Privacy Policy: Nalhati Farmer Producer Company Limited
Data Governance, Privacy Compliance, and Information Security Framework
Effective Date: 21 December 2022
Document Reference: NHFPC-PP-2022-V1
Corporate Identification Number (CIN): U01111WB2022PTC259091
Jurisdiction: Registrar of Companies (ROC), Kolkata, West Bengal, India
Effective Date: 21 December 2022
Document Reference: NHFPC-PP-2022-V1
Corporate Identification Number (CIN): U01111WB2022PTC259091
Jurisdiction: Registrar of Companies (ROC), Kolkata, West Bengal, India
1. Introduction and Legal Framework
1.1 Corporate Commitment to Privacy
Nalhati Farmer Producer Company Limited (hereinafter referred to as "Nalhati FPC," "the Company," "we," "us," or "our"), incorporated under the provisions of the Companies Act, 2013, recognizes that data privacy is an essential pillar of corporate governance and community trust. As an agricultural cooperative entity serving farmers, rural producers, and stakeholders across the Nalhati region of Birbhum, West Bengal, we are committed to safeguarding the Personal Identification Information (PII) and operational agricultural data entrusted to us.
This Privacy Policy (hereinafter "Policy") provides a comprehensive, transparent, and legally grounded disclosure of our practices regarding the collection, processing, storage, dissemination, protection, and erasure of user data.
Nalhati Farmer Producer Company Limited (hereinafter referred to as "Nalhati FPC," "the Company," "we," "us," or "our"), incorporated under the provisions of the Companies Act, 2013, recognizes that data privacy is an essential pillar of corporate governance and community trust. As an agricultural cooperative entity serving farmers, rural producers, and stakeholders across the Nalhati region of Birbhum, West Bengal, we are committed to safeguarding the Personal Identification Information (PII) and operational agricultural data entrusted to us.
This Privacy Policy (hereinafter "Policy") provides a comprehensive, transparent, and legally grounded disclosure of our practices regarding the collection, processing, storage, dissemination, protection, and erasure of user data.
1.2 Statutory Compliance Framework
This Policy is formulated in strict accordance with the prevailing data protection legislation in India, including but not limited to:
The Digital Personal Data Protection Act, 2023 (DPDP Act);
The Information Technology Act, 2000 (specifically Section 43A and Section 72A);
The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "SPDI Rules"); and
Regulatory guidelines issued by the Ministry of Corporate Affairs (MCA), Ministry of Agriculture and Farmers Welfare, and the Reserve Bank of India (RBI) concerning rural data processing and financial transactions.
┌────────────────────────────────────────────────────────┐
│ STATUTORY COMPLIANCE ARCHITECTURE │
├────────────────────────────────────────────────────────┤
│ • Digital Personal Data Protection Act (DPDP), 2023 │
│ • Information Technology Act, 2000 (Sec 43A / 72A) │
│ • IT (Reasonable Security Practices) Rules, 2011 │
│ • MCA & Ministry of Agriculture Regulatory Frameworks │
└────────────────────────────────────────────────────────┘
This Policy is formulated in strict accordance with the prevailing data protection legislation in India, including but not limited to:
The Digital Personal Data Protection Act, 2023 (DPDP Act);
The Information Technology Act, 2000 (specifically Section 43A and Section 72A);
The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "SPDI Rules"); and
Regulatory guidelines issued by the Ministry of Corporate Affairs (MCA), Ministry of Agriculture and Farmers Welfare, and the Reserve Bank of India (RBI) concerning rural data processing and financial transactions.
┌────────────────────────────────────────────────────────┐
│ STATUTORY COMPLIANCE ARCHITECTURE │
├────────────────────────────────────────────────────────┤
│ • Digital Personal Data Protection Act (DPDP), 2023 │
│ • Information Technology Act, 2000 (Sec 43A / 72A) │
│ • IT (Reasonable Security Practices) Rules, 2011 │
│ • MCA & Ministry of Agriculture Regulatory Frameworks │
└────────────────────────────────────────────────────────┘
1.3 Scope of the Policy
This Policy governs data interactions across all touchpoints managed by Nalhati FPC, which encompass:
Digital Assets: Our official website, mobile applications, SMS broadcast systems, WhatsApp automated channels (+91 6297535313), and allied web portals.
Field and Cooperative Operations: Physical interactions, including membership enrollment drives, paddy procurement centers, farm machinery rental registries, agronomic training workshops, and administration of state-backed schemes such as the Bangla Krishi Sech Yojana.
Institutional Frameworks: B2B commercial dealings, logistics partnerships, financial services facilitation, and interaction with state and central government departments.
