This Privacy Policy explains how BeeBlown Media Pvt. Ltd. ("BeeBlown", "we") collects, uses, shares and protects personal data through the BeeBlown Partners Platform. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under them. For the purposes of the DPDP Act, BeeBlown is the Data Fiduciary.
1. Data we collect
From partners
- Account data: name, email, mobile number, password (stored only as a secure hash), country, state, city, preferred language, partner type and optional website or social profile.
- Membership & payment data: plan, payment amount, gateway order and payment IDs, UPI/UTR references and receipt numbers. Card and bank login details are handled by our payment gateway and are never stored by us.
- Payout & tax data: account holder name, bank account number, IFSC, UPI ID and PAN. Account numbers and PAN are encrypted at rest.
- Learning data: lessons completed, assessment scores and certificates.
- Website content: photos, bio, headline and social links you choose to publish on your partner page.
- Usage & security data: login times, IP address, device and browser information and audit logs of important actions.
From visitors and customers
- Referral click data: a random click ID, the referral link used, a one-way hashed (non-reversible) form of the IP address, browser user-agent, referring page and UTM parameters.
- Conversion data reported by product brands: order ID, amount, product, and — where provided — a customer email or reference used for attribution and fraud prevention. We do not share customer identities with partners.
- Contact & report forms: the details you submit to us.
2. Why we use it (purposes)
- To create and manage your account, verify your identity and activate memberships after payment verification.
- To provide training, certificates, your partner website and tracked links.
- To attribute verified sales to the right partner, calculate commissions, prevent fraud and self-referrals, and process payouts.
- To meet legal, tax and accounting obligations (including TDS and GST where applicable) and to respond to lawful requests.
- To send service messages such as payment confirmations, commission updates, renewal reminders and policy changes. Promotional messages are sent only where permitted and you can opt out.
- To keep the Platform secure, investigate complaints and improve our services.
We process your personal data on the basis of your consent given at registration and for legitimate uses permitted under the DPDP Act, including performance of our agreement with you and compliance with law.
3. Cookies and tracking
We use essential cookies for login sessions and security (CSRF protection). When someone follows a partner link we set a first-party cookie (bbp_ref) containing a random click ID for the product's attribution window (commonly 30 days), so that a later purchase can be credited to the right partner. Product websites may store the same click ID in their own first-party cookie using our attribution script. These cookies do not contain your name, email or other directly identifying information. You can clear or block cookies in your browser; doing so may prevent a partner from being credited.
4. Who we share data with
- BeeBlown group brands whose products you promote — only aggregated or necessary attribution data (for example, that an order was referred by a partner code). Brands do not receive your payout or tax details.
- Service providers acting on our behalf: payment gateways, hosting, email delivery and banking partners, under contracts requiring confidentiality and security.
- Authorities where required by law, court order or to protect rights, safety and against fraud.
- Public visitors see only what you choose to publish on your partner website.
We do not sell personal data.
5. Retention
We keep account data while your account is active. Financial records — memberships, commissions, payouts, ledger entries and related audit logs — are retained for at least eight years to meet accounting and tax requirements, even after account closure. Click data is retained for up to 24 months. Other data is deleted or anonymised when no longer needed.
6. Security
We use HTTPS encryption, hashed passwords, encryption of sensitive payout fields, role-based access for staff, audit logging and signature verification for payment and integration messages. No system is perfectly secure; if a personal data breach occurs we will notify affected users and the Data Protection Board of India as required by law.
7. Your rights
Subject to the DPDP Act you may: access a summary of your personal data and processing; request correction, completion or updating of inaccurate data; request erasure of data no longer needed (subject to legal retention); withdraw consent (which may limit the services we can provide); nominate another person to exercise your rights in case of death or incapacity; and seek grievance redressal. Most details can be updated from your Profile page; for other requests write to us.
8. Children
The Platform is intended for adults aged 18 and above. We do not knowingly collect personal data of children.
9. Changes
We will post changes to this policy on this page and notify you of significant changes by email or in-app notification.
10. Grievance Officer / contact
Grievance Officer, BeeBlown Media Pvt. Ltd., Maharashtra, India. Email: partners@beeblownmedia.com. We acknowledge requests within 48 hours and respond within the timelines required by law. If you are not satisfied with our response you may approach the Data Protection Board of India.
Questions about this document? Write to partners@beeblownmedia.com. This document is provided in English; in case of any inconsistency with a translation, the English version prevails.