1. Who we are
LAB4BRANDS operates a multi-vendor B2B marketplace that connects buyers with verified suppliers, distributors and manufacturers of branded merchandise, apparel, uniforms, footwear and corporate gifts. For the purposes of the Digital Personal Data Protection Act, 2023, LAB4BRANDS is the Data Fiduciary that determines the purpose and means of processing your personal data.
This Policy applies to everyone who uses the Platform — buyers, supplier organisations and their authorised users, and visitors who browse without an account.
2. Information we collect
Information you give us
- Account details — name, work email, phone number, password and role (buyer, supplier or admin).
- Business details — company name, GSTIN, PAN, registered address, certifications and supplier onboarding documents.
- Sourcing activity — requests for quotes (RFQs), product specifications, customisation artwork, quotes, counter-offers, orders and messages exchanged on the Platform.
- Support and communications — anything you send us by email, contact forms or support channels.
Information we collect automatically
- Device and usage data — IP address, browser type, pages viewed, referring URLs and timestamps.
- Cookies and similar technologies — used to keep you signed in, remember preferences and measure how the Platform is used (see “Cookies” below).
We do not knowingly collect sensitive personal data beyond what is needed for verification (such as GST or business registration details). Please do not submit payment card numbers, government IDs or other sensitive data except where the Platform specifically requests it.
3. How we use your information
We process your information to:
- Create and manage your account and verify supplier organisations.
- Operate the marketplace — route RFQs to relevant suppliers, generate quotes, process orders and produce invoices.
- Calculate taxes (including GST) and maintain transaction records.
- Send transactional and service notifications about your RFQs, quotes, orders and account.
- Provide customer support and respond to your queries.
- Detect, prevent and investigate fraud, abuse and security incidents.
- Improve and develop the Platform, including analytics on aggregated, de-identified data.
- Comply with legal, tax and regulatory obligations.
We rely on your consent, the performance of our contract with you, our legitimate business interests, and our legal obligations as the lawful bases for this processing.
6. Data retention
We keep personal data for as long as your account is active and as long as needed to provide the Platform. Transaction, invoice and tax records are retained for the periods required under applicable Indian tax and company law. When data is no longer needed, we delete or anonymise it.
7. How we protect your information
We use reasonable technical and organisational measures — including encryption in transit, access controls and role-based permissions — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach, we will notify the Data Protection Board of India and affected users as required by law.
8. Your rights
Subject to applicable law, including the DPDP Act, 2023, you may:
- Access the personal data we hold about you and request a summary of how it is processed.
- Request correction or updating of inaccurate or incomplete data.
- Request erasure of your personal data where it is no longer required.
- Withdraw consent where processing is based on consent (this does not affect prior processing).
- Nominate another individual to exercise your rights in the event of death or incapacity.
- Raise a grievance with our Grievance Officer (see below).
You can exercise most of these rights from your account settings, or by contacting us. We may need to verify your identity before acting on a request.
9. International data transfers
We primarily store and process data in India. Where our service providers process data outside India, we do so only to countries permitted under applicable law and subject to appropriate safeguards.
10. Children
The Platform is a business-to-business service intended for users aged 18 and over acting on behalf of a business. We do not knowingly collect data from children. If you believe a child has provided us data, please contact us so we can delete it.
11. Changes to this Policy
We may update this Policy from time to time. We will post the revised version with a new “last updated” date and, where changes are material, take reasonable steps to notify you.
12. Grievance Officer & contact
In accordance with the Information Technology Act, 2000 and the rules thereunder, the name and contact details of our Grievance Officer are provided below. We aim to acknowledge grievances within 24 hours and resolve them within the timelines prescribed by law.
- Grievance Officer, LAB4BRANDS Pvt Ltd
- Email: grievance@lab4brands.com
- Privacy queries: privacy@lab4brands.com
This document is provided for general information and does not constitute legal advice. LAB4BRANDS may update it from time to time; the version above is current as of 23 June 2026.