By registering as a shareholder member, accessing our digital platforms, engaging our machinery services, or tendering produce at our procurement facilities, you acknowledge that you have read, understood, and consented to the data processing terms outlined in this Policy.
This Policy governs data interactions across all touchpoints managed by Nalhati FPC, which encompass:
Digital Assets: Our official website, mobile applications, SMS broadcast systems, WhatsApp automated channels (
+91 6297535313), and allied web portals.Field and Cooperative Operations: Physical interactions, including membership enrollment drives, paddy procurement centers, farm machinery rental registries, agronomic training workshops, and administration of state-backed schemes such as the Bangla Krishi Sech Yojana.
Institutional Frameworks: B2B commercial dealings, logistics partnerships, financial services facilitation, and interaction with state and central government departments.
By registering as a shareholder member, accessing our digital platforms, engaging our machinery services, or tendering produce at our procurement facilities, you acknowledge that you have read, understood, and consented to the data processing terms outlined in this Policy.
2. Definitional Interpretations
To ensure total clarity for our members, regulators, and legal auditors, the following terminology used throughout this document shall have the meanings ascribed below:
Data Principal / User: Any natural person—including individual farmers, landholders, cooperative members, sharecroppers, vendors, employees, or website visitors—whose personal data is collected or processed by the Company.
Data Fiduciary: Nalhati Farmer Producer Company Limited, which determines the purpose and means of processing personal data.
Personal Data / PII: Any information relating to an identified or identifiable natural person. This includes direct identifiers (e.g., names, phone numbers) and indirect identifiers (e.g., land parcel numbers, asset ownership profiles).
Sensitive Personal Data or Information (SPDI): Passwords, financial information (bank account details, credit/debit card data), biometric records, or health status metrics as defined under Rule 3 of the IT SPDI Rules, 2011.
Processing: An automated or manual operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, or erasure.
Consent Manager: A data platform or representative registered under the DPDP Act through whom a Data Principal may give, manage, review, or withdraw consent.
To ensure total clarity for our members, regulators, and legal auditors, the following terminology used throughout this document shall have the meanings ascribed below:
Data Principal / User: Any natural person—including individual farmers, landholders, cooperative members, sharecroppers, vendors, employees, or website visitors—whose personal data is collected or processed by the Company.
Data Fiduciary: Nalhati Farmer Producer Company Limited, which determines the purpose and means of processing personal data.
Personal Data / PII: Any information relating to an identified or identifiable natural person. This includes direct identifiers (e.g., names, phone numbers) and indirect identifiers (e.g., land parcel numbers, asset ownership profiles).
Sensitive Personal Data or Information (SPDI): Passwords, financial information (bank account details, credit/debit card data), biometric records, or health status metrics as defined under Rule 3 of the IT SPDI Rules, 2011.
Processing: An automated or manual operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, or erasure.
Consent Manager: A data platform or representative registered under the DPDP Act through whom a Data Principal may give, manage, review, or withdraw consent.
3. Categories of Information Collected
Nalhati FPC collects data through legal, fair, and transparent methods. We limit data collection to the minimum details required to fulfill our cooperative, commercial, and statutory duties.
┌────────────────────────────────────────┐
│ NALHATI FPC DATA REPOSITORY TYPE │
└───────────────────┬────────────────────┘
│
┌────────────────────────────┼────────────────────────────┐
▼ ▼ ▼
┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐
│ Section 3.1 │ │ Section 3.2 │ │ Section 3.3 │
│ Personal Id │ │ Agricultural & │ │ Technical & │
│ Metrics (PII) │ │ Transactional │ │ Digital Footprint│
└──────────────────┘ └──────────────────┘ └──────────────────┘
Nalhati FPC collects data through legal, fair, and transparent methods. We limit data collection to the minimum details required to fulfill our cooperative, commercial, and statutory duties.
┌────────────────────────────────────────┐
│ NALHATI FPC DATA REPOSITORY TYPE │
└───────────────────┬────────────────────┘
│
┌────────────────────────────┼────────────────────────────┐
▼ ▼ ▼
┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐
│ Section 3.1 │ │ Section 3.2 │ │ Section 3.3 │
│ Personal Id │ │ Agricultural & │ │ Technical & │
│ Metrics (PII) │ │ Transactional │ │ Digital Footprint│
└──────────────────┘ └──────────────────┘ └──────────────────┘
3.1 Personal Identification Information (PII)
During the shareholder onboarding phase, membership registry formation, or community enrollment, we collect:
Identity Verifiers: Legal full name, father’s/spouse's name, gender, date of birth, and photographic imagery for Know Your Customer (KYC) records.
Official Credentials: Government-issued identification documentation, including Aadhaar Number, Permanent Account Number (PAN), Voter ID (EPIC), and Mahatma Gandhi National Rural Employment Guarantee Act (MGNREGA) Job Card details.
Contact Protocols: Physical residential address, land revenue village address, active mobile telephone numbers, WhatsApp contact credentials, and email coordinates (e.g., nalhatifpc@gmail.com).
During the shareholder onboarding phase, membership registry formation, or community enrollment, we collect:
Identity Verifiers: Legal full name, father’s/spouse's name, gender, date of birth, and photographic imagery for Know Your Customer (KYC) records.
Official Credentials: Government-issued identification documentation, including Aadhaar Number, Permanent Account Number (PAN), Voter ID (EPIC), and Mahatma Gandhi National Rural Employment Guarantee Act (MGNREGA) Job Card details.
Contact Protocols: Physical residential address, land revenue village address, active mobile telephone numbers, WhatsApp contact credentials, and email coordinates (e.g.,
nalhatifpc@gmail.com).
3.2 Agricultural, Spatial, and Transactional Data
To run our primary business operations—including input supplies, mechanized support, and paddy procurement—we process:
Land and Spatial Data: Land deed documentation (Khatian and Dag numbers), total cultivable area, geographic coordinates of farms, soil health profiles, irrigation source status, and historical crop rotation matrices.
Agronomic Operational Metrics: Crop types sown (e.g., Aman/Boro Paddy, mustard, pulses), projected harvest timelines, crop yields, fertilizer and pesticide consumption rates, and water utilization figures under the Bangla Krishi Sech Yojana.
Logistical and Equipment Rental Logs: Details on shared farm machinery reservations, duration of tractor/harvester usage, operator logs, and field deployment locations.
Financial and Procurement Records: Transaction balances for produce delivered to procurement centers, bank account numbers, IFSC codes, bank branch distributions, processing fees, credit history for input financing, and subsidy receipt tracking.
To run our primary business operations—including input supplies, mechanized support, and paddy procurement—we process:
Land and Spatial Data: Land deed documentation (Khatian and Dag numbers), total cultivable area, geographic coordinates of farms, soil health profiles, irrigation source status, and historical crop rotation matrices.
Agronomic Operational Metrics: Crop types sown (e.g., Aman/Boro Paddy, mustard, pulses), projected harvest timelines, crop yields, fertilizer and pesticide consumption rates, and water utilization figures under the Bangla Krishi Sech Yojana.
Logistical and Equipment Rental Logs: Details on shared farm machinery reservations, duration of tractor/harvester usage, operator logs, and field deployment locations.
Financial and Procurement Records: Transaction balances for produce delivered to procurement centers, bank account numbers, IFSC codes, bank branch distributions, processing fees, credit history for input financing, and subsidy receipt tracking.
3.3 Technical and Digital Network Footprints
When users interact with our web systems and online tools, our servers automatically log technical metadata, including:
Network Network Logs: Internet Protocol (IP) addresses, Geolocation parameters, Internet Service Provider (ISP) routing, and specific device parameters (e.g., hardware models, operating systems, and viewport metrics).
Session Navigation Metrics: Uniform Resource Locator (URL) clickstreams, page response times, navigation tracking within our apps, download errors, specific areas visited, and the length of time spent on digital portals.
Local Storage Indicators: Browser cookies, web beacons, tracking pixels, and local storage tokens deployed to optimize digital interface loading times.
When users interact with our web systems and online tools, our servers automatically log technical metadata, including:
Network Network Logs: Internet Protocol (IP) addresses, Geolocation parameters, Internet Service Provider (ISP) routing, and specific device parameters (e.g., hardware models, operating systems, and viewport metrics).
Session Navigation Metrics: Uniform Resource Locator (URL) clickstreams, page response times, navigation tracking within our apps, download errors, specific areas visited, and the length of time spent on digital portals.
Local Storage Indicators: Browser cookies, web beacons, tracking pixels, and local storage tokens deployed to optimize digital interface loading times.
3.4 Communication and Engagement Archives
We log and archive inbound and outbound communications, including:
Audio recordings of telephonic support calls to our designated lines (6297535313, 9547634720).
Text communications received over WhatsApp, SMS networks, or custom field-worker applications.
Physical feedback sheets, grievances, workshop attendance sheets, and minutes of village-level cooperative group meetings.
We log and archive inbound and outbound communications, including:
Audio recordings of telephonic support calls to our designated lines (
6297535313,9547634720).Text communications received over WhatsApp, SMS networks, or custom field-worker applications.
