Privacy Policy

Yes. I’d make this substantially stronger than a generic privacy policy, particularly because your Farmer Network collects farm-level location data. I’ve also kept the contact details visually discreet at the bottom rather than putting them prominently throughout the policy.

The policy below is designed around the Indian Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, including obligations around security safeguards, data processors, breach response, retention, consent withdrawal and grievance redressal.

One important point: I have not claimed specific technical safeguards that we cannot verify you have actually configured. The policy commits RePaveX to the safeguards required by applicable law without making technically inaccurate promises.

Effective Date: 15 August 2026
Last Updated: 15 August 2026

At RePaveX (OPC) Private Limited (“RePaveX”, “we”, “our”, or “us”), we respect your privacy and are committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, store, protect and otherwise process personal data when you visit our website, contact us, participate in our programs, or register through our Farmers’ Corner.

We believe that environmental impact should be built on trust. The same principle applies to the information entrusted to us.

1. Information We Collect

We collect only information that is reasonably necessary for the purposes described in this Privacy Policy.

Depending on how you interact with RePaveX, this may include:

Personal Information

Name
Mobile number
Email address
Village, tehsil and district
Information submitted through enquiry or registration forms

Farmer and Farm Information

If you participate in the RePaveX Farmer Network, we may collect:

Farm or land area
Land ownership information
Crops grown
Farm location
GPS coordinates of the farm
Farm photographs
Soil photographs
Soil test reports or related agricultural information
Information relating to participation in soil remediation programs

Website and Technical Information

Our website and its service providers may automatically collect certain technical information, including:

IP address
Device and browser information
Website interaction and usage information
Cookies and similar technologies
Security and diagnostic information

2. Why We Collect Your Information

We use personal data for specific and legitimate purposes, including to:

Respond to enquiries and requests
Register and communicate with members of the RePaveX Farmer Network
Understand the location and characteristics of participating farms
Plan and coordinate biochar distribution and soil remediation activities
Conduct field visits and assessments
Monitor agricultural and environmental outcomes
Measure and document the impact of our programs
Maintain project and operational records
Improve our website and programs
Communicate relevant information about RePaveX activities
Meet applicable legal, regulatory and accounting requirements
Protect the security and integrity of our systems

We will not use personal data for purposes that are incompatible with the purpose for which it was collected, except where permitted or required by applicable law.

3. Your Farm Location and GPS Data

We recognize that a farm’s location is valuable information and may reveal details about a farmer’s property and livelihood.

Where you provide GPS coordinates or other precise farm-location information, RePaveX may use this information to:

Identify and register the participating farm
Plan field visits and program activities
Coordinate biochar application or distribution
Monitor soil remediation activities
Measure environmental and agricultural impact
Maintain accurate project records

Farm-level GPS information will be treated as confidential information.

We will not intentionally publish your precise farm coordinates on our website or disclose them for unrelated commercial purposes.

Access to farm-location information will be restricted to authorized personnel, contractors, partners or service providers who reasonably require the information for legitimate RePaveX activities.

4. Photographs, Reports and Other Documents

If you voluntarily provide photographs, soil reports or other documents, we may process them for purposes associated with the relevant RePaveX program.

For example, these materials may be used to:

Assess participating farms
Monitor project activities
Document environmental outcomes
Evaluate soil remediation
Measure program impact

We will not publicly identify a farmer through photographs, farm information or case studies without appropriate permission where such permission is required.

5. How We Protect Your Information

RePaveX takes the protection of personal data seriously.

We maintain appropriate technical and organizational security measures designed to protect personal information against unauthorized access, misuse, alteration, loss, destruction or disclosure.

Depending on the nature of the information and the systems involved, these measures may include:

Access controls and authorization procedures
Secure authentication practices
Encryption, masking, obfuscation or other appropriate data-protection measures
Secure handling of submitted information
Monitoring and logging of relevant access
Backup and recovery measures
Security reviews and appropriate safeguards for service providers
Internal controls limiting access to personal information to people who need it for legitimate purposes

Our security measures are designed to meet the requirements of applicable data-protection laws and may be updated as our systems, operations and risks evolve.

The DPDP framework specifically requires Data Fiduciaries to implement appropriate technical and organizational measures and reasonable safeguards against personal-data breaches. (India Code⁠)

However, no electronic storage or transmission system can be guaranteed to be completely secure. We therefore continuously seek to reduce the risks associated with handling personal data.

6. Who May Access Your Information

We do not sell or commercially trade your personal information.

Information may be accessed or processed by:

Authorized RePaveX personnel
Technology and hosting providers
Form and database service providers
Cloud-storage providers
Field-service partners
Professional advisers
Auditors, assessors or verification organizations
Other service providers required to operate relevant RePaveX programs

Where third parties process personal data on our behalf, we seek to ensure that appropriate contractual, technical and organizational safeguards are in place.

