate or incomplete personal information.
• Erasure: Request deletion of personal information where applicable, subject to lawful retention requirements.
• Withdraw consent: Withdraw consent for processing activities that rely on your consent.
• Grievance redressal: Raise a concern or complaint about how your personal information is handled.
• Nominate an individual: Nominate another individual to exercise applicable rights on your behalf in accordance with the law.

To exercise a right, please contact us using the details in the Contact and Grievance Redressal section. We may need to verify your identity before acting on your request. We will respond within the period prescribed by applicable law and may request additional information where reasonably necessary to process your request.

11. Children's Privacy

Our website and business services are intended primarily for businesses and individuals acting in a professional or commercial capacity. They are not directed towards children.

Please do not submit a child's personal information through our website. Where applicable law requires specific safeguards or verifiable parental consent for processing a child's personal data, we will comply with those requirements.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us so that we can review the matter and take appropriate action.

12. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms or services. These external services operate under their own privacy policies and terms.

AAJ SCM does not control the privacy practices of third-party websites. We encourage you to review their policies before sharing personal information with them.

13. International Data Processing

Some of our technology, hosting, analytics or advertising providers may process information using infrastructure located outside India.

Where personal information is transferred or processed outside India, we will take steps required by applicable Indian law and comply with any relevant restrictions or directions issued by the competent authorities.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, business practices, technologies or applicable laws.

The revised version will be published on this page with an updated “Last Updated” date. Where required by law, we will provide additional notice or seek consent for material changes in data-processing purposes. We encourage you to review this page periodically.

15. Contact and Grievance Redressal

For questions about this Privacy Policy, requests relating to personal information, consent withdrawal or privacy complaints, please contact our team:

Please include sufficient information to help us understand and address your request. We may contact you if further information is needed to verify your identity or clarify your concern. We will review and respond to privacy requests and complaints in accordance with our internal grievance process and applicable law.

16. Applicable Law

This Privacy Policy is governed by the laws of India, including applicable data protection and information technology legislation.

Any dispute relating to this Policy will be handled by the courts or authorities having jurisdiction under applicable law.