Physical feedback sheets, grievances, workshop attendance sheets, and minutes of village-level cooperative group meetings.
4. Comprehensive Purposes of Data Processing
Nalhati FPC operates on the principle of purpose limitation. Data collected for a specific objective is never used for unrelated administrative or commercial tasks without explicit consent.
┌───────────────────────────────────────────────────────────────────────────┐
│ CORE FUNCTIONAL DATA UTILITY MAP │
├───────────────────────────────────────────────────────────────────────────┤
│ • Operationalization of Paddy Procurement & MSP Disbursement │
│ • Fleet Routing & Scheduling for Shared Farm Machinery Units │
│ • Statutory Audits, MCA Filing & ROC Kolkata Compliance Management │
│ • Real-time Agronomic Advice, Weather Notifications & Pest Guidance │
│ • Subsidy Verification under Bangla Krishi Sech Yojana │
└───────────────────────────────────────────────────────────────────────────┘
Nalhati FPC operates on the principle of purpose limitation. Data collected for a specific objective is never used for unrelated administrative or commercial tasks without explicit consent.
┌───────────────────────────────────────────────────────────────────────────┐
│ CORE FUNCTIONAL DATA UTILITY MAP │
├───────────────────────────────────────────────────────────────────────────┤
│ • Operationalization of Paddy Procurement & MSP Disbursement │
│ • Fleet Routing & Scheduling for Shared Farm Machinery Units │
│ • Statutory Audits, MCA Filing & ROC Kolkata Compliance Management │
│ • Real-time Agronomic Advice, Weather Notifications & Pest Guidance │
│ • Subsidy Verification under Bangla Krishi Sech Yojana │
└───────────────────────────────────────────────────────────────────────────┘
4.1 Cooperative Administration & Shareholder Management
Verifying identity credentials to maintain our official Shareholder Register under the provisions of the Companies Act, 2013.
Managing dividend payments, equity distribution schemes, voter identification cards for internal board elections, and official corporate communications regarding Annual General Meetings (AGMs).
Verifying identity credentials to maintain our official Shareholder Register under the provisions of the Companies Act, 2013.
Managing dividend payments, equity distribution schemes, voter identification cards for internal board elections, and official corporate communications regarding Annual General Meetings (AGMs).
4.2 Optimizing Paddy Procurement Operations
Confirming farmer identity at procurement centers to prevent proxy sales and ensure direct benefits reach authentic cultivators.
Calculating correct monetary compensation based on weighing parameters, quality tests, and moisture analysis metrics.
Sharing transaction logs with state banking channels to process direct bank transfers, matching official Minimum Support Price (MSP) directives.
Confirming farmer identity at procurement centers to prevent proxy sales and ensure direct benefits reach authentic cultivators.
Calculating correct monetary compensation based on weighing parameters, quality tests, and moisture analysis metrics.
Sharing transaction logs with state banking channels to process direct bank transfers, matching official Minimum Support Price (MSP) directives.
4.3 Scheduling and Managing Shared Farm Machinery
Managing reservation queues for tractors, combine harvesters, and seed drills to prevent double-bookings and optimize machinery usage across villages.
Tracking operational time and mileage for shared equipment to plan maintenance schedules, calculate rental costs, and reduce downtime.
Managing reservation queues for tractors, combine harvesters, and seed drills to prevent double-bookings and optimize machinery usage across villages.
Tracking operational time and mileage for shared equipment to plan maintenance schedules, calculate rental costs, and reduce downtime.
4.4 Implementing State-Backed Development Initiatives
Helping farmers complete application paperwork, verify land holdings, and confirm eligibility criteria for schemes like the Bangla Krishi Sech Yojana.
Monitoring water consumption improvements, micro-irrigation hardware installations, and overall agricultural yields to generate impact evaluation reports for state planning bodies.
Helping farmers complete application paperwork, verify land holdings, and confirm eligibility criteria for schemes like the Bangla Krishi Sech Yojana.
Monitoring water consumption improvements, micro-irrigation hardware installations, and overall agricultural yields to generate impact evaluation reports for state planning bodies.
4.5 Communications, Alerts, and Capacity Building
Sending out urgent, localized alerts via SMS and WhatsApp regarding shifting weather patterns, pest breakouts, and regional market pricing updates.
Inviting community members to localized agronomic workshops, training events, and field demonstrations centered on sustainable farming.
Sending out urgent, localized alerts via SMS and WhatsApp regarding shifting weather patterns, pest breakouts, and regional market pricing updates.
Inviting community members to localized agronomic workshops, training events, and field demonstrations centered on sustainable farming.
