Effective date: 10 January 2026 · Last updated: 15 October 2026 · Operator: Office Interior Design, GSTIN 29AAACN7160C1ZN
1.Scope and operator
This Privacy Policy applies to the website officeinteriordesign.in (the "Site") and to project enquiries received through the Site, by email, WhatsApp, or phone. The data controller is Office Interior Design, headquartered at #5, Kanakanagar, R.T. Nagar, Bangalore - 560032, with an office at Drive-in Road, Memnagar, Ahmedabad-380054.
By using this Site or submitting an enquiry, you agree to the practices described below. This policy is governed by the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) as applicable.
2.Personal data we collect
We collect the following categories of personal data, only as needed to respond to your enquiry, deliver our services, or operate the Site:
- Identity and contact data: Name, company name, designation, email, phone number, project city, locality.
- Project brief data: Carpet area, project type (corporate, healthcare, hospitality, retail, education, industrial), budget band, timeline, compliance needs, floor plans you upload.
- Site survey data: Photographs, dimension notes, MEP feasibility observations collected during the free site visit (only if you book one).
- Communication metadata: Email headers, WhatsApp message timestamps, call logs to our published number.
- Technical data: IP address, browser type, device type, pages visited, referring URL, captured via cookies and server logs.
We do not knowingly collect sensitive personal data (financial information, biometric data, health data, sexual orientation, political opinions) unless you voluntarily share it as part of a specialised project brief (for example, NABH-compliant healthcare interiors may require certain medical-facility specifications).
3.How we use your data
- To respond to your enquiry, schedule a site visit, and issue a written budget estimate.
- To deliver design, MEP coordination, project management, and turnkey execution services if you engage us.
- To send project updates, weekly milestone reports, and post-handover support communications.
- To improve the Site, fix bugs, and analyse aggregate traffic patterns.
- To comply with tax, GST, and statutory record-keeping obligations.
- To send occasional, opt-in newsletters about commercial interior trends, cost guides, and project case studies. You can unsubscribe at any time.
4.Legal basis
We rely on the following legal bases under the DPDP Act, 2023 and applicable Indian law:
- Consent: When you fill the contact or free-estimate form, when you opt in to the newsletter.
- Contractual necessity: When you engage us for a project and we need data to perform our obligations.
- Legitimate interest: For Site analytics, fraud prevention, and security monitoring.
- Legal obligation: For GST invoicing, statutory record-keeping, and response to lawful requests from authorities.
5.Sharing and disclosure
We do not sell, rent, or trade your personal data. We share data only in these limited cases:
- Vendors and sub-contractors: Our in-house team handles design, MEP, and project management. For specialised trades (specific furniture vendors, HVAC sub-contractors, electrical contractors) we share only the minimum data needed (project location, scope, schedule).
- Service providers: Email, hosting, analytics, and CRM tools that process data on our behalf under written data-processing agreements.
- Statutory authorities: When required by law, regulation, court order, or to comply with GST and tax obligations.
- Business transfers: In the event of a merger, acquisition, or asset sale, your data may transfer to the successor entity under the same protections.
We do not transfer personal data outside India except to service providers operating in jurisdictions with equivalent or stronger data-protection standards.
6.Retention period
- Enquiry data (no project engaged): 24 months from last interaction, then deleted.
- Active project data: Duration of the project plus 7 years for tax and statutory records.
- Post-handover support: 12 months active, then archived for 5 additional years.
- Newsletter subscribers: Until you unsubscribe; one-click unsubscribe in every email.
- Site analytics: 14 months in identifiable form, then aggregated and anonymised.
7.Cookies and analytics
The Site uses cookies for essential functions (session, form submissions) and analytics (page views, traffic source). We use first-party analytics with IP anonymisation. We do not use cross-site behavioural advertising cookies. You can disable cookies in your browser; some Site features may not work fully without them.
8.Your rights
Under the DPDP Act, 2023, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of data we no longer have a lawful basis to retain.
- Withdraw consent at any time for processing based on consent.
- Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
- Lodge a grievance with our Data Protection Officer (see Section 14) or escalate to the Data Protection Board of India.
We respond to verified rights requests within 30 days. To ask for deletion, see How to request deletion of your data.
9.Security measures
We follow ISO 27001-aligned reasonable security practices: encrypted data transit (TLS), access-controlled internal systems, periodic vulnerability scans, signed NDAs with all team members and sub-contractors, and physical security at our Bangalore and Ahmedabad offices. No system is 100% secure; in the unlikely event of a breach affecting your data, we notify you and the Data Protection Board as required by law.
10.Minors
The Site and our services are intended for commercial clients and their authorised representatives. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us and we will delete it.
11.PARO app and Google user data
PARO is the internal content tool that Office Interior Design and its group brands use to publish their own videos to their own YouTube channel. It is not offered to the public, and only authorised members of our team can sign in to it.
- What PARO accesses: when an authorised team member signs in with Google and grants access, PARO receives only the permissions shown on Google's consent screen: to upload videos to, and manage the videos, playlists and channel details of, our own YouTube channel, plus the basic account information needed to identify the signed-in account.
- How it is used: only to upload, schedule and update our own videos and their titles, descriptions, thumbnails and playlists, as instructed by our team. It is not used to read or collect data about viewers or other channels.
- Sharing: Google user data is not sold, not shared with third parties, not used for advertising and not used to train artificial-intelligence models. It is transferred only where needed to provide this feature, to comply with the law, or with the account holder's consent.
- Storage and retention: the access granted by Google is kept in our own restricted credential store, available only to authorised staff, and only while the channel connection is in use. It is deleted within 30 days after access is revoked or no longer needed.
- Revoking access: the account holder can remove PARO's access at any time at myaccount.google.com/permissions, or by writing to us at the address in section 14.
- YouTube: PARO uses YouTube API Services. Using them is also subject to the YouTube Terms of Service and the Google Privacy Policy.
PARO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
12.How to request deletion of your data
You can ask us at any time to delete the personal data we hold about you. That includes data you gave us on this website, through a Facebook or Instagram lead form, or in a WhatsApp chat with any of our group brands (Office Interior Design, Perfect Interior Designs, Refresh Interior Space), and data held in our internal system PARO.
- Email: write to hello@officeinteriordesign.in with the subject "Delete my data". Include your name and the phone number or email address you used with us, and the brand you contacted.
- WhatsApp: send the word DELETE in your chat with our business number. Sending STOP ends all WhatsApp messages from us and records that you withdrew consent.
- We confirm that we received your request within 7 days.
- We delete your enquiry details, consent record, messages and follow-up notes from our systems within 30 days, and confirm by email or WhatsApp when it is done.
- We keep only what the law requires us to keep (for example invoices for completed projects), and we tell you what we kept and why.
- Data held by Meta itself (your Facebook, Instagram or WhatsApp account) is managed in that app's own settings.
13.Updates to this policy
We update this policy when our practices change or when the law changes. The "Last updated" date at the top reflects the most recent change. Material changes will also be communicated by email to active project clients and newsletter subscribers.