RePaveX remains responsible for the personal data processed on its behalf by its data processors to the extent required by applicable law. (India Code⁠)

7. Carbon, Environmental and Impact Reporting

RePaveX may collect and process information necessary to measure and document environmental and social impact.

This may include information relating to:

Biomass collection
Biochar production
Biochar application
Farm participation
Soil remediation
Agricultural outcomes
Restoration activities
Carbon-removal activities

Where information is used for public impact reporting, we will seek to use aggregated, anonymized or appropriately de-identified information wherever practical, rather than publishing personally identifiable farmer information.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Different categories of information may need to be retained for different periods.

For example, information associated with a carbon-removal, environmental-restoration or agricultural-impact project may need to be retained for longer periods to maintain project records, demonstrate impact, satisfy contractual requirements, conduct verification, resolve disputes or comply with applicable legal obligations.

When personal data is no longer required for a legitimate purpose, we will take appropriate steps to delete, erase or anonymize it, subject to applicable legal and record-keeping requirements.

The DPDP Act provides for erasure when the specified purpose is no longer being served or consent is withdrawn, subject to applicable legal retention requirements. (India Code⁠)

9. Your Choices and Rights

Subject to applicable law, you may have rights relating to your personal data, including the ability to:

Request information about personal data being processed about you
Request correction of inaccurate or incomplete information
Request erasure of personal data where applicable
Withdraw consent where processing is based on consent
Raise a grievance regarding the processing of your personal data
Exercise other rights available under applicable data-protection law

If you withdraw consent, this will not affect the lawfulness of processing that occurred before the withdrawal.

Requests can be submitted using the contact details provided at the end of this Privacy Policy.

10. Data Breaches

If RePaveX becomes aware of a personal-data breach, we will take appropriate steps to:

Identify and contain the incident;
Assess the nature and extent of the breach;
Take reasonable measures to mitigate potential harm;
Investigate the cause and implement corrective measures; and
Provide notifications to affected individuals and the relevant authorities where required by applicable law.

The DPDP Act requires Data Fiduciaries to provide prescribed notifications in the event of a personal-data breach. (India Code⁠)

11. Third-Party Services

Our website may use third-party technology and service providers for functions such as:

Website hosting
Forms
Data storage
Analytics
Communications
Security
Website performance

These providers may process information on our behalf.

We seek to use appropriate providers and take reasonable steps to ensure that personal information processed through such services receives appropriate protection.

Third-party websites or services linked from our website may have their own privacy policies. RePaveX is not responsible for the privacy practices of independent third parties.

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

Operate essential website functions
Improve website performance
Understand website usage
Maintain security
Remember certain preferences

You may be able to control cookies through your browser or applicable website settings.

13. International Processing

Some technology or service providers used by RePaveX may process or store information outside India.

Where personal data is processed outside India, RePaveX will do so in accordance with applicable Indian law and any restrictions or requirements notified by the Government of India.

14. Children’s Information

Our website and Farmer Network are not intended for children.

We do not knowingly seek to collect personal data from children for participation in our programs.

If we become aware that personal data belonging to a child has been collected in circumstances requiring parental or guardian consent, we will take appropriate steps in accordance with applicable law.

15. Consent

Where we rely on consent to process personal data, we will seek consent in an appropriate manner and for the relevant purpose.

You may withdraw consent where permitted by applicable law.

Withdrawal of consent does not affect processing that was lawfully carried out before withdrawal.

16. Grievance Redressal

If you have a concern regarding the way RePaveX handles your personal data, we encourage you to contact us first so that we can investigate and resolve the matter.

We will maintain an appropriate mechanism for receiving and addressing privacy-related grievances in accordance with applicable law.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

Our operations
Our technology
Our programs
Applicable laws and regulations
Data-protection practices

When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, provide additional notice.

18. Contact Us

For questions, privacy requests, consent withdrawal or grievances concerning the processing of your personal data, please contact RePaveX (OPC) Private Limited.

Privacy & Data Protection Contact

repavex@outlook.com
+91-7987416163

RePaveX (OPC) Private Limited

Our Commitment

We believe that trust is fundamental to responsible climate action.

The information entrusted to RePaveX—whether it belongs to a farmer, community member, partner or visitor—will be handled with care, used responsibly, and protected through appropriate safeguards.

Your data is yours. We are entrusted with it, not entitled to it.

A couple of things I would not do yet: I wouldn’t publish this until you’ve checked the actual Wix configuration and your connected apps. In particular, if your farmer form is storing submissions in Wix CMS, using Wix Forms, Google services, analytics, WhatsApp integrations, etc., those should be reflected accurately in the final policy. Also, the DPDP Rules specify concrete security measures such as encryption/masking, access controls, logging/monitoring, backups and processor safeguards, so your actual implementation should match the promises you make here.

And I deliberately put your email and phone only once, at the very bottom, in unobtrusive italic text, rather than making them a prominent “Contact Us” block.