Privacy Policy

This policy applies to EKATAN ("Ekatan", "we", "us"), and to every way you deal with us online: this website, the client portal where you design your home and follow your order, and the emails and messages we send you.

It covers you whether you are just enquiring or whether you have become a customer.

It does not cover other companies’ websites we link to. If you leave our site, that site’s own policy governs what happens next.

We have grouped this by how the information reaches us, because that is the honest way to describe it.

Under the Digital Personal Data Protection Act, 2023, we must tell you the purpose for every category, and use it for nothing else.

We do not sell or rent your data to anyone, and we do not build an advertising profile of you ourselves. What we share with Meta, and why, is set out under “Advertising on Facebook and Instagram”.

When you upload a floor plan, one of our designers draws it by hand into a measured drawing of your home. The site survey’s measurements then override that drawing wherever they disagree.

No automated system reads your plan, and it is not sent to anyone else to be processed. It is not used to train any model.

We use specialist providers rather than building everything ourselves. Each is bound to process your data only on our instructions, and only for what is listed here.

We also share your details with the contractors and vendors executing your project — your carpenter, electrician and installer need your address and site details to do the work. We share only what that job requires.

We will disclose data to a court, a regulator or a law-enforcement agency where the law requires it. If our business is ever sold or merged, your data moves with it, and this policy continues to apply until you are told otherwise.

We advertise on Facebook and Instagram. So that we can tell which ads bring customers, and so that Meta can show our ads to people likely to be planning a home, we tell Meta when someone views a page on this site, creates an account, sends a floor plan, submits a quote, or becomes a customer.

With those events we send your email address and mobile number hashed — scrambled one way, so Meta can match them to an account it already knows but cannot read them — together with Meta’s cookies, your IP address and your browser’s details. We never send your floor plan or what your quote is made of.

When you become a customer, we also tell Meta the total value of your order — one figure, never its contents — so it can show our ads to more people likely to become customers too.

To stop Meta using this to choose the ads you see, change your ad preferences in Facebook or Instagram (Accounts Centre, then Ad preferences), or block cookies in your browser.

Your data is held on secure servers operated by the providers above. Some of them process data outside India, which Indian law permits subject to the Central Government’s restrictions on specific countries. If any country we rely on becomes restricted, we will move that processing.

Wherever it sits, the protections in this policy travel with it. Our contracts require every provider to hold your data to the same standard we do.

We keep your information for as long as you have a relationship with us, so that your drawings, your measurements and the history of what was agreed are there when you come back to us — for a warranty claim, a second room, or a question about work we did years ago. A home is a long-lived thing and its record should be too.

You can ask us to delete it at any time, and we will, except where the law requires us to keep something:

When a record is deleted we remove it from the live system. Backups roll over on their own cycle and are overwritten in the ordinary course.

• Everything travels over HTTPS, and files are stored encrypted at rest.
• You sign in with a one-time code sent to your email. We hold no password of yours that could leak.
• Access is checked on our server on every request: a staff account sees only what its role permits, and your portal account can load only your own quotes.
• Staff access is granted by role, and every approval and revision of your drawings is recorded against the person who made it.
• Uploaded files are checked for type before they are accepted.
• Site survey photographs are stored privately: the location data a camera writes into a photograph is removed on the surveyor’s tablet before upload, and our staff open them through links that expire within minutes. A Site Surveyor’s account can open only the surveys booked to them — never your quote or its prices.

No system is perfect. If a breach affects your data, we will notify you and the Data Protection Board of India as the law requires, and we will tell you what was exposed and what to do about it.

Under the Digital Personal Data Protection Act, 2023, you can:

• Ask what we hold. A summary of your data, what we have done with it, and who we shared it with.
• Correct it. Have anything inaccurate, incomplete or out of date fixed.
• Erase it. Have it deleted, except where we must keep it for tax, legal or contractual reasons — invoices being the usual example.
• Withdraw consent. As easily as you gave it. For WhatsApp, reply STOP or switch it off in Settings. Some services stop working once you do; we will say which before you confirm.
• Nominate someone. Name a person who may exercise these rights for you if you die or become incapacitated.
• Complain. To our Grievance Officer first, and to the Data Protection Board of India if we have not resolved it.

Write to the Grievance Officer below. We will acknowledge you quickly and answer within 30 days. We may ask you to verify the email address on the account before we act — that check protects you.

We use these cookies:

• Sign-in cookies keep you logged in to the client portal. Clearing them signs you out.
• Security cookies protect forms against cross-site request forgery.
• Preference cookies remember small choices, such as a filter you set.
• Visit cookies remember which ad or site first brought you here, and which most recently, for up to 180 days. They hold a random identifier and the ad’s name — nothing about who you are.
• Meta’s cookies (named _fbp and _fbc) let Meta connect a visit to an ad you saw or clicked.

You can clear or block cookies in your browser at any time. The site still works without the visit and Meta cookies; only signing in needs its own.

Our services are for adults engaging an interior contractor. We do not knowingly collect data about anyone under 18, and we do not direct any advertising at children. If you believe a child’s data has reached us, tell the Grievance Officer and we will delete it.

When we change something that affects you materially, we will update the effective date at the top and tell you — by email or in the portal — at least 14 days before it takes effect. Smaller corrections take effect when published. Previous versions are available on request.