All Blue Ingredients is a food ingredient distribution company based in India. We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, communicate with us, or use our services.
This Privacy Policy applies to all visitors, users, and others who access our website or services. By accessing or using our services, you agree to the collection and use of information in accordance with this policy.
We comply with applicable privacy laws, including:
India's Digital Personal Data Protection (DPDP) Act, 2023
UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), where applicable to our clients in the UAE
Other relevant regulations governing international trade and data protection
For any questions about this Privacy Policy, please contact us at:
For the purposes of this Privacy Policy, the following terms have the meanings set forth below:
"Company" refers to All Blue Ingredients.
"Personal Data" means any information that relates to an identified or identifiable natural person.
"Sensitive Personal Data" includes information related to racial or ethnic origin, religious beliefs, political opinions, health status, biometric data, and criminal records.
"Service" refers to the website and services provided by All Blue Ingredients.
"You" means the individual accessing or using our Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
"Device" means any device that can access the Service, such as a computer, mobile phone, or tablet.
"Third-Party Service Provider" means any natural or legal person who processes data on behalf of the Company.
"Data Controller" means the entity that determines the purposes and means of processing Personal Data.
"Data Processor" means an entity that processes Personal Data on behalf of the Data Controller.
Under the UAE PDPL, we process personal data based on one or more of the following lawful grounds:
Consent: Where you have explicitly agreed to the processing of your personal data for specific purposes.
Contractual Necessity: To fulfill our obligations to you when you engage our services or place an order.
Legal Obligation: To comply with tax, customs, and other legal requirements.
Public Interest: To protect public interest or vital interests.
Important Note on Marketing: Under UAE law, organizations may only use personal data for marketing purposes with the consent of the data subject. We will obtain explicit consent for marketing communications and provide clear opt-out mechanisms.
For International Clients (USA, Australia, Germany)
We rely on the following legal bases:
Legitimate Interests: For our legitimate business interests in promoting our products and services.
Performance of a Contract: To fulfill our obligations to you.
Legal Obligation: To comply with applicable laws.
Consent: Where you have explicitly agreed.
For Indian Clients (Under DPDP Act, 2023)
Under India's Digital Personal Data Protection Act, 2023, we process personal data based on:
Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
Legitimate Uses: Where processing is necessary for the performance of a contract, compliance with legal obligations, or other legitimate purposes as specified under the Act.
We do not sell, rent, or lease your personal information to third parties for their marketing purposes.
We may share your information with the following categories of third parties to operate our business:
Logistics and Freight Partners: Shipping companies, freight forwarders, and customs agents to deliver your orders.
Service Providers: Third-party vendors who assist us in operating our business, such as:
Email marketing platforms
CRM systems
Cloud hosting providers
Payment processors
Analytics providers
Legal and Regulatory Authorities: Government bodies, tax authorities, and courts, when required by law or to respond to legal processes.
Business Transfers: In the event of a merger, acquisition, or sale of our company, your information may be transferred as part of the transaction, subject to confidentiality protections.
Professional Advisors: Auditors, lawyers, and insurers who provide professional services to us.
We require all third-party service providers to maintain the confidentiality and security of your personal data and to process it only in accordance with our instructions. We enter into data processing agreements with our service providers to ensure compliance with applicable data protection laws.
As a global food ingredient distributor, we operate internationally and may transfer your personal data to countries outside your home country. This may include transfers to India, the UAE, and other regions as needed for legitimate business purposes.
Under UAE PDPL: The transfer of personal data outside the UAE is permitted only if the destination jurisdiction ensures an adequate level of data protection or where appropriate safeguards are implemented, such as approved contractual clauses or explicit consent from the data subject.
Under DPDP Act: The transfer of personal data outside India is permitted subject to compliance with the requirements of the DPDP Act and applicable rules. We ensure appropriate safeguards are in place for such transfers.
For transfers from the UAE or other jurisdictions, we ensure appropriate safeguards are in place to protect your data.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
Active Client Data: Duration of business relationship + 2 years for client service purposes.
Transaction Records: 7 years to comply with Indian tax (GST) and customs regulations.
Marketing Data: Until you opt-out or after 2 years of inactivity.
Legal Requirements: Where required by law, we may retain data for longer periods to comply with legal obligations, resolve disputes, or enforce our agreements.