4.6 Regulatory Compliance and Corporate Security
Generating mandatory reports, accounting sheets, and compliance filings for ROC Kolkata and tax authorities.
Investigating and preventing unauthorized equipment use, fraudulent transaction attempts, or security breaches across our digital networks.
Generating mandatory reports, accounting sheets, and compliance filings for ROC Kolkata and tax authorities.
Investigating and preventing unauthorized equipment use, fraudulent transaction attempts, or security breaches across our digital networks.
5. Information Sharing, Disclosure, and Third-Party Transfers
Nalhati FPC does not sell, trade, lease, or rent its member data to third-party marketing companies. Data disclosures are restricted to trusted partners under strict legal and contractual confidentiality agreements.
┌────────────────────────────────────────┐
│ DISCLOSURE & TRANSMISSION SYSTEM │
└───────────────────┬────────────────────┘
│
┌────────────────────────────┼────────────────────────────┐
▼ ▼ ▼
┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐
│ Cloud / IT │ │ Financial & │ │ Regulatory & │
│ Providers │ │ Banking Nodes │ │ Judicial Organs │
└──────────────────┘ └──────────────────┘ └──────────────────┘
Nalhati FPC does not sell, trade, lease, or rent its member data to third-party marketing companies. Data disclosures are restricted to trusted partners under strict legal and contractual confidentiality agreements.
┌────────────────────────────────────────┐
│ DISCLOSURE & TRANSMISSION SYSTEM │
└───────────────────┬────────────────────┘
│
┌────────────────────────────┼────────────────────────────┐
▼ ▼ ▼
┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐
│ Cloud / IT │ │ Financial & │ │ Regulatory & │
│ Providers │ │ Banking Nodes │ │ Judicial Organs │
└──────────────────┘ └──────────────────┘ └──────────────────┘
5.1 Cloud Infrastructure and IT Systems Providers
We partner with verified IT enterprises, software engineers, and cloud database providers to host our management dashboards and digital apps. These processing partners operate under strict confidentiality clauses and cannot use the data for any purpose other than providing infrastructure services to Nalhati FPC.
We partner with verified IT enterprises, software engineers, and cloud database providers to host our management dashboards and digital apps. These processing partners operate under strict confidentiality clauses and cannot use the data for any purpose other than providing infrastructure services to Nalhati FPC.
5.2 Banking and Financial Network Connections
To process secure digital payments, grain procurement disbursements, and subsidy allocations, relevant transaction data is shared with partner commercial banks, regional rural banks (RRBs), the National Payments Corporation of India (NPCI), and authorized payment gateway platforms.
To process secure digital payments, grain procurement disbursements, and subsidy allocations, relevant transaction data is shared with partner commercial banks, regional rural banks (RRBs), the National Payments Corporation of India (NPCI), and authorized payment gateway platforms.
5.3 Public Sector, Agricultural, and State Departments
In our role as an execution partner for rural welfare schemes, Nalhati FPC may share verified field data with:
The Department of Agriculture, Government of West Bengal;
Food and Supplies procurement verification platforms;
Public soil-testing laboratories and regional state research universities.
This data sharing is limited to confirming eligibility and verifying physical outcomes for state programs like the Bangla Krishi Sech Yojana.
In our role as an execution partner for rural welfare schemes, Nalhati FPC may share verified field data with:
The Department of Agriculture, Government of West Bengal;
Food and Supplies procurement verification platforms;
Public soil-testing laboratories and regional state research universities.
This data sharing is limited to confirming eligibility and verifying physical outcomes for state programs like the Bangla Krishi Sech Yojana.
5.4 Statutory Disclosures and Legal Mandates
The Company will share user data with law enforcement agencies, tax inspectors, judicial courts, or regulatory auditors only when:
Required by applicable legislation, court orders, or administrative decrees;
Necessary to defend the legal rights, assets, or operational safety of Nalhati FPC, its workforce, or its farming community.
The Company will share user data with law enforcement agencies, tax inspectors, judicial courts, or regulatory auditors only when:
Required by applicable legislation, court orders, or administrative decrees;
Necessary to defend the legal rights, assets, or operational safety of Nalhati FPC, its workforce, or its farming community.
6. Advanced Data Security Architecture
Nalhati FPC maintains comprehensive technical and physical security protocols designed to safeguard personal data against loss, unauthorized access, destruction, alteration, or disclosure.
Security Layer Technical Control Measures Implemented Data Encryption 256-bit Advanced Encryption Standard (AES-256) for stored data; Transport Layer Security (TLS 1.3) for active network transmissions. Access Control Role-Based Access Control (RBAC) rules limit database access exclusively to authorized managers and technicians. Physical Security Office servers and physical filing systems in Nalhati, Birbhum are secured within locked storage areas under continuous surveillance. Integrity Testing Regular software updates, security assessments, vulnerability checks, and data backup routines. Employee Training Regular privacy workshops for field coordinators, procurement clerks, and administrative staff.
