Privacy Policy
This Privacy Policy explains how Pink Stone Consulting Solutions LLC ("THEBR", "we") collects, uses, shares, and protects your personal data when you use the THEBR website, application, and services. We act as the data fiduciary / controller for this data.
1. Data we collect
- Registration data: name, email, mobile/WhatsApp number, business name, business category, city, region, networking background, and anything you write in your application.
- Account & usage data: profile details, referrals you pass or receive, and activity on the Platform.
- Payment data: handled by our payment provider (Merchant of Record); we do not store full card details.
- Technical data: device and log information and cookies necessary to run the Platform.
2. Why we use it (purpose)
- To review your application and manage the Founding Member waiting list.
- To provide, personalise, and improve the Platform and referral matching.
- To communicate with you about your application, account, and service.
- To process payments, prevent fraud, and comply with legal obligations.
3. Legal basis
We process your data on the basis of your consent, which you give when you submit the registration form, and for related legitimate uses permitted by applicable law. You can withdraw consent at any time (see "Your rights").
4. Consent
By submitting the registration form you consent to the collection and use of your data as described here. Consent is free, specific, informed, and given by clear affirmative action, and you may withdraw it at any time; withdrawal does not affect processing already carried out.
5. Who we share it with
- Our payment provider (Merchant of Record) to process payments.
- Trusted service providers (e.g. hosting, email, analytics) under confidentiality obligations, only as needed.
- Other members, only to the extent you choose to share a profile or pass/receive a referral.
- Authorities where required by law.
We do not sell your personal data.
6. International transfer
THEBR operates from Oman and serves members in several countries, so your data may be processed outside your country, including in Oman and by global service providers. We take reasonable steps to protect data wherever it is processed. Transfers of data of members in India are made in line with the Digital Personal Data Protection Act, 2023 and its Rules.
7. Retention
We keep personal data only as long as needed for the purposes above or as required by law, and then delete or anonymise it. If your application is unsuccessful or your account becomes inactive for an extended period, we will delete your data in line with our retention schedule.
8. Security
We use reasonable technical and organisational safeguards to protect your data. No system is perfectly secure; in the event of a personal-data breach we will notify the relevant authority and affected individuals as required by applicable law.
9. Your rights
Subject to applicable law (including India's DPDP Act and, where relevant, the GDPR), you may:
- access a summary of the data we hold about you;
- correct or update inaccurate data;
- request erasure of your data;
- withdraw consent at any time;
- nominate another person to exercise your rights in the event of death or incapacity; and
- raise a grievance and have it addressed.
To exercise any right, contact our Grievance Officer below. We aim to respond within the timelines set by applicable law (for India, grievances are addressed within 90 days).
10. Children
THEBR is for business owners aged 18 and over. We do not knowingly collect data from anyone under 18, and we do not track, profile, or direct advertising at children.
11. Cookies
We use only the cookies needed to operate the Platform and, where required, ask for your consent to any non-essential cookies. You can control cookies through your browser settings.
12. Grievance Officer & contact
Grievance Officer: [Mohamad Sharif], [grievance@thebizrefrootwork.com]. General privacy queries: [privacy@thebizrefrootwork.com].
13. Changes
We may update this Policy from time to time; material changes will be notified on the Platform.