Welcome to CompanyKhareedo ("we", "our", "the Platform"), India's trusted marketplace for buying and selling companies, LLPs, and business assets. We are operated under Indian law and registered as a business advisory and intermediary platform.
This Privacy Policy ("Policy") describes how we collect, receive, use, store, share, and transfer your personal information when you access or use our website at companykharidobecho.com and all its related sub-domains, applications, and services (collectively, the "Services").
By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately. This Policy forms an integral part of our Terms of Service.
This Policy applies to all users of the Platform, including:
- Sellers — individuals or entities listing a company, LLP, or business asset for sale
- Buyers — individuals or entities expressing interest in acquiring a company or business
- Professionals — CAs, lawyers, advisors, consultants using the platform in a professional capacity
- Visitors — anyone browsing the website without creating an account
We collect different types of information depending on how you interact with our Platform. We only collect what is strictly necessary for providing safe, efficient, and trusted services.
| Data Type | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, PAN, Aadhaar | Registration, KYC form |
| Contact Data | Email address, mobile number, postal address | Sign-up, inquiry form |
| Business Data | Company name, CIN, GST, PAN, TAN, financials | Listing submission |
| Financial Data | Revenue, asking price, bank details (for payouts) | Listing form, payment |
| Technical Data | IP address, browser, device, OS, pages visited | Automatically (cookies/logs) |
| Communication Data | Inquiry messages, callback requests, support chats | Contact forms, in-app messages |
| Preference Data | Industry interests, budget range, location preference | Profile settings, search filters |
We do not require sensitive personal data such as religion, caste, political opinions, or biometric data for using our Services. Any such information, if voluntarily provided, will not be collected or stored.
Important: Legal registration numbers (CIN, GST, PAN, TAN) submitted with a listing are kept confidential. They are never displayed publicly and are only shared with a buyer post-NDA signature, after our team verifies buyer intent. See Section 5 for full confidentiality details.
We use your information for specific, lawful, and legitimate purposes only. We never sell your data to any third party for marketing or commercial purposes.
- Creating and managing your buyer or seller account
- Publishing your company listing on the marketplace
- Connecting qualified buyers with verified sellers
- Processing inquiries, callback requests, and consultations
- Conducting CA-certified valuations and due diligence support
- Facilitating deal negotiations and documentation
- Verifying identity through KYC (Know Your Customer) checks
- Confirming company registration details against MCA/GSTN databases
- Detecting and preventing fraud, money laundering, and misrepresentation
- Ensuring all listed companies are genuine and active
- Sending deal updates, notifications, and important alerts via SMS, email, or WhatsApp
- Providing customer support through phone, email, and in-app chat
- Sending newsletters and platform updates (opt-out available anytime)
- Conducting satisfaction surveys to improve our services
- Complying with orders, notices, or requests from courts and government authorities
- Maintaining records as required under Indian tax and company laws
- Enforcing our Terms of Service and resolving disputes
We apply the principle of data minimisation — we only use your data for the purpose it was collected and retain it only as long as necessary. We never use personal data for automated decision-making that produces significant legal effects.
We take your privacy seriously. We do not sell, rent, or trade your personal information to any third party. We share information only in the circumstances described below.
A seller's identity, company name, and registration details are shared with a prospective buyer only after: (1) buyer submits formal intent, (2) buyer signs a Non-Disclosure Agreement (NDA), (3) our team independently verifies buyer's financial capacity and intent. Similarly, a buyer's contact details are shared with a seller only after mutual consent.
We may share limited data with carefully vetted partners who help us operate the Platform:
- CA firms and lawyers who conduct due diligence or valuations
- Payment gateways and escrow service providers
- IT service providers for hosting, security, and analytics
- SMS, email, and WhatsApp communication providers
All partners are bound by Data Processing Agreements (DPAs) and are not permitted to use your data for their own purposes.
We may disclose information when required to do so by law, such as in response to: court orders, SEBI or RBI directions, Income Tax notices, Enforcement Directorate investigations, or other lawful government requests. We will notify you of such requests where legally permissible.
We will never: sell your data to advertisers, share your data with unverified third parties, use your business financials for any purpose other than facilitating your transaction, or disclose your personal information without your consent except as described above.
Confidentiality is the cornerstone of our platform. Buying and selling a company is a highly sensitive transaction. We have built multiple layers of protection to ensure your information remains secure throughout the process.
CompanyKhareedo operates on an NDA-First model. No personally identifiable information about a company listing — including company name, location specifics, legal numbers, or financials — is ever shared with any prospective buyer before a formal Non-Disclosure Agreement (NDA) is signed and verified by our team.
- Company name and registered address
- CIN, GST, PAN, and TAN numbers
- Detailed financial statements and revenue figures
- Client lists and business relationships
- Internal operational information
- Identity of the owner/seller
When a listing receives a "✓ CA Verified" badge on our Platform, it means our CA team has reviewed and confirmed the legal registration numbers. Buyers see only the badge — not the actual numbers. The numbers are revealed only after NDA signing and confirmed buyer intent, as reviewed by our Relationship Manager.
Within CompanyKhareedo, access to sensitive listing data is restricted to: the assigned Relationship Manager, our CA/legal review team, and senior management on a need-to-know basis. All internal team members are bound by confidentiality clauses in their employment contracts.
We use cookies and similar tracking technologies to improve your experience, understand usage patterns, and ensure Platform security. You have control over how cookies are used.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential Cookies | Session management, login authentication, CSRF protection | No — Platform will not function |
| Functional Cookies | Remember your preferences, search filters, language settings | Yes — partial functionality loss |
| Analytics Cookies | Understand traffic, page visits, popular listings (anonymised) | Yes — via cookie settings |
| Security Cookies | Detect fraudulent logins, rate limiting, bot protection | No — essential for safety |
We do not use advertising or retargeting cookies. We do not allow third-party advertisers to place cookies on our Platform. CompanyKhareedo is ad-free by design.
You can manage cookie preferences through your browser settings. Clearing cookies will log you out and reset your preferences. For detailed instructions, visit your browser's help section.
We implement industry-standard security measures to protect your information from unauthorised access, alteration, disclosure, or destruction. Security is not an afterthought — it is built into our architecture.
- TLS 1.3 encryption for all data transmission (HTTPS enforced site-wide)
- AES-256 encryption for sensitive data at rest (legal registration numbers, financial data)
- Secure OTP-based authentication for all account actions
- Regular security audits and penetration testing
- Automated threat detection and intrusion prevention systems
- Role-based access control — employees see only what they need to
- Mandatory confidentiality agreements for all staff and contractors
- Regular privacy and security training for all team members
- Incident response plan for data breaches with defined escalation procedures
No system is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security of data transmitted over the internet. In the event of a data breach that affects your rights or freedoms, we will notify you within 72 hours as required by applicable law.
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Information | Duration of account + 3 years | Legal dispute resolution |
| Listing & Deal Data | 7 years post-transaction | Tax and company law compliance |
| KYC Documents | 5 years post-verification | PMLA 2002 requirements |
| NDA & Legal Docs | 10 years | Contractual liability |
| Communication Logs | 2 years | Customer support history |
| Cookies & Session Data | 30 days (session) / 1 year (pref.) | Platform functionality |
After the retention period expires, data is securely deleted or anonymised. You may request early deletion (see Section 9), subject to our legal obligations.
Under Indian data protection laws, including the Personal Data Protection Bill 2023 (PDPB), you have the following rights regarding your personal data:
You have the right to know what personal data we hold about you and obtain a copy of it. Submit a request via email to our Grievance Officer.
You can request correction of any inaccurate or incomplete personal data. Most data can be updated directly from your dashboard.
You can request deletion of your personal data. We will comply unless we are required to retain it for legal obligations (e.g., completed transaction records for tax purposes).
Where processing is based on your consent (e.g., marketing emails), you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.
You can request your data in a structured, machine-readable format (JSON/CSV) to transfer to another service.
As per PDPB 2023, you may nominate another individual to exercise your data rights in the event of your death or incapacity.
To exercise any of the above rights, email us at privacy@companykharidobecho.com with your registered email address and a description of your request. We will respond within 30 days. For complex or multiple requests, we may extend this by an additional 30 days with prior notice.
Our Platform may contain links to third-party websites, embedded tools, or integrated services. This Privacy Policy applies only to information collected by CompanyKhareedo and does not cover the privacy practices of any third party.
- Payment processing is handled by RBI-regulated payment gateways. We do not store full card numbers or UPI credentials.
- WhatsApp communication is subject to Meta's Privacy Policy. Do not share sensitive documents via WhatsApp.
- Google Analytics (anonymised, IP-masked) may be used for aggregate traffic insights. No personally identifiable data is shared with Google for advertising.
- Links to external legal databases (MCA, GST Portal) are for reference only and subject to their respective privacy policies.
We encourage you to read the privacy policies of any third-party services before submitting personal information to them.
CompanyKhareedo is a B2B professional platform intended exclusively for use by adults aged 18 years and above. Our Services are not designed for, targeted at, or intended to be used by minors.
We do not knowingly collect personal information from anyone under 18 years of age. If we discover that we have inadvertently collected data from a minor, we will immediately delete such information. If you believe we have collected data from a minor, please contact us at privacy@companykharidobecho.com immediately.
We may update this Privacy Policy from time to time to reflect changes in our services, practices, or applicable laws. We are committed to keeping you informed of any significant changes.
- Minor updates (wording clarifications, formatting) — updated on the page with a revised date
- Material changes (new data types collected, new sharing practices) — notified via email and in-app notification at least 15 days before taking effect
- Significant changes affecting your rights — explicit re-consent required before the changes take effect
Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically. The current version date is shown at the top of this page.
Previous versions of this Privacy Policy are archived and available upon written request to our Grievance Officer.
We take privacy complaints seriously. If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact us through any of the following channels.
As required by the Information Technology (Amendment) Act 2008 and the PDPB 2023, we have appointed a Grievance Officer who is responsible for addressing all privacy-related complaints and queries from Indian users.
CompanyKhareedo
Agarwal Metro Heights Tower, Netaji Subhash Place, Pitampura, Delhi – 110034, India
We acknowledge all privacy requests within 48 hours and aim to resolve complaints within 30 days. If your issue is not resolved to your satisfaction, you may escalate it to the relevant Data Protection Board of India (once constituted under PDPB 2023).
This Privacy Policy is governed by the laws of India. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of courts located in Delhi, India.
Every clause in this policy exists to protect you. If you ever feel your privacy has been compromised on our platform, we want to know immediately.