Privacy Policy
[Business name]
Last updated: [date]
1. About this policy
[Business name] ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and the rights you have.
It covers our website and our forms on Facebook and Instagram, and any contact you have with us by phone, email or message.
We handle personal data in line with India's Digital Personal Data Protection Act, 2023, the rules made under it and other laws that apply to us.
Where we rely on your consent, we ask for it clearly, for example with a tick box or a submit button on a form that links to this policy. You can withdraw your consent at any time, as explained under "Your rights and choices".
This policy is in English. To read it in Hindi and Gujarati, or in another language listed in the Eighth Schedule to the Constitution of India, contact us and we will provide it.
2. Personal data we collect
We collect only the personal data we need for the purposes in this policy. Depending on how you deal with us, this may include:
- Your name
- Your email address
- Your phone number, which may also be your WhatsApp number
- Messages, photos and files you send us on WhatsApp, with your WhatsApp name and number
- Device and usage data: your IP address, browser and device type, the pages you visit and how you reached our website, collected through cookies and similar technologies
If you choose not to give us some details, we may not be able to reply to you or provide the service you asked for.
3. How we use your data
We use your personal data only for these purposes:
- To reply to your enquiries and send the quotes or information you ask for
- To send you updates about your order, booking or request by phone, email, SMS or WhatsApp
- To keep our website secure and to prevent fraud and misuse
- To keep the records the law requires, such as tax invoices and accounts, and to respond to lawful requests from authorities
We will not use your data for a new purpose without telling you and, where the law requires, asking for your consent first.
In some cases the law allows us to use data without separate consent, for example to comply with a law, a court order or a lawful request from the government, or to respond to a medical emergency.
4. Forms on Facebook and Instagram
When you fill in one of our lead forms on Facebook or Instagram, Meta passes the details you submit to us. We use them only for the purpose stated in that form and in this policy, such as calling or messaging you about your enquiry.
We do not sell these details. Meta's own use of your data is covered by Meta's Privacy Policy.
5. Cookies, analytics and ad tools
Cookies are small files a website stores in your browser. Our website uses cookies it needs to work, such as remembering your choices.
You can block or delete cookies in your browser settings. If you block all cookies, some parts of our website may not work. Where the law requires, we ask for your consent before setting cookies that are not essential.
6. WhatsApp
If you message us on WhatsApp, we receive your WhatsApp name and number and the messages and files you send. We use them to reply to you and to send the updates you ask for. WhatsApp is a Meta service, and WhatsApp's Privacy Policy applies to your use of the app.
7. Who we share it with
We share personal data only when it is needed for the purposes above:
- Service providers who work for us, such as hosting providers, email and cloud storage services and SMS services. They act on our instructions under a contract and may not use your data for their own purposes.
- Meta, through the tools described above, under its own terms
- Government authorities, courts or regulators, when the law requires us to
We do not sell your personal data.
8. Where your data is stored
Some of our service providers, including Meta, may store or process your data on servers outside India.
We transfer personal data outside India only as Indian law allows, and never to a country the Government of India has restricted by notification.
9. How long we keep it
We keep personal data only for as long as we need it for the purposes in this policy, or as long as the law requires:
- Enquiries and leads: up to 2 years after our last contact with you, unless you become a customer
- Records of how your data was processed (logs): at least one year, as India's data protection rules require
When we no longer need your data, or you withdraw your consent, we delete it and ask our service providers to delete it, unless a law requires us to keep it.
10. How we protect it
We take reasonable security safeguards to protect personal data, including encrypted connections (HTTPS), access limited to the people who need it, strong passwords, backups and records of who accesses data. We require our service providers to protect it too.
No system is completely secure. If a personal data breach affects you, we will tell you without delay what happened, its likely impact, what we are doing about it and what you can do. We will also report it to the Data Protection Board of India as the law requires.
11. Your rights and choices
Under India's data protection law, you can:
- Withdraw your consent at any time, as easily as you gave it. This doesn't affect what we did before you withdrew it, but we may no longer be able to serve you.
- Ask for a summary of the personal data we hold about you, how we use it and who we have shared it with
- Ask us to correct, complete or update your data
- Ask us to erase your data, unless we need to keep it for the purpose you gave it for or to comply with the law
- Nominate another person to use these rights for you if you die or become unable to
- Raise a grievance with us and, if you are not satisfied with our answer, complain to the Data Protection Board of India
- Give, manage or withdraw your consent through a Consent Manager registered with the Data Protection Board of India, where one is available
To use any of these rights, email [contact email] from the email address or phone number you used with us, or mention it in your message so we can find your records. We will reply within one month of receiving your request.
12. Children
Our website and services are meant for adults. We do not knowingly collect personal data from anyone under 18. If you think a child has given us their details, contact us and we will delete them.
13. Contact and grievance officer
For questions about this policy or your personal data, or to raise a grievance, contact our Grievance Officer:
- Name: [Grievance Officer's name]
- Email: [contact email]
- Business: [Business name]
We will reply within one month of receiving your message.
14. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last updated. If the changes are significant, we will tell you on our website, or by email if we have your address, before they apply.