Privacy Policy

At SteelMumbai.com (“Website”, “we”, “us”, or “our”), operated in technological and operational partnership with Turtles Web (GSTIN: 27CSIPA1542H1Z1), we value your trust and are committed to safeguarding your personal and commercial data.

This Privacy Policy outlines how we collect, process, store, and protect information when you visit SteelMumbai.com, register as a supplier, claim a business profile, submit a buyer Request for Quote (RFQ), purchase wallet credits, or interact with our B2B directory services.

1. Information We Collect

Depending on how you use our platform, we collect the following categories of information:

• Supplier Profile Data: Business names, legal company name, GSTIN (Goods & Services Tax Identification Number), registered office address, phone numbers, contact person details, email addresses, product catalogs, material specifications, testimonials, FAQs, and business logos.
• Buyer Quote Inquiries (RFQs): Buyer names, phone/WhatsApp numbers, delivery locations, company names, email addresses, and detailed structural steel material requirements (e.g. TMT bars, MS channels, beams, plates, stainless steel grades).
• Financial & Transaction Records: Invoicing details, GST tax records, transaction IDs, credit purchase logs, and wallet credit additions processed via secure payment gateways under Turtles Web. (Note: We do not store raw credit card numbers or banking passwords on our servers).
• System & Analytics Data: IP addresses, browser types, user-agent strings, referring URLs, timestamps, page view records (`business_views`), and upvote logs (`business_upvotes`) collected for security and directory ranker optimization.

2. How We Use Your Data

We use the collected information for specific, legitimate operational purposes:

• Public Directory Publication: Displaying supplier business profiles, product categories, and verification status on SteelMumbai.com so buyers can discover local steel stockists.
• RFQ Lead Distribution: Transmitting buyer quote requests directly to matched, verified steel suppliers to facilitate procurement.
• Account Administration & Security: Authenticating supplier login sessions, maintaining wallet credit balances, validating GSTIN records, and sending transactional invoices or credit balance alerts.
• Platform Defense: Monitoring system logs to prevent spam, fraudulent business registrations, scrapers, and unauthorized credit tampering.
• No Third-Party Data Selling: We never sell, rent, or trade your personal contact details to third-party advertising brokers.

3. Cookies and Session Storage

SteelMumbai.com uses minimal essential cookies and session storage to deliver core dashboard functionality:

• Session Cookies (`PHPSESSID`): Temporary cookies used to maintain logged-in supplier sessions and state management across dashboard pages.
• Remember-Me Cookies (`sm_remember_supplier`): Secure encrypted tokens stored on your browser when you select "Remember Me" during login, allowing seamless access without re-entering passwords on returning visits.
• Security & Analytics: Cookies and local identifiers to prevent CSRF (Cross-Site Request Forgery) attacks and count unique profile views.

You may disable cookies in your browser settings; however, certain supplier dashboard features and automated authentication may cease to function correctly.

4. Data Security and Infrastructure

We employ industry-standard technical and organizational security measures to protect database records:

• All web communications are encrypted in transit via SSL/TLS (HTTPS).
• Database interactions use PDO (PHP Data Objects) with parameterized queries to eliminate SQL injection risks.
• Database engines utilize MySQL/MariaDB InnoDB with ACID compliance to ensure transactional integrity of credit logs and lead purchases.
• Access to production databases is strictly limited to authorized engineering personnel at Turtles Web.

5. Data Sharing and Disclosure

We share your information only under the following limited circumstances:

• With Matched Suppliers: When a buyer submits an RFQ, contact details and steel requirements are shared with selected matching steel suppliers on the platform.
• With Payment Processors: Necessary transaction data is transmitted securely to accredited payment gateway providers (e.g. Cashfree/Razorpay) to process wallet credit purchases.
• Legal & Regulatory Compliance: We may disclose information if required by law, GST authorities, court order, or governmental law enforcement agencies in India.

6. Data Retention and Your Rights

Supplier listings and transaction logs are retained as long as the account remains active or as required by Indian tax laws (e.g. GST invoice retention for 6 years).

You have the right to:

• Review and update your business directory information through the Supplier Dashboard.
• Request correction of inaccurate GSTIN or contact details.
• Request deactivation or deletion of your public business profile by emailing our support team.

7. Grievance Officer & Legal Contact

In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for SteelMumbai.com is provided below: