Sports Goods & Toys Export Promotion Council ("SGEPC", "Council", "we", "us", or "our") respects the privacy and confidentiality of personal, commercial, and export-related information entrusted to us by member manufacturers, merchant exporters, international trade partners, and visitors accessing our portal at sportsgoodsindia.org.

This Privacy Policy outlines the classes of data collected, the legal grounds and operational necessities of data processing, safeguards implemented to preserve data integrity, and mechanisms available to data principals to exercise their rights.

In fulfilling our statutory and trade facilitation responsibilities, SGEPC collects the following categories of data:

• Corporate & Regulatory Identification: Importer-Exporter Code (IEC), Goods and Services Tax Identification Number (GSTIN), Permanent Account Number (PAN), Udyam / MSME Registration Certificate, Factory Licenses, and Registered Office Address.
• Authorized Personnel Contact Details: Names, official designations, mobile numbers, corporate email addresses, and identity credentials of Managing Directors, Partners, Proprietors, and designated liaison officers.
• Export Performance & Production Statistics: Quarterly and annual Free On Board (FOB) export returns, item-wise Harmonized System (HS) classifications, destination countries, manufacturing plant capacity, and product catalogue descriptions.
• Financial & Payment Data: Transaction reference IDs, bank payment receipts, and payment gateway tokens associated with membership subscription fees and exhibition participation tariffs (SGEPC does not store debit/credit card CVV or net banking credentials).
• Technical & Session Metrics: IP addresses, browser specifications, login timestamp logs, device architecture, and referral URLs recorded automatically for security audit and system resilience.

SGEPC processes data strictly under legitimate legal bases and statutory trade objectives:

• RCMC Administration: Validating corporate authenticity, issuing digital Registration-cum-Membership Certificates, and synchronizing registration records with the DGFT national database.
• National Exporter Directory: Publishing verified member profiles and contact coordinates to facilitate cross-border business inquiries from vetted overseas buyers.
• Export Awards & Industry Rankings: Evaluating export turnover figures to recognize top performers in annual trophy ceremonies.
• Trade Promotion & Subsidies: Processing financial grants under the Export Promotion Mission (EPM) scheme for delegates participating in overseas trade fairs.
• Trade Policy Advocacy: Consolidating macro-level trade statistics to advise the Ministry of Commerce & Industry, DPIIT, and CBIC on Foreign Trade Policy, Quality Control Orders (QCOs), and Free Trade Agreements (FTAs).

Zero Commercial Sale Policy: SGEPC under no circumstance sells, rents, monetizes, or leases member data to third-party telemarketers, commercial data brokers, or advertisers.

Information is shared strictly under the following defined parameters:

• Statutory Authorities: Regulatory transmission to the Directorate General of Foreign Trade (DGFT), Ministry of Commerce & Industry, Central Board of Indirect Taxes and Customs (CBIC), and law enforcement agencies when mandated by formal legal process.
• Public Exporter Directory: Public access is strictly confined to company name, corporate address, website, telephone, and product categories. Sensitive financial returns and audit certificates remain strictly private and confidential.
• International Trade Fair Organizers: Forwarding relevant company specifications to accredited international fair organizers when members apply for council exhibition stalls.

SGEPC deploys robust administrative, physical, and technological safeguards to defend member data against unlawful access, alteration, disclosure, or destruction:

• Cryptographic Encryption: All client-to-server digital transmissions are secured utilizing Transport Layer Security (TLS 1.3/SSL) with minimum 256-bit cryptographic keys.
• Credential Protection: Passwords and API authentication keys are stored using irreversible one-way cryptographic salted hashes.
• Access Control: Administrative access to council databases is governed by Role-Based Access Control (RBAC) and monitored through real-time audit logging.
• Database Redundancy: Hosted on secured servers located within Indian sovereign territory, supported by daily differential and weekly comprehensive backups.

The SGEPC portal employs standard HTTP cookies and session tokens solely for functional necessities:

• Essential Authentication Cookies: Maintaining member portal login sessions securely across navigation clicks.
• User Preference Cookies: Remembering user interface settings such as light and dark theme mode choices.
• Aggregated Analytics: Measuring overall portal traffic volume and popular resource downloads without attaching data to personally identifiable individual profiles.

Corporate records, RCMC issuance histories, and export statistics are retained as mandated by Indian statutory preservation laws. In accordance with data protection regulations, authorized representatives of member units hold the right to:

• Access and review corporate data held on the SGEPC database via the Member Dashboard.
• Request correction or rectification of outdated, incomplete, or inaccurate company details.
• Lodge an inquiry or grievance with the Council Data Protection and Grievance Officer.

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the contact particulars of the Grievance Redressal Officer are as follows: