1. Our Privacy Pledge
At Nakshtra Interior, we understand that designing a home or commercial space is an intimate and personal endeavor. When you share your floor plans, photographs, phone number, and design aspirational details with us, you are placing your confidence in our integrity.
We are deeply committed to protecting your privacy and ensuring transparency in all our data processing activities. This Privacy Policy explains what personal data we collect through our website, digital showroom, client inquiry forms, consultation sessions, and administrative accounts, why we collect it, and the rigorous safeguards we apply to keep it secure.
2. Identification of Data Fiduciary
Under applicable Indian privacy law, the Data Fiduciary (the entity responsible for determining the purpose and means of processing your personal data) is:
Entity Name: Nakshtra Interior
Principal Studio Address: Balaji Crystal, Dalavi Nagar, Dalvinagar, Ambegaon Budruk, Pune, Maharashtra 411046
Service Territory: Pune, Pimpri-Chinchwad (PCMC), and Maharashtra, India
Official Privacy Contact: nakshtrainteriors96@gmail.com | +91 8855044699
3. Categories of Personal Data We Collect
We collect information in two main categories:
A. Information You Voluntarily Provide
- Contact & Identity Information: Full name, 10-digit Indian mobile phone number (formatted as
+91), WhatsApp number, and email address. - Project Location & Scope: Locality or apartment complex within Pune (e.g., Ambegaon BK, Katraj, Baner, Kothrud, Wakad), property layout type (1BHK, 2BHK, 3BHK, Villa, Office, Commercial), and intended possession timeline.
- Architectural Documents & Floor Plans: CAD files, PDFs, or images (JPG, PNG, WEBP up to 5 MB) of architectural floor plans, measurements, and photographs of existing site conditions that you upload to our secure storage.
- Design Preferences & Requirements: Specific service interests (e.g., modular kitchen, master bedroom, false ceiling, Devghar temple, painting, turnkey execution), aesthetic tastes, and approximate budget allocations.
- Account & Administrative Credentials: Email addresses and hashed passwords for authorized administrative or client portal access.
- Direct Communications: Notes from phone calls, WhatsApp chat inquiries, site consultation visits, and email exchanges.
B. Automatically Collected Technical & Analytics Data
When you browse our digital showroom or explore project portfolios, our systems automatically collect minimal, pseudonymized telemetry to maintain site performance, prevent abuse, and track aggregated visitor trends:
- Device & Browser Telemetry: Device category (Desktop, Mobile, Tablet), operating system, browser family and version.
- Network & Diagnostics: IP address (utilized for rate-limiting and security abuse prevention via Supabase RPC functions, then hashed), coarse country/region indicator.
- Usage Metrics: Page paths accessed (e.g.
/projects,/faq), referring URL, session timestamps, and web vitals metrics via Vercel Analytics. - Pseudonymous Visitor Tokens: A random local visitor token (
visitorId) stored in your browser's local storage to prevent double-counting page views and track anonymous session counts.
4. How We Collect Your Data
Personal information is gathered through transparent touchpoints:
- Website Consultation Forms: When you complete the lead submission form on
/contact, the home page, or our interactive consultation popup. - Direct WhatsApp Inquiries: When you click our official WhatsApp action button to initiate a chat with our design team.
- File Uploads: When you attach your builder blueprint or floor plan PDF/image directly through the form.
- On-Site Meetings & Studio Visits: When you visit our studio in Ambegaon Budruk or host our design team for an on-site spatial survey.
- Serverless Diagnostics: Automated page view records triggered upon visiting public routes to ensure serverless health and rate-limit spam traffic.
5. Legal Bases for Processing Data
Under the DPDP Act, 2023 and international standards, we process your personal data only when backed by a recognized lawful basis:
1. Express Consent
When you submit a consultation form, book a site visit, or request pricing, you explicitly consent to being contacted by our design consultants regarding your project.
2. Contractual Performance
Processing is necessary to fulfill our obligations under your interior design contract: producing 2D/3D visual plans, preparing Bill of Quantities (BOQ), procuring hardware, scheduling factory cutting, and on-site assembly.
3. Legitimate Business Uses
Securing our web platform against bot spam and cyber threats via rate-limiting RPCs, diagnosing serverless runtime errors, and optimizing portfolio rendering speed.
4. Legal & Statutory Compliance
Maintaining financial records, processing tax-compliant GST invoices, and meeting auditing obligations under the Indian Companies Act and GST laws.
6. Specific Purposes of Processing
We utilize your personal information exclusively for the following purposes:
- To evaluate your space layout and arrange initial on-site physical measurements.
- To render photorealistic 3D perspectives, design modular cabinetry, and generate itemized Bill of Quantities (BOQ) with fixed pricing.
- To communicate project updates, milestone achievement notices, material sample approvals, and installation schedules via phone, WhatsApp, or email.
- To process milestone payments, dispatch formal GST tax invoices, and issue official receipts.
