Legal

Privacy Policy

Last updated: [DD Month 2026] · Operated by Pink Stone Consulting Solutions LLC

This Privacy Policy explains how Pink Stone Consulting Solutions LLC ("THEBR", "we") collects, uses, shares, and protects your personal data when you use the THEBR website, application, and services. We act as the data fiduciary / controller for this data.

1. Data we collect

Registration data: name, email, mobile/WhatsApp number, business name, business category, city, region, networking background, and anything you write in your application.
Account & usage data: profile details, referrals you pass or receive, and activity on the Platform.
Payment data: handled by our payment provider (Merchant of Record); we do not store full card details.
Technical data: device and log information and cookies necessary to run the Platform.

2. Why we use it (purpose)

To review your application and manage the Founding Member waiting list.
To provide, personalise, and improve the Platform and referral matching.
To communicate with you about your application, account, and service.
To process payments, prevent fraud, and comply with legal obligations.

3. Legal basis

We process your data on the basis of your consent, which you give when you submit the registration form, and for related legitimate uses permitted by applicable law. You can withdraw consent at any time (see "Your rights").

4. Consent

By submitting the registration form you consent to the collection and use of your data as described here. Consent is free, specific, informed, and given by clear affirmative action, and you may withdraw it at any time; withdrawal does not affect processing already carried out.

5. Who we share it with

Our payment provider (Merchant of Record) to process payments.
Trusted service providers (e.g. hosting, email, analytics) under confidentiality obligations, only as needed.
Other members, only to the extent you choose to share a profile or pass/receive a referral.
Authorities where required by law.

We do not sell your personal data.

6. International transfer

THEBR operates from Oman and serves members in several countries, so your data may be processed outside your country, including in Oman and by global service providers. We take reasonable steps to protect data wherever it is processed. Transfers of data of members in India are made in line with the Digital Personal Data Protection Act, 2023 and its Rules.

7. Retention

We keep personal data only as long as needed for the purposes above or as required by law, and then delete or anonymise it. If your application is unsuccessful or your account becomes inactive for an extended period, we will delete your data in line with our retention schedule.

8. Security

We use reasonable technical and organisational safeguards to protect your data. No system is perfectly secure; in the event of a personal-data breach we will notify the relevant authority and affected individuals as required by applicable law.

9. Your rights

Subject to applicable law (including India's DPDP Act and, where relevant, the GDPR), you may:

access a summary of the data we hold about you;
correct or update inaccurate data;
request erasure of your data;
withdraw consent at any time;
nominate another person to exercise your rights in the event of death or incapacity; and
raise a grievance and have it addressed.

To exercise any right, contact our Grievance Officer below. We aim to respond within the timelines set by applicable law (for India, grievances are addressed within 90 days).

10. Children

THEBR is for business owners aged 18 and over. We do not knowingly collect data from anyone under 18, and we do not track, profile, or direct advertising at children.

11. Cookies

We use only the cookies needed to operate the Platform and, where required, ask for your consent to any non-essential cookies. You can control cookies through your browser settings.

12. Grievance Officer & contact

Grievance Officer: Supaporn Phohaeo, grievance@thebizref.com. General privacy queries: privacy@thebizref.com.

13. Changes

We may update this Policy from time to time; material changes will be notified on the Platform.