India Data Protection Notice (DPDP)

Sasha Enterprises

Trading as: Sasha Enterprises

Website: https://sashaenterprises.com

Email: info@sashaenterprises.com

Registered Address: Sasha Enterprises, Cuffe Parade, 13, H 134, MAKER TOWER, G D SOMANI MARG, Mumbai, Maharashtra, 400005, India

This notice explains how Sasha Enterprises handles digital personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and applicable rules.

1. Data Fiduciary

For the purposes of Indian data protection law, Sasha Enterprises acts as a Data Fiduciary in relation to personal data it determines the purpose and means of processing.

2. Consent and Notice

Where consent is required, we seek it through clear and plain notices that explain:

• what personal data is being processed;
• the purposes of processing;
• how to withdraw consent;
• how to exercise rights; and
• how to raise a grievance.

Consent notices are provided in English and Hindi where appropriate.

3. Purpose Limitation

We process digital personal data only for lawful purposes connected to:

• responding to enquiries;
• assessing sourcing and transaction feasibility;
• entering into and performing contracts;
• documentation, logistics, and payment coordination;
• legal and compliance recordkeeping;
• fraud prevention, sanctions checks, and security; and
• communications for which consent or another lawful ground exists.

We do not process personal data for purposes incompatible with those for which it was originally collected.

4. Data Fiduciary Obligations

We undertake to:

• process data lawfully and for specified purposes;
• implement reasonable security safeguards;
• ensure our processors act under appropriate instructions and controls;
• correct or erase data where required and where retention is not otherwise necessary;
• notify the Data Protection Board of India and affected individuals in the event of a personal data breach;
• establish grievance redress mechanisms; and
• publish contact details for privacy-related communications.

5. Rights of Data Principals

Subject to applicable law, you may have the right to:

• access a summary of the personal data we process about you and related processing activities;
• request correction, completion, updating, or erasure of personal data;
• seek grievance redressal;
• nominate another person to exercise your rights in the event of death or incapacity; and
• withdraw consent, where processing is based on consent.

6. Cross-Border Processing

Because our business is international, personal data may be processed outside India, subject to Indian legal requirements and any transfer restrictions notified by the Government of India.

7. Retention and Deletion

We retain personal data only for as long as necessary for the stated purpose, compliance, dispute management, fraud prevention, and recordkeeping. When the purpose is complete and retention is no longer required, data is deleted or anonymised in accordance with applicable law and business controls.

8. Children’s Data

Our Website and services are intended for business use and not for children. We do not knowingly seek to process children’s personal data through the Website. If we become aware that a child’s data has been processed without verifiable parental consent, we will delete it promptly.

9. Grievance Officer Contact

For grievances, rights requests, or privacy complaints under Indian law, contact:

Name: Saurabh Soparkar
Designation: Grievance Officer / Privacy Contact
Email: info@sashaenterprises.com
Address: Sasha Enterprises, Cuffe Parade, 13, H 134, MAKER TOWER, G D SOMANI MARG, Mumbai, Maharashtra, 400005, India

Complaints will be acknowledged within forty-eight (48) hours and resolved within thirty (30) days of receipt.

10. Escalation

If a grievance is not resolved through our internal process, you may have the right to pursue remedies available under applicable Indian law, including approaching the competent authority or Data Protection Board of India, where applicable.