Please note that while we use industry-standard security measures, no data transmission method over the internet or electronic storage framework is completely secure. Users should exercise care when sharing sensitive credentials or financial details through public communication channels.
Nalhati FPC maintains comprehensive technical and physical security protocols designed to safeguard personal data against loss, unauthorized access, destruction, alteration, or disclosure.
| Security Layer | Technical Control Measures Implemented |
| Data Encryption | 256-bit Advanced Encryption Standard (AES-256) for stored data; Transport Layer Security (TLS 1.3) for active network transmissions. |
| Access Control | Role-Based Access Control (RBAC) rules limit database access exclusively to authorized managers and technicians. |
| Physical Security | Office servers and physical filing systems in Nalhati, Birbhum are secured within locked storage areas under continuous surveillance. |
| Integrity Testing | Regular software updates, security assessments, vulnerability checks, and data backup routines. |
| Employee Training | Regular privacy workshops for field coordinators, procurement clerks, and administrative staff. |
Please note that while we use industry-standard security measures, no data transmission method over the internet or electronic storage framework is completely secure. Users should exercise care when sharing sensitive credentials or financial details through public communication channels.
7. Data Retention and Destruction Policies
7.1 Retention Timelines
Nalhati FPC retains your information only for the duration required to meet the operational goals detailed in this Policy, or as mandated by Indian corporate and tax laws.
Shareholder Registry Records: Kept for the entire lifecycle of the company’s corporate operations, as required by the Companies Act, 2013 and ROC Kolkata.
Procurement and Financial Records: Retained for a minimum of eight (8) financial years to comply with Indian tax and accounting regulations.
Agronomic Data and Machinery Logs: Kept for three (3) years to analyze seasonal productivity patterns, unless a longer retention period is required to settle unresolved disputes or contractual matters.
Nalhati FPC retains your information only for the duration required to meet the operational goals detailed in this Policy, or as mandated by Indian corporate and tax laws.
Shareholder Registry Records: Kept for the entire lifecycle of the company’s corporate operations, as required by the Companies Act, 2013 and ROC Kolkata.
Procurement and Financial Records: Retained for a minimum of eight (8) financial years to comply with Indian tax and accounting regulations.
Agronomic Data and Machinery Logs: Kept for three (3) years to analyze seasonal productivity patterns, unless a longer retention period is required to settle unresolved disputes or contractual matters.
7.2 Secure Erasure Procedures
Once the retention period for a specific data set concludes, or when a user submits a valid data erasure request, Nalhati FPC runs its disposal protocols:
Digital Files: Overwritten using specialized deletion tools or permanently scrubbed from active storage databases.
Physical Files: Securely shredded or incinerated to prevent recovery.
Archive Backups: Anonymized so that the remaining metrics can be used for broad statistical trends without identifying specific individuals.
Once the retention period for a specific data set concludes, or when a user submits a valid data erasure request, Nalhati FPC runs its disposal protocols:
Digital Files: Overwritten using specialized deletion tools or permanently scrubbed from active storage databases.
Physical Files: Securely shredded or incinerated to prevent recovery.
Archive Backups: Anonymized so that the remaining metrics can be used for broad statistical trends without identifying specific individuals.
8. Data Principal Rights and Choices
In compliance with the DPDP Act, 2023 and the IT Rules, 2011, Nalhati FPC provides members with comprehensive control over their personal data.
┌───────────────────────────────────────────────────────────────────────────┐
│ DATA PRINCIPAL CHARTER OF RIGHTS │
├───────────────────────────────────────────────────────────────────────────┤
│ • Right to Access, Summary & Processing Verifications │
│ • Right to Correction, Rectification & Update of PII │
│ • Right to Erasure, Deletion & Account Deactivation │
│ • Right to Object, Restrict & Halt Target Processing │
│ • Right to Data Portability via Structured Machine-Readable Exports │
│ • Right to Nomination of Representatives for Data Control │
└───────────────────────────────────────────────────────────────────────────┘
In compliance with the DPDP Act, 2023 and the IT Rules, 2011, Nalhati FPC provides members with comprehensive control over their personal data.
┌───────────────────────────────────────────────────────────────────────────┐
│ DATA PRINCIPAL CHARTER OF RIGHTS │
├───────────────────────────────────────────────────────────────────────────┤
│ • Right to Access, Summary & Processing Verifications │
│ • Right to Correction, Rectification & Update of PII │
│ • Right to Erasure, Deletion & Account Deactivation │
│ • Right to Object, Restrict & Halt Target Processing │
│ • Right to Data Portability via Structured Machine-Readable Exports │
│ • Right to Nomination of Representatives for Data Control │
└───────────────────────────────────────────────────────────────────────────┘
8.1 Detailed Breakdown of Rights
Right to Access and Review: You have the right to request a formal summary of the personal data we hold about you, along with descriptions of how it is processed and any third parties it has been shared with.
Right to Rectification and Updates: If your contact numbers, address details, land parcel parameters, or bank credentials change or contain inaccuracies, you can request immediate corrections to maintain accurate records.
Right to Erasure (The Right to be Forgotten): You may request the deletion of your personal information from our active databases, provided that the data is no longer required for active contractual obligations, ongoing procurement cycles, or legal compliance mandates.
Right to Processing Restrictions: You have the option to limit how we use your data—for instance, opting out of automated text updates while keeping your registration active for machinery rentals.
Right to Data Portability: You can request a digital copy of your personal data in a structured, commonly used, machine-readable format, allowing you to transfer it to other systems as desired.
Right to Consent Withdrawal: Where data processing is based on your explicit consent, you can withdraw that consent at any time. This will stop any further processing for those specific tasks, but it does not affect the legality of any data processing carried out before the withdrawal.
Right to Access and Review: You have the right to request a formal summary of the personal data we hold about you, along with descriptions of how it is processed and any third parties it has been shared with.
Right to Rectification and Updates: If your contact numbers, address details, land parcel parameters, or bank credentials change or contain inaccuracies, you can request immediate corrections to maintain accurate records.
Right to Erasure (The Right to be Forgotten): You may request the deletion of your personal information from our active databases, provided that the data is no longer required for active contractual obligations, ongoing procurement cycles, or legal compliance mandates.
Right to Processing Restrictions: You have the option to limit how we use your data—for instance, opting out of automated text updates while keeping your registration active for machinery rentals.
Right to Data Portability: You can request a digital copy of your personal data in a structured, commonly used, machine-readable format, allowing you to transfer it to other systems as desired.
Right to Consent Withdrawal: Where data processing is based on your explicit consent, you can withdraw that consent at any time. This will stop any further processing for those specific tasks, but it does not affect the legality of any data processing carried out before the withdrawal.
8.2 Procedure for Exercising Rights
To exercise any of these rights, please submit a written request to our office or email us at nalhatifpc@gmail.com. Our data compliance team will verify your identity before processing the request, ensuring we respond within the timelines required by law.
To exercise any of these rights, please submit a written request to our office or email us at nalhatifpc@gmail.com. Our data compliance team will verify your identity before processing the request, ensuring we respond within the timelines required by law.
9. Cookies and Digital Tracking Technologies
Our web platforms utilize browser cookies and similar digital identifiers to analyze performance, remember user preferences, and provide a more personalized browsing experience.
Our web platforms utilize browser cookies and similar digital identifiers to analyze performance, remember user preferences, and provide a more personalized browsing experience.
9.1 Classification of Cookies Used
Essential Operational Cookies: Vital for core website functionality, such as securing member login sections or keeping track of machinery booking steps.
Performance and Analytics Cookies: Collect anonymous usage data, helping us understand which pages are visited most often and where navigation issues occur.
Functional Optimization Cookies: Save user-selected choices, such as language preferences or text scaling configurations, to improve subsequent visits.
Targeted Outreach Cookies: Used to assess the performance of informational campaigns regarding government subsidies and new agricultural inputs.
Essential Operational Cookies: Vital for core website functionality, such as securing member login sections or keeping track of machinery booking steps.
Performance and Analytics Cookies: Collect anonymous usage data, helping us understand which pages are visited most often and where navigation issues occur.
Functional Optimization Cookies: Save user-selected choices, such as language preferences or text scaling configurations, to improve subsequent visits.
Targeted Outreach Cookies: Used to assess the performance of informational campaigns regarding government subsidies and new agricultural inputs.
9.2 Managing Cookie Settings
You can modify your cookie preferences through your web browser's settings panel. Please note that disabling essential cookies may impact the performance and availability of certain interactive features on our website.
You can modify your cookie preferences through your web browser's settings panel. Please note that disabling essential cookies may impact the performance and availability of certain interactive features on our website.
10. Cross-Border Data Processing Restrictions
Nalhati FPC operates primarily within the state of West Bengal, India. Our core IT infrastructure, cloud nodes, and physical files are based within Indian borders.
If future expansions or international trade connections require data transfers outside of India, those transfers will comply fully with the DPDP Act, 2023. We will ensure the recipient country maintains data protection standards equal to or greater than those required by Indian law, and we will establish clear contractual protections prior to any data transfer.
Nalhati FPC operates primarily within the state of West Bengal, India. Our core IT infrastructure, cloud nodes, and physical files are based within Indian borders.
If future expansions or international trade connections require data transfers outside of India, those transfers will comply fully with the DPDP Act, 2023. We will ensure the recipient country maintains data protection standards equal to or greater than those required by Indian law, and we will establish clear contractual protections prior to any data transfer.
11. Protecting Children's Privacy
Our cooperative frameworks, agricultural services, and business operations are designed for adult farmers, landholders, and business operators who are at least 18 years old. Nalhati FPC does not knowingly collect or maintain personal information from individuals under the age of 18.
If a field worker or administrative manager discovers that we have inadvertently collected data from a minor without verified parental or legal guardian consent, we will take immediate steps to remove that information from our secure storage systems.
Our cooperative frameworks, agricultural services, and business operations are designed for adult farmers, landholders, and business operators who are at least 18 years old. Nalhati FPC does not knowingly collect or maintain personal information from individuals under the age of 18.
If a field worker or administrative manager discovers that we have inadvertently collected data from a minor without verified parental or legal guardian consent, we will take immediate steps to remove that information from our secure storage systems.
12. Updates and Policy Amendments
Nalhati FPC reserves the right to modify or amend this Privacy Policy at any time to reflect updates to our operational practices, technological infrastructure, or evolving legal requirements.
When material changes are made, we will notify our members by:
Posting a prominent notice on our official website;
Distributing update alerts through our established SMS or WhatsApp communication lines;
Displaying physical notifications at our main office and procurement hubs in Nalhati, Birbhum.
The "Effective Date" at the top of this document will update to match the revision date. Your continued engagement with our services after an update indicates your acceptance of the revised policy.
Nalhati FPC reserves the right to modify or amend this Privacy Policy at any time to reflect updates to our operational practices, technological infrastructure, or evolving legal requirements.
When material changes are made, we will notify our members by:
Posting a prominent notice on our official website;
Distributing update alerts through our established SMS or WhatsApp communication lines;
Displaying physical notifications at our main office and procurement hubs in Nalhati, Birbhum.
The "Effective Date" at the top of this document will update to match the revision date. Your continued engagement with our services after an update indicates your acceptance of the revised policy.
13. Institutional Contact and Grievance Redressal
If you have questions, feedback, or concerns regarding this Privacy Policy, or if you wish to file a formal request concerning your data rights, please contact our designated compliance officer:
Corporate Entity: Nalhati Farmer Producer Company Limited
Postal Registry Address: Nalhati, Birbhum, West Bengal, Pincode: 731220, India
Direct Telephone Channels: +91 6297535313 / +91 9547634720
Digital Communication Portal: Connect via WhatsApp
Official Monitoring Email: nalhatifpc@gmail.com
We review all privacy inquiries and look to resolve data concerns through clear, transparent procedures. If you feel an inquiry has not been addressed satisfactorily, you retain the right to escalate the matter to the Data Protection Board of India or relevant regulatory authorities.
If you have questions, feedback, or concerns regarding this Privacy Policy, or if you wish to file a formal request concerning your data rights, please contact our designated compliance officer:
Corporate Entity: Nalhati Farmer Producer Company Limited
Postal Registry Address: Nalhati, Birbhum, West Bengal, Pincode: 731220, India
Direct Telephone Channels:
+91 6297535313/+91 9547634720Digital Communication Portal:
Connect via WhatsApp Official Monitoring Email:
nalhatifpc@gmail.com
We review all privacy inquiries and look to resolve data concerns through clear, transparent procedures. If you feel an inquiry has not been addressed satisfactorily, you retain the right to escalate the matter to the Data Protection Board of India or relevant regulatory authorities.
Conclusion
By implementing this comprehensive Privacy Policy, Nalhati Farmer Producer Company Limited combines its grassroots agricultural focus with clear, modern data management standards. We safeguard the operational details and personal information of our member community, ensuring our daily business activities continue to support sustainable growth, shared prosperity, and a secure future for rural families across the Nalhati region.
By implementing this comprehensive Privacy Policy, Nalhati Farmer Producer Company Limited combines its grassroots agricultural focus with clear, modern data management standards. We safeguard the operational details and personal information of our member community, ensuring our daily business activities continue to support sustainable growth, shared prosperity, and a secure future for rural families across the Nalhati region.
please, do not Spam