Website Analytics Data: Up to 26 months from collection.
When personal data is no longer required, we securely delete or anonymize it in accordance with our data retention procedures.
The PDPL grants individuals a set of rights designed to increase transparency and control over their personal data. These include:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): Request deletion of your data in defined circumstances.
Right to Restrict Processing: Request that we restrict the processing of your data in certain cases.
Right to Object: Object to the processing of your data, including for direct marketing purposes.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Withdraw Consent: Where we rely on your consent, you have the right to withdraw it at any time.
For Indian Clients (Under DPDP Act, 2023)
Under India's Digital Personal Data Protection Act, 2023, you have the following rights:
Right to Access: Request a summary of the personal data we process about you.
Right to Correction and Erasure: Request correction of inaccurate data or erasure of data no longer necessary.
Right to Grievance Redressal: Lodge a complaint with our Grievance Officer.
Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity.
For International Clients
Depending on your location, you may also have:
Rights under the CCPA (California Consumer Privacy Act) for California residents, including the right to know, delete, and opt-out of the sale of personal information.
Rights under other applicable laws in the USA, Australia, or Germany.
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
We will respond to your request within the timeframes required by applicable law (typically within 30 days). We may ask you to verify your identity before processing your request.
If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
We take the security of your personal data seriously and implement reasonable and appropriate technical and organizational measures to protect it. These measures include:
Encryption: Using SSL/TLS encryption for data transmission.
Access Controls: Restricting access to personal data to authorized personnel only.
Security Assessments: Regularly reviewing and updating our security practices.
Employee Training: Training our employees on data protection and privacy practices.
Incident Response: Maintaining a documented incident response plan to address potential data breaches.
Regular Backups: Performing regular data backups to prevent data loss.
Under UAE law, controllers and processors must implement technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, loss, or destruction. While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
As part of our business development efforts, we send marketing emails to potential and existing clients who may have an interest in our products. These communications may include:
Product updates and new offerings
Industry news and insights
Promotional offers
Under UAE PDPL: We will obtain your clear and explicit consent before sending marketing communications. You have the right to withdraw this consent at any time.
Under DPDP Act: We will obtain your consent before sending marketing communications, and you may withdraw your consent at any time.
Your Choices
Opt-Out: Every marketing email we send includes a clear and easy-to-use unsubscribe link. You may opt out of receiving marketing communications at any time by clicking the unsubscribe link in the email.
Update Preferences: You may contact us directly to update your communication preferences.
Do Not Track: Our website does not currently respond to "Do Not Track" signals.
Our website uses cookies and similar tracking technologies to enhance your experience, analyze usage, and improve our services.
What are Cookies?
Cookies are small text files placed on your device by your web browser. They help us remember your preferences and understand how you interact with our website.
Types of Cookies We Use
Essential Cookies: Necessary for the basic functioning of our website.
Analytics Cookies: Help us understand how visitors interact with our website.
Preference Cookies: Remember your preferences and settings.
Marketing Cookies: Used to track visitors across websites for advertising purposes.
Cookie Consent
Where required by law, we will obtain your consent before placing non-essential cookies on your device. You may withdraw your consent at any time through your browser settings or our cookie preference center.
Your Choices
You can set your browser to refuse all cookies or to indicate when a cookie is being sent.
However, please note that disabling cookies may affect some functionality of our website.
Our website may contain links to third-party websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.
Our services and marketing are directed at business professionals and food manufacturers. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information from our systems.
If you believe we may have collected information from a child under 18, please contact us immediately at info@allblueingredients.com.
Under UAE PDPL: In the event of a personal data breach that is likely to present a risk to individuals' rights or freedoms, we will notify the competent authority and, where required, the affected individuals. We will act quickly to contain the incident, assess the impact, and document our actions.
Under DPDP Act: In the event of a personal data breach, we will notify the Data Protection Board of India and affected data principals in accordance with the requirements of the DPDP Act.
We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or industry standards. We will notify you of any material changes by:
Posting the updated policy on our website with a new "Last Updated" date
Notifying you via email or other communication channels where appropriate
We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of such changes.
If you have any concerns or complaints about how we handle your personal data, please contact us first. We will make every effort to resolve your concerns.
For complaints under Indian law (DPDP Act)
You may contact our designated grievance officer at:
