Privacy Policy

Last updated: 12 October 2026  |  Effective date: 12 October 2026

1. Introduction

Welcome to the official website of EXIITO ("EXIITO", "Company", "we", "us" or "our"). We respect your privacy and are committed to protecting the personal information that you share with us. This Privacy Policy explains, in plain and transparent language, what information we collect when you visit or interact with our website, why we collect it, how we use and protect it, and what rights and choices you have.

This Privacy Policy is published in accordance with the laws of India, including the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, as applicable and in force from time to time. For the purposes of the DPDP Act, EXIITO is the "Data Fiduciary" and you are the "Data Principal".

By accessing or using our website, or by submitting your details through any form on it, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not submit your personal information through the website.

2. Information We Collect

We follow the principle of data minimisation, which means we only collect the information that is genuinely needed. When you visit our website and choose to contact us, enquire about our products, or register your interest, we may collect:

• Your name: so that we can address you properly and identify your enquiry.
• Your mobile / telephone number: so that we can call, message or reply to your enquiry, order request, or business proposal.
• Your email address: so that we can send you replies, product information, updates, and important notices.
• Any message or details you voluntarily submit: such as your company name, city, product requirement, or distribution enquiry.

We do not ask for sensitive personal information such as bank account details, card numbers, passwords, government ID numbers, health records, or biometric data through our website contact forms. Please do not send such information to us through the website.

2.1 Technical information

Like most websites, our web server or hosting provider may automatically record limited technical data such as your IP address, browser type, device type, pages visited, and date and time of visit. This data is used only for website security, performance, and basic analytics, and is not used to personally identify you.

2.2 Consent notice shown on our forms

Wherever our website asks for your name, phone number, or email address, we show a notice similar to the one below and ask you to confirm it, for example by ticking a box, before you submit the form:

"I agree that EXIITO may collect and use my name, phone number, and email address to respond to my enquiry and to contact me about its products. I have read the Privacy Policy and understand that I can withdraw my consent at any time by contacting info@exiitobeverages.com. EXIITO does not sell or share my data with third parties."

2.3 Language of this notice

This Privacy Policy and the consent notice shown on our forms are provided in English. They are also available in Hindi or Gujarati on request. If you would like a copy in either language, please contact us using the details in Section 15 and we will provide it free of charge within a reasonable time.

3. How We Collect Your Information

• Directly from you, when you fill in a contact, enquiry, or sign-up form on our website.
• When you contact us by phone, email, or messaging platforms using the details published on our website.
• Automatically, through basic technical logs and cookies (see Section 10).

4. Why We Collect and How We Use Your Information

We use your information strictly for legitimate business purposes connected with your interaction with us, namely:

• To respond to your questions, requests, and feedback.
• To share information about EXIITO products, availability, pricing, distribution or partnership opportunities that you have asked about.
• To follow up on enquiries and provide customer support.
• To send service-related notices, and promotional updates only where you have agreed or have not opted out.
• To maintain the security, integrity, and proper functioning of our website.
• To comply with applicable laws, regulations, and lawful requests from authorities.

4.1 Legal basis: your consent

We collect and use your personal information on the basis of your free, specific, informed, and clear consent, which you give by voluntarily submitting your details through our website or by contacting us. We may also process data without consent only where Indian law specifically permits it, for example to comply with a legal obligation or a court or government order. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of use that took place before you withdrew, but we will stop using your data for the purposes you have withdrawn consent for, and will delete it unless we are required by law to keep it.

5. Our Promise: We Do Not Sell or Share Your Data

Your personal information is safe with us. EXIITO does not sell, rent, trade, lease, or otherwise hand over your name, phone number, email address, or any other personal information to any third party for marketing, advertising, or commercial gain, except as described in Section 6 of this Policy. Your data is collected for our own communication with you and is used only by EXIITO.

Apart from the limited situations described in Section 6, we do not run any programme in which customer data is shared with advertisers, data brokers, or unrelated companies.

6. Limited Circumstances in Which Information May Be Disclosed

In the interest of full transparency, there are only very narrow situations in which your information may be accessed or disclosed, and then only to the minimum extent necessary:

• Legal obligation: where disclosure is required by law, court order, or a lawful request from a government or regulatory authority.
• Protection of rights and safety: where it is necessary to prevent fraud, security threats, or unlawful activity, or to protect the rights, property, or safety of EXIITO, our users, or the public.
• Technical service providers: our website hosting and email systems may technically store or process data on our behalf. These providers act only on our instructions, are not permitted to use your data for their own purposes, and are bound by confidentiality and security obligations.
• Hosting or storage outside India: our website host, email provider, or cloud storage may keep data on servers located outside India. If so, the data remains under our control and protection, is processed only for the purposes described in this Policy, and is transferred only to countries and providers permitted under applicable Indian law. We take steps to make sure the provider applies appropriate security safeguards and confidentiality obligations.
• Business restructuring: in the unlikely event of a merger, acquisition, or sale of the business, data may be transferred to the successor entity, which will be bound to honour this Privacy Policy.

