Privacy Policy

1. Introduction

BIGBUILDUP DEVELOPERS PVT LTD ("Company," "we," "us," or "our") is an infrastructure engineering company incorporated under the laws of India, with its registered office at Ground Floor 01 & 02, 21 A, Montessori Lane, Boring Road, Patna, Bihar - 800001, India. We are committed to protecting and respecting your privacy in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, and guidelines issued by the Reserve Bank of India (RBI).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website thebigbuildup.com and use our services. By accessing or using our website, you consent to the practices described in this policy.

2. Information We Collect

a) Personal Data: When you interact with our website, fill out forms, request quotations, or engage our services, we may collect the following personal information:

• Full name
• Email address
• Phone number / mobile number
• Company or organisation name
• Postal address
• GST Identification Number (GSTIN), where applicable
• Any other information you voluntarily provide in correspondence

b) Payment Data: When you make payments through our website, our payment aggregator (CCAvenue) collects the following on our behalf:

• Credit/debit card number and expiration date
• UPI ID or Virtual Payment Address (VPA)
• Net banking credentials (collected directly by your bank)
• Billing name and billing address
• Transaction reference numbers

Important: We do not store, process, or have access to your full card numbers, CVV, PINs, or banking passwords. All sensitive payment data is handled exclusively by CCAvenue in compliance with PCI-DSS standards and RBI guidelines.

c) Usage Data: We automatically collect certain information when you visit our website, including:

• IP address
• Browser type and version
• Operating system
• Pages visited, time spent on pages, and navigation paths
• Referring website or source
• Device type (desktop, mobile, tablet)
• Date and time of access

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our services, including highway construction, bridge engineering, industrial infrastructure, urban development, and tender consulting
• To process and complete transactions, and send related information including purchase confirmations, invoices, and payment receipts
• To respond to your enquiries, service requests, and quotation requests
• To communicate with you about projects, services, updates, and promotional offers (with your consent)
• To comply with legal obligations, including tax filings under GST, TDS regulations, and RBI mandates
• To detect, prevent, and address fraud, unauthorised transactions, and other illegal activities
• To improve our website, services, and user experience through analytics
• To enforce our terms and conditions and other agreements
• To maintain internal records and administrative purposes

4. Payment Processing

We use CCAvenue (operated by Avenues India Pvt. Ltd.) as our authorised payment aggregator for processing all online payments. CCAvenue is authorised by the Reserve Bank of India (RBI) to operate as a payment aggregator under the RBI's Guidelines on Regulation of Payment Aggregators and Payment Gateways (PA/PG Guidelines).

Key safeguards in our payment processing:

• PCI-DSS Compliance: CCAvenue is certified PCI-DSS Level 1 compliant, which is the highest level of certification in the payment card industry for data security.
• RBI Tokenisation Mandate: In compliance with RBI's directive on tokenisation of card data (effective October 2022), no merchant (including BIGBUILDUP DEVELOPERS PVT LTD) or payment aggregator stores actual card-on-file data. Card details are replaced with unique tokens for recurring transactions.
• No Card Data Storage: We do not store, log, or retain any sensitive card data (card number, CVV, expiry date) on our servers. All payment data flows directly between you and CCAvenue's secure payment gateway.
• Encryption: All payment transactions are encrypted using 256-bit SSL/TLS encryption.
• Two-Factor Authentication: As per RBI mandate, all online card transactions require Additional Factor Authentication (AFA), such as OTP verification.

By making a payment on our website, you agree to CCAvenue's terms of service and privacy policy in addition to ours.

5. Data Storage & Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Secure, access-controlled servers and databases
• Regular security assessments and vulnerability testing
• Access to personal data restricted to authorised personnel on a need-to-know basis
• Firewalls, intrusion detection systems, and anti-malware protections
• Secure storage of all technical documents, 3D site models, procurement files, and project blueprints in protected operational environments

Your personal data is primarily stored on servers located in India. In the event data is transferred outside India, we ensure that adequate data protection safeguards are in place in accordance with applicable Indian data protection laws.

6. Third-Party Services

We may share your information with the following categories of third-party service providers who assist us in operating our website and delivering our services:

• Payment Aggregator: CCAvenue (Avenues India Pvt. Ltd.) for processing payments
• Website Hosting & Forms: Netlify for website hosting, form submissions, and content delivery
• Analytics: Web analytics services to understand website usage patterns (anonymised data)
• Communication: Email and messaging service providers for sending transactional and service-related communications

We do not sell, trade, or rent your personal information to third parties for marketing purposes. We may disclose your information if required to do so by law, regulation, legal process, or governmental request, including to meet national security or law enforcement requirements.

7. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. The types of cookies we use include:

• Essential Cookies: Required for the website to function properly (e.g., session management, security). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting information anonymously. These are only activated with your consent.
• Functional Cookies: Enable enhanced functionality and personalisation, such as remembering your preferences.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. No tracking cookies are placed without your explicit consent.

8. Your Rights

Under applicable Indian data protection laws, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to legal and contractual obligations.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Grievance Redressal: You have the right to lodge a complaint with our Grievance Officer or with the appropriate regulatory authority.
• Right to Nominate: Under the Digital Personal Data Protection Act, 2023, you may nominate another individual to exercise your rights in case of your death or incapacity.

To exercise any of these rights, please contact us at admin@thebigbuildup.com. We will respond to your request within 30 days.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Transactional Data: Retained for a minimum of 8 years from the date of the transaction, as required under the Income Tax Act, 1961, and GST regulations.
• Payment Records: Transaction records are retained as per RBI requirements and applicable financial regulations for a minimum of 10 years.
• Project-Related Data: Retained for the duration of the project and for a reasonable period thereafter to address any warranty claims, disputes, or legal obligations.
• Communication Records: Retained for up to 3 years from the last interaction, unless a longer retention period is required by law.
• Website Usage Data: Anonymised analytics data may be retained indefinitely for trend analysis and website improvement.

After the applicable retention period, personal data is securely deleted or anonymised.

10. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Continued use of our website after any modifications to this policy constitutes your acceptance of those changes.

For material changes that significantly affect how we handle your personal data, we will make reasonable efforts to notify you via email or a prominent notice on our website prior to the change becoming effective.

11. Grievance Officer / Contact

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are provided below:

Grievance Officer
BIGBUILDUP DEVELOPERS PVT LTD
Ground Floor 01 & 02, 21 A, Montessori Lane,
Boring Road, Patna, Bihar - 800001, India

Email: admin@thebigbuildup.com
Phone: +91 7091 590099

We shall address your concerns and grievances within 30 days of receiving them.

12. Last Updated

This Privacy Policy was last updated in May 2026.