Privacy Policy

1. Who We Are & What This Policy Covers

221 B Baker ST ("221B Baker Street", "we", "us" or "our") is a B2B liaison and investigative sales consultancy with its office at WEBEL TOWER-I, Module No. 204, BN Block, Sector V, Bidhannagar, Kolkata, West Bengal 700091, India.

This Privacy Policy explains how we handle personal information when you visit www.twotwo1bbs.com, submit an enquiry or job application through our forms, correspond with us by email, phone or social media, or engage us for our services. It applies to this website and to the business relationships that begin here. It does not apply to third-party websites we link to, which operate under their own policies.

Where we handle information on behalf of a client — for example prospect data used to run a sales campaign — we act as a processor on that client's instructions, and the client's own privacy notice governs how that data was collected in the first place.

2. Information We Collect

We collect personal information in three ways: what you give us, what we record automatically, and what we receive from others.

Information you give us

• Enquiry and contact forms. Your name, email address, phone number, preferred date and time zone for a callback, and the content of your message.
• Career applications. Your name, email address, phone number and the details you share about your background, experience and interest in a role, along with any CV or supporting document you send us by email.
• Business correspondence. Contact details and any information you choose to include when you email, call or message us, including during an engagement.

Information collected automatically

• Usage and device data. IP address, browser type and version, operating system, device type, screen size, referring page, pages viewed, time spent and the approximate location derived from your IP address.
• Cookies and similar technologies. Small files and identifiers placed on your device, as described in section 5.
• Server logs. Standard web-server records of requests made to our site, kept for security and diagnostics.

Information from other sources

• Referrals and introductions. Contact details shared by an existing client or contact who refers you to us.
• Public and professional sources. Business contact details from company websites, professional networks and public business directories where we have a legitimate business reason to reach out.
• Platforms you use to reach us. Basic profile details made available when you contact us via Facebook, LinkedIn or Instagram.

We do not intentionally collect sensitive personal data — such as information about health, religion, biometrics, or financial account credentials — through this website. Please do not include such details in a form or message.

3. How We Use Your Information

• To respond to you. Answering enquiries, scheduling calls, and sending the information you asked for.
• To deliver our services. Setting up, running and reporting on B2B liaison, sales campaign, advisory and mentorship engagements.
• To assess applications. Reviewing candidates for open roles and internships, and keeping in touch about suitable openings.
• To operate and improve the site. Understanding which pages are useful, fixing faults, and improving performance and content.
• To protect our site and business. Preventing spam, abuse and fraudulent submissions, including through Google reCAPTCHA on our forms.
• To meet legal obligations. Complying with applicable law, tax and accounting requirements, and responding to lawful requests.

We do not sell your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.

4. Our Legal Basis

Where the EU/UK General Data Protection Regulation applies, we rely on the following bases: your consent (for non-essential cookies and optional marketing messages); the performance of a contract or steps taken at your request before entering one (responding to your enquiry and delivering our services); our legitimate interests in operating, securing and growing a B2B consultancy, balanced against your rights; and legal obligation where the law requires us to retain or disclose information.

Where India's Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of your consent or for the legitimate uses permitted under that Act, and we give notice of the purposes at the point of collection.

5. Cookies & Tracking Technologies

Cookies are small text files stored by your browser. We use a small number of them, together with scripts loaded from trusted providers, to keep the site working and to understand how it is used. Our Cookie Policy lists each cookie individually, with its purpose and duration.

You can block or delete cookies through your browser settings, and you can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on. Blocking essential cookies may prevent parts of the site — such as the enquiry form — from working. We do not currently respond to browser "Do Not Track" signals, as no common standard for them has been agreed.

6. How We Share Information

We share personal information only where it is necessary, and only with:

• Service providers. Hosting, email, analytics, security and communication providers who process data on our instructions and are bound to protect it.
• Clients and partners. Where you have asked to be introduced, or where sharing is part of an engagement you are party to.
• Professional advisers. Accountants, auditors and lawyers, under duties of confidentiality.
• Authorities. Where disclosure is required by law, court order or a valid request from a public authority, or is necessary to establish, exercise or defend legal claims.
• A successor entity. In connection with a merger, acquisition or reorganisation of our business, subject to this policy.

We never sell, rent or trade personal information to third parties for their own marketing.

7. International Transfers

We are based in India and work with clients across Asia, Africa, Europe and North America. Your information may therefore be transferred to, stored in or accessed from countries other than your own, including by the service providers listed above. Where such a transfer is subject to the GDPR, we rely on the European Commission's Standard Contractual Clauses or another recognised safeguard, and take steps to ensure your data continues to be protected to a comparable standard.

8. How Long We Keep Data

We keep personal information only as long as it is needed for the purpose it was collected for. As a guide: enquiry correspondence is kept for up to 24 months from our last exchange; job applications for up to 12 months after a decision, unless you ask us to keep them longer for future roles; engagement and contractual records for as long as the law requires us to retain them for tax and accounting purposes; and analytics data in aggregated form. When information is no longer needed, we delete it or anonymise it.

9. How We Protect Data

The site is served over HTTPS, access to our systems is restricted to the people who need it, and our team is bound by confidentiality obligations. We apply reasonable technical and organisational measures appropriate to the sensitivity of the information we hold. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authority as required by law.

10. Your Rights & Choices

Subject to the law that applies to you, you may ask us to:

• Access the personal information we hold about you and a summary of how it is processed.
• Correct information that is inaccurate, incomplete or out of date.
• Erase information we no longer have a lawful reason to keep.
• Restrict or object to certain processing, including processing based on our legitimate interests.
• Withdraw consent at any time, without affecting processing carried out before the withdrawal.
• Receive a copy of information you provided to us in a portable, machine-readable format.
• Nominate another individual to exercise your rights on your behalf in the event of death or incapacity, as provided under the DPDP Act, 2023.

To exercise any of these rights, write to cyan@twotwo1bbs.com. We will respond within the period required by applicable law, and we may need to verify your identity first. You can unsubscribe from any marketing email using the link in that email. If you are unhappy with our response, you may complain to the Data Protection Board of India or, in the EU/UK, to your local supervisory authority.

11. Third-Party Links

Our pages link to external sites — including our profiles on Facebook, LinkedIn and Instagram, client websites and mapping services. We do not control those sites and are not responsible for their content or privacy practices. Please read their privacy notices before providing them with personal information.

12. Children's Privacy

Our website and services are intended for business audiences and are not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to This Policy

We may update this policy to reflect changes in our practices, technology or the law. The revised version will be posted on this page with a new "Last updated" date. Where the changes are significant, we will take reasonable steps to draw them to your attention. Please review this page periodically.

14. How to Contact Us

For any question about this policy, or to exercise your rights, our Grievance Officer can be reached at:

• Email: cyan@twotwo1bbs.com
• Phone: +91 99032 10221 / +91 90510 71810
• Post: 221 B Baker ST, WEBEL TOWER-I, Module No. 204, BN Block, Sector V, Bidhannagar, Kolkata, West Bengal 700091, India

"It is a capital mistake to theorise before one has data." We take the data you entrust to us just as seriously. — 221 B Baker ST