Privacy Policy

1. Who is responsible

The entity operating SXPO India is responsible for the personal information processed through the services, subject to applicable law. Its legal identity and privacy contact are set out in the Legal Notice. If a required contact or entity detail is not shown there, please contact support and do not assume a third-party listing is operated by SXPO.

2. Information we process

• Account and registration details, such as name, business/organization, email, phone, role and account credentials or authentication identifiers.
• Company, exhibitor, organizer, event, product and listing information that you or an authorised representative submit.
• Enquiry and quote request details, including the selected recipient, message, product/event context and communication status.
• Support, grievance, privacy-request and complaint information you provide.
• Technical and security data, such as request timestamps, browser/device details, diagnostic logs, security events and limited IP-derived anti-abuse evidence.
• Basic aggregate usage measurements may be processed without persistent visitor or session identifiers where enabled and permitted by applicable law. Detailed analytics identifiers and visitor/session interaction histories are processed only when the required analytics consent is recorded through the cookie preference controls.

3. Purposes

We use information to provide accounts and services; review organizer/exhibitor registrations; display business listings; route enquiries to selected recipients; send transactional and security messages; provide support; prevent spam, fraud and abuse; maintain platform integrity; comply with law; handle disputes; and, where permitted and appropriately consented, measure public-site usage. We do not promise that every listing or business claim has been independently verified.

4. Enquiry recipients and other disclosures

When you submit an enquiry, the information shown in that form is sent to the exhibitor, organizer or suppliers you select so they can respond. A recipient may retain your information in its own systems and may contact you directly. Review that business's privacy practices before sharing additional information. We may also disclose information to service providers acting on our instructions, professional advisers, payment/service vendors where relevant, competent authorities when legally required, or a successor in a lawful business transfer with appropriate safeguards.

5. Service providers and international processing

Our service providers may include infrastructure and hosting, email/notification delivery, authentication, security, monitoring, database and analytics services. Access should be limited to what is necessary and governed by appropriate contractual and security controls. Where information is processed or accessed across borders, we will assess and handle that processing under applicable law. The precise providers can change as the service evolves.

6. Legal basis, notice and consent

We process information as permitted by applicable law, including to provide a requested service, comply with legal obligations, protect security and legitimate operational interests where recognised, and based on consent where required. Basic aggregate analytics, when enabled, is designed to count permitted events without creating visitor profiles, session histories or account-linked browsing records. Detailed analytics and marketing preferences are separate from necessary service functionality and remain disabled until the required consent is recorded. You can change optional cookie choices through the persistent Cookie settings link. Withdrawing detailed analytics consent stops future detailed browser-based tracking after the choice is saved; handling of previously collected records follows the applicable law and retention policy.

7. Retention

We retain information only for the period reasonably necessary for the stated purpose, account/service lifecycle, security, audit, dispute resolution and legal obligations. Registration, billing, complaint, consent and security records may have different retention periods. Deletion may be delayed or limited where records must be preserved for legal claims, fraud prevention, accounting, security or a lawful request. We should maintain an internal retention schedule and apply it to backups and vendors as practicable.

8. Your choices and requests

You may request access, correction, deletion, account closure, consent withdrawal or review of a privacy concern, subject to identity verification, exceptions and applicable law. See Data & Privacy Requests. Do not send passwords, card data, government identity numbers or unnecessary sensitive data in an initial request. We may ask for proportionate verification before acting.

9. Security and incidents

We use access controls, operational monitoring and other safeguards appropriate to the service, but no system can be guaranteed completely secure. We maintain an incident-handling process and will make notifications required by applicable law. Users should notify support promptly if they suspect account compromise, impersonation or disclosure of information.

10. Marketing and transactional messages

Service notices, registration updates, enquiry confirmations and security messages are operational communications. Optional promotional communications should be managed separately and should include a practical opt-out where required. A marketing opt-out does not disable essential account or security messages.

11. Children and business use

SXPO is designed for professional and business discovery, not for children to create accounts independently. If you believe a child has provided personal information inappropriately, contact the privacy contact in our Legal Notice.

12. Changes and contact

We may update this policy when the service or legal requirements change. Material changes will be reflected by updating the version/date and, where appropriate, notifying users or seeking renewed consent. Privacy contact: support@sxpoindia.com.