7. Data Security

EXIITO treats the security of your personal information as a serious responsibility. We use a layered approach, combining technical, organisational, and physical safeguards, to protect the name, phone number, and email address you share with us.

7.1 Technical safeguards

• Encrypted connection (HTTPS/SSL): our website uses an SSL/TLS certificate, so information you type into our forms is encrypted while travelling between your browser and our server and cannot easily be read or intercepted.
• Secure hosting: the website and its data are hosted with a reputed hosting provider that maintains firewalls, malware protection, and regular server security updates.
• Protected storage: form submissions are stored in a protected database or secure email inbox, and are not published or displayed anywhere on the website.
• Password protection and strong authentication: our website admin panel, hosting account, and email accounts are protected by strong, unique passwords, and where available by two-factor authentication (2FA).
• Regular updates: the website platform, plugins, themes, and software are kept updated to close known security vulnerabilities.
• Backups: secure backups are taken periodically so that data and the website can be restored in case of technical failure or attack.
• Spam and attack protection: we use measures such as spam filters, form validation, and protection against common attacks (for example, injection of malicious code and automated bot submissions).

7.2 Organisational safeguards

• Restricted access: only authorised persons of EXIITO who need the information to respond to you can access it (need-to-know basis).
• Confidentiality: anyone with access to customer information is required to keep it confidential and use it only for the purposes stated in this Policy.
• No unnecessary copies: we avoid keeping customer data in personal devices, public computers, or unsecured messaging groups, and we do not forward it to people who do not need it.
• Access removal: when a person leaves the business or no longer needs access, their access to systems and data is removed promptly.
• Careful use of service providers: hosting, email, or website-maintenance providers can only process data on our instructions, and may not use it for their own purposes.

7.3 Physical safeguards

Any printed records or devices containing customer contact details are kept in secure, access-controlled locations, and are shredded or securely wiped before disposal.

7.4 What we do in case of a data breach

If we discover unauthorised access, loss, or disclosure of personal information, we will:

• Act immediately to contain the incident and stop further exposure.
• Investigate what happened and which information was affected.
• Notify affected individuals, and the relevant authorities where legally required, without unreasonable delay, explaining what happened and what steps they can take.
• Take corrective action to prevent a similar incident from happening again.

7.5 Your role in keeping data safe

Security is a shared responsibility. Please submit only the information we ask for, keep your own email and phone secure, and be careful of messages that falsely appear to come from us. EXIITO will never ask you for passwords, bank details, card numbers, or OTPs through the website, email, or phone. If you receive such a request in our name, please do not respond and report it to us at once.

7.6 Important note

Despite our best efforts, no website, server, or method of electronic transmission can be guaranteed to be 100% secure. We therefore cannot promise absolute security, but we commit to using reasonable and industry-appropriate safeguards, and to reviewing and improving them regularly.

8. Data Retention

We keep your personal information only for as long as it is needed for the purposes described in this Policy, or as required by law. When your information is no longer required, we will delete it or anonymise it securely. You may request earlier deletion at any time (see Section 9).

9. Your Rights and Choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Withdraw your consent to the use of your information at any time.
• Opt out of promotional calls, messages, or emails by contacting us or using the unsubscribe option.
• Raise a complaint or grievance regarding the handling of your data, and have it redressed within a reasonable time.
• Nominate another person to exercise your rights on your behalf in the event of your death or incapacity, as provided under the DPDP Act.

If you are not satisfied with our response to your grievance, you may approach the Data Protection Board of India or any other authority established under applicable Indian law, after first giving us a reasonable opportunity to resolve the matter.

To exercise any of these rights, please contact us using the details in Section 15. We may need to verify your identity before acting on a request, and we will respond within a reasonable time, generally within 30 days.

10. Cookies

Our website may use small text files called cookies to make the site work properly, remember preferences, and understand how visitors use the site. You can control or disable cookies through your browser settings. Disabling cookies may affect certain features of the website. We do not use cookies to sell your information or to build advertising profiles for third parties. For more details, please review our Cookie Policy.

11. Third-Party Websites and Links

Our website may contain links to external websites or social media pages. We do not control these sites and are not responsible for their content or privacy practices. We encourage you to read the privacy policy of every website you visit.

12. Children's Privacy

Our website is not directed at children under the age of 18, and we do not knowingly collect personal information from them without verifiable consent of a parent or lawful guardian, as required by Indian law. We do not track or monitor children or show them targeted advertising. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

13. Marketing Communications

We will contact you about our products or offers only if you have enquired with us or agreed to receive such communication. Every promotional message will give you a simple way to opt out, and we will honour your request promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of the website after changes are posted means you accept the revised Policy.

15. Contact Us / Grievance Officer

If you have any questions, concerns, requests, or complaints about this Privacy Policy or the handling of your personal information, please contact: