Privacy Policy

Personal information we collect

Information you provide to us

The only place on the Service where we ask you for personal information is our enquiry form. Through it we collect:

• Contact data: your name, work email address, company and role.
• Demographic data: your country.
• Communications data: what you need from us and any optional message you write. We also keep the replies we exchange with you.

When you submit the form we also record the page you submitted it from and the time of submission. Please do not put sensitive information in your message.

Automatic data collection

Our hosting and security provider, Cloudflare, processes technical data when you visit the Service, including your IP address and request logs. We use this data to deliver the Service and to keep it secure.

The enquiry form also contains a hidden field and measures how long the form takes to complete. These are used only to filter out spam. They are not used to profile you.

Third-party sources

We may receive personal information in connection with an actual or prospective business transaction, for example from an entity we acquire or are acquired by, or from a successor or assignee.

Cookies and similar technologies

This site sets no cookies and uses no browser storage (such as local storage). It has no analytics and no advertising. Fonts are hosted by us, so your browser makes no requests to third-party font services when a page loads.

Our hosting provider may set a strictly necessary security cookie to protect the Service against bots. It is not used for tracking.

If this changes, we will update this Privacy Policy and ask for your consent where the law requires it. Most browsers let you remove or block cookies in their settings.

How we use your personal information

We use your personal information for the following purposes:

Responding to enquiries

To read and respond to your enquiry, communicate with you about it, and take steps you ask for before entering into a contract.

Security and abuse prevention

To protect the Service and our systems, and to prevent, identify, investigate and deter spam, fraudulent, harmful, unauthorised or illegal activity, including cyberattacks.

Compliance and protection

• to comply with applicable laws, lawful requests and legal process, such as requests from government authorities;
• to protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);
• to audit our internal processes for compliance with legal and contractual requirements or our internal policies.

In some cases we may use your personal information for a further purpose. If that purpose is not compatible with the one for which we collected it, we will ask for your consent first.

Retention

We generally retain personal information to fulfil the purposes for which we collected it, including to satisfy legal, accounting or reporting requirements, to establish or defend legal claims, or for fraud prevention. To decide how long to keep it, we consider the amount, nature and sensitivity of the information, the risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether we can achieve those purposes by other means, and the applicable legal requirements.

Enquiries that do not lead to business are deleted within 24 months of our last contact with you. When we no longer require personal information, we may delete it, anonymise it, or isolate it from further processing.

How we share your personal information

We may share your personal information with the following parties. We do not sell personal information.

• Service providers. Google LLC, which provides Google Workspace: enquiries are stored in Google Sheets and we are notified of them by Gmail. Cloudflare, Inc., which provides hosting and security for the Service. These providers act on our behalf and help us operate the Service.
• Professional advisers. Lawyers, auditors, bankers and insurers, in the course of the professional services they provide to us.
• Authorities and others. Law enforcement, government authorities and private parties, where we believe in good faith that this is necessary or appropriate for the compliance and protection purposes described above, or where the law requires it.
• Business transferees. In connection with an actual or prospective business transaction, such as an investment in or financing of APLUSB DECOR PRIVATE LIMITED, or the sale, transfer or merger of all or part of our business, assets or shares. We may disclose your personal information to an acquirer, successor or assignee, including in an insolvency or similar event. We would look to limit the amount and sensitivity of information shared in this context where possible.

Your choices

You can ask to access, correct or delete your personal information at any time by contacting us (see How to contact us below). Users in the UK, the EU and India have additional rights, described in the sections below.

We do not track you across sites. We do not respond to "Do Not Track" signals because we do not use tracking technologies.

Declining to provide information. We need some information to reply to your enquiry. If you do not give us the required fields, we will not be able to respond.

Other sites and services

The Service may contain links to websites and other online services operated by third parties. These links are not an endorsement of, or a representation that we are affiliated with, any third party. We do not control third-party services and are not responsible for their actions. We encourage you to read the privacy policies of the other services you use.

Security

We use technical, organisational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

Children

The Service is not intended for anyone under 18 years of age. If you are a parent or guardian and believe we have collected personal information from a child in a way the law does not allow, please contact us. If we learn that we have collected personal information from a child without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete it.

International data transfers

We are a company registered in India, so your personal information is processed in India. Our service providers, Google and Cloudflare, may also process it in the United States and other countries. These countries may not have data protection laws as protective as those where you live.

Where personal information is transferred from the UK or the EU, we rely on one of the following mechanisms:

• Adequacy decisions, where one is available. This includes the EU-US Data Privacy Framework and the UK Extension to it, where the recipient is certified under them.
• Standard contractual clauses: the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

You may contact us for more information on the mechanism used for a particular transfer, and you may have the right to receive a copy of the safeguards that apply.

UK and EU users

This section applies only to individuals in the United Kingdom and the European Economic Area. References to "personal information" in this Privacy Policy include "personal data" as defined in the EU GDPR and the UK GDPR (together, the "GDPR"): information about an individual from which they are, or can be, identified.

Controller

APLUSB DECOR PRIVATE LIMITED is the controller of the personal information covered by this Privacy Policy. See How to contact us below for our contact details.

Our GDPR representatives

We have appointed the following representatives as required by the GDPR. You can also contact them directly.

Our legal bases for processing

For each purpose for which we use your personal information, the GDPR requires us to have a "legal basis". Ours are:

• where we need to perform a contract we are about to enter into or have entered into with you ("Contractual Necessity");
• where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests ("Legitimate Interests"); and
• where we need to comply with a legal or regulatory obligation ("Compliance with Law").

Retention

We keep personal information for as long as necessary to fulfil the purposes for which we collected it, as set out in Retention above. When we no longer require it, we will delete or anonymise it. If that is not possible (for example, because it is held in backup archives), we will store it securely and isolate it from further processing until deletion is possible. If we anonymise your personal information so that it can no longer be associated with you, we may use it without further notice to you.

No sensitive personal information

Please do not send us sensitive personal information, such as information about racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership.

No automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

Your rights

European data protection laws give you certain rights over your personal information. You may ask us to:

• Access. Give you information about our processing of your personal information and access to it.
• Correct. Update or correct inaccuracies in your personal information.
• Delete. Delete your personal information where there is no good reason for us to keep processing it. You can also ask for this where you have objected to processing.
• Transfer. Provide a machine-readable copy of your personal information to you or a third party you choose.
• Restrict. Restrict the processing of your personal information, for example while we establish its accuracy.
• Object. Object to our processing