- To track and service our 10+ year warranty commitments and provide post-handover maintenance support.
- To prevent malicious automated abuse through endpoint rate limiting (
bump_rate_limit). - To evaluate web traffic flow and optimize our digital showroom user experience.
7. Zero Data Selling Guarantee
We Never Sell, Rent, or Monetize Your Personal Data
Nakshtra Interior has never sold, leased, or traded customer contact lists, phone numbers, email addresses, or architectural drawings to third-party data brokers, lead aggregators, or marketing telemarketers. We never will. Your data is utilized exclusively to fulfill your interior design and execution needs with our studio.
8. Processors & Trusted Third-Party Services
To deliver a modern web experience and secure cloud infrastructure, we partner with reputable technology providers who process data strictly under our direction and stringent confidentiality obligations:
Supabase Inc.
Provides managed PostgreSQL cloud database, authentication (Supabase Auth), and secure private storage buckets for uploaded floor plan PDFs and images.
Vercel Inc.
Provides edge serverless hosting, HTTPS SSL encryption, DDoS mitigation, and privacy-friendly aggregated web analytics.
WhatsApp / Meta
Direct click-to-chat communication channel when you choose to initiate messaging with our studio team.
Hardware & Logistics Partners
Delivery addresses and recipient names are shared strictly on a need-to-know basis with certified hardware suppliers (Hettich, Hafele) to fulfill material deliveries to your site.
9. Data Storage, Security & Encryption
We implement robust technical and organizational security measures to protect your personal information against unauthorized disclosure, interception, or loss:
- End-to-End Encryption in Transit: All website traffic, API calls, and form submissions are secured using modern Transport Layer Security (TLS 1.3 / HTTPS) encryption.
- Row-Level Security (RLS): Our database employs granular Row-Level Security in PostgreSQL, ensuring that leads and sensitive records can only be accessed through authenticated, authorized server RPC routines.
- Secure File Storage: Uploaded floor plans are stored in dedicated storage buckets with restricted access URLs.
- Rate Limiting & DDoS Mitigation: Our backend incorporates rate-limiting mechanisms (
bump_rate_limit) to defend against brute-force credential guessing and automated denial-of-service attempts. - Strict Access Controls: Studio administrative access requires multi-factor authentication and role-based permissions granted strictly to authorized staff.
10. Data Retention Schedules
We retain personal information only for as long as necessary to fulfill its purpose:
| Data Category | Standard Retention Period | Retention Rationale |
|---|---|---|
| General Web Inquiries & Leads | 24 Months | To accommodate prolonged home possession and planning cycles. |
| Executed Client Project Records | 10+ Years | Mandatory to service and honor our 10+ year modular woodwork warranty. |
| Financial, Invoicing & GST Records | 8 Years | Statutory tax compliance under Indian GST and Income Tax Acts. |
| Aggregated Site Telemetry | Permanent (Anonymized) | Anonymized daily page view statistics for long-term capacity planning. |
12. Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have well-defined legal rights regarding your personal information:
Right to Access & Summary
Request a summary of what personal information we hold, how it is being processed, and which third parties have received it.
Right to Correction & Updating
Request correction of inaccurate contact details, revised site addresses, or updated architectural specifications.
Right to Erasure ("Right to be Forgotten")
Request the deletion of your personal data, subject only to statutory tax retention and active warranty record obligations.
Right to Withdraw Consent
Revoke your consent for consultations or promotional communications at any time with immediate prospective effect.
Right to Nominate
Nominate any individual who, in the event of death or incapacity, shall exercise your data rights on your behalf.
Right to Grievance Redressal
Lodge a formal grievance directly with our designated Grievance Officer and receive a response within statutory time limits.
To exercise any of these rights, email your request to nakshtrainteriors96@gmail.com with the subject line "Data Subject Request". We will verify your identity and fulfill your request free of charge within 30 days.
13. Children's Privacy
Our services, digital showroom, and consultations are exclusively intended for adult homeowners, property owners, and commercial decision-makers. We do not knowingly collect personal data from children under 18 years of age. If you believe a minor has submitted personal data through our website, please notify us immediately, and we will promptly purge the record from our databases.
14. Grievance Redressal Officer
In compliance with the Information Technology Act, 2000 and Rule 5(9) of the SPDI Rules, 2011, as well as the DPDP Act, 2023, Nakshtra Interior has designated an official Grievance Redressal Officer:
Grievance Officer, Nakshtra Interior
Balaji Crystal, Dalavi Nagar, Dalvinagar, Ambegaon Budruk, Pune, Maharashtra 411046
Monday to Saturday · 10:00 AM – 7:00 PM IST
15. Updates to this Privacy Policy
We may periodically update this Privacy Policy to reflect modifications in our digital services, operational practices, or prevailing statutory regulations. The revised version will be indicated by an updated "Effective Date" at the top of this page.
We encourage you to review this policy periodically. Your continued use of our website and services following the posting of modifications constitutes your acceptance of the updated terms.