Who this policy covers
This policy applies to Ekatan Interiors Pvt. Ltd. ("Ekatan", "we", "us"), and to every way you deal with us online: this website, the client portal where you view and build your quote, the messages you exchange with your designer there, and the emails and SMS we send you.
It covers you whether you are just enquiring, whether you have become a customer, or whether you are on our waitlist because we do not yet work in your city.
It does not cover other companies' websites we link to. If you leave our site, that site's own policy governs what happens next.
What we collect
We have grouped this by how the information reaches us, because that is the honest way to describe it.
2.1What you tell us directly
- Your name, mobile number and — if you give it — your email address and WhatsApp number.
- The number you use to sign in. We verify it by sending a one-time password; we never ask you for a password and never store one.
- Your budget range, when you want to start, and who else is part of the decision. Your designer needs this to propose something realistic.
- Anything you write to us — the enquiry form, the chat thread with your designer, notes on a quote.
2.2About your home
- City, locality, apartment or project name, tower, flat number, and unit type.
- Possession date, and the rooms you want us to work on.
- Measurements taken at the site visit — wall lengths, ceiling heights, window and door positions, existing plumbing and electrical points.
2.3Files you upload or send
- The floor plan of your flat, as an image or PDF.
- Photographs and videos of your space that you share in the chat thread.
- Reference images of what you like.
A floor plan usually carries your flat number and the builder's project name. Treat it as identifying you, because it does — and so do we.
2.4Payment information
Payments run through Razorpay, a payment gateway regulated in India. Your card number, UPI ID or netbanking credentials go to Razorpay, never to us. We keep only the amount, the date, whether it succeeded, and Razorpay's reference for it.
2.5Technical information
- IP address, browser and device type, and the pages you opened. We use this to keep the site up and to stop automated abuse of our forms.
- Aggregate page-speed and traffic measurements from our hosting provider. These are counts, not profiles: no cross-site tracking, no advertising identifier.
- If you turn on browser notifications, the push subscription your browser issues so we can tell you when your designer replies.
Why we collect it
Under the Digital Personal Data Protection Act, 2023, we must tell you the purpose for every category, and use it for nothing else.
| What | What we do with it | Our basis |
|---|---|---|
| Name, phone, email | Identify you, sign you in, call you back, send quote and project updates | Your consent, and performing our contract |
| Home and site details | Work out what can be built in your space and what it costs | Performing our contract |
| Floor plans and photos | Produce drawings, quantities and a quote | Performing our contract |
| Payment records | Raise invoices, meet tax and accounting law | Legal obligation |
| Chat messages | Answer you, and keep a record of what was agreed | Performing our contract |
| IP address, device | Rate-limit forms, block abuse, keep the service available | Our legitimate interest in security |
| Waitlist entry | Tell you when we start working in your city | Your consent — withdraw any time |
We do not use your data to build an advertising profile, and we do not sell or rent it to anyone.
Reading your floor plan
When you upload a floor plan, it goes to an automated drawing reader that detects room outlines, labels and door and window positions, and returns a first draft of your home's layout. That draft is a starting point: you and your designer correct it, and the site visit measurements override it wherever they disagree.
Two things are worth stating plainly:
- The reader runs on specialist infrastructure we engage for the purpose. Your plan is transmitted there for processing and is not used to train anyone's model.
- No decision that affects you is taken by that automated step alone. A human designer reviews the layout, and the quote you receive is prepared and sent by a person.
Who else handles your data
We use specialist providers rather than building everything ourselves. Each is bound to process your data only on our instructions, and only for what is listed here.
| Provider | What they do for us |
|---|---|
| Database and file storage | Holds your account, your quotes, your messages and your uploaded files |
| Website hosting | Serves this website and the client portal |
| SMS provider | Sends the one-time password to your phone |
| Razorpay | Takes card, UPI and netbanking payments |
| Email provider | Sends quote, appointment and account emails |
| Floor-plan reader | Detects rooms and dimensions in the plan you upload |
We also share your details with the contractors and vendors executing your project — your carpenter, electrician and installer need your address and site details to do the work. We share only what that job requires.
We will disclose data to a court, a regulator or a law-enforcement agency where the law requires it. If our business is ever sold or merged, your data moves with it, and this policy continues to apply until you are told otherwise.
Where your data is stored
Your data is held on secure servers operated by the providers above. Some of them process data outside India, which Indian law permits subject to the Central Government's restrictions on specific countries. If any country we rely on becomes restricted, we will move that processing.
Wherever it sits, the protections in this policy travel with it. Our contracts require every provider to hold your data to the same standard we do.
How long we keep it
We keep your information for as long as you have a relationship with us, so that your drawings, your measurements and the history of what was agreed are there when you come back to us — for a warranty claim, a second room, or a question about work we did years ago. A home is a long-lived thing and its record should be too.
You can ask us to delete it at any time, and we will, except where the law requires us to keep something:
| Record | What happens |
|---|---|
| Invoices and payment records | Kept for 8 years — required by tax law, even after a deletion request |
| Everything else | Deleted when you ask, or when it stops serving the purpose it was collected for |
| Security and server logs | Short-lived and overwritten automatically |
When a record is deleted we remove it from the live system. Backups roll over on their own cycle and are overwritten in the ordinary course.
How we protect it
- Everything travels over HTTPS, and files are stored encrypted at rest.
- Sign-in is a one-time password to your own phone. There is no password to leak.
- The database enforces access at the row level: a designer's account can only load the leads assigned to them, and your portal account can only load your own quotes and messages — not by convention, but by a rule the database applies to every query.
- Staff access is granted by role and logged. Every change to a customer record is written to an audit trail.
- Uploaded files are checked for type before they are accepted.
No system is perfect. If a breach affects your data, we will notify you and the Data Protection Board of India as the law requires, and we will tell you what was exposed and what to do about it.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- Ask what we hold. A summary of your data, what we have done with it, and who we shared it with.
- Correct it. Have anything inaccurate, incomplete or out of date fixed.
- Erase it. Have it deleted, except where we must keep it for tax, legal or contractual reasons — invoices being the usual example.
- Withdraw consent. As easily as you gave it. Some services stop working once you do; we will say which before you confirm.
- Nominate someone. Name a person who may exercise these rights for you if you die or become incapacitated.
- Complain. To our Grievance Officer first, and to the Data Protection Board of India if we have not resolved it.
Write to the Grievance Officer below. We will acknowledge you quickly and answer within 30 days. We may ask you to verify the phone number on the account before we act — that check protects you.
Cookies
We use cookies only where the site cannot work without them:
- Sign-in cookies keep you logged in to the client portal. Clearing them signs you out.
- Security cookies protect forms against cross-site request forgery.
- Preference cookies remember small choices, such as a filter you set.
We run no advertising cookies and no cross-site tracking pixels. Our traffic measurement is aggregate and cookie-free. Full detail is in the Cookie Policy.
Children
Our services are for adults engaging an interior contractor. We do not knowingly collect data about anyone under 18, and we do not direct any advertising at children. If you believe a child's data has reached us, tell the Grievance Officer and we will delete it.
Changes to this policy
When we change something that affects you materially, we will update the effective date at the top and tell you — by email or in the portal — at least 14 days before it takes effect. Smaller corrections take effect when published. Previous versions are available on request.
// GRIEVANCE OFFICER
Someone specific is responsible for this
The Digital Personal Data Protection Act requires us to name a person who answers your questions and complaints about your data. This is them.
- Name Mohd Zaki
- Email zaki.ch@ekatan.com
- Phone +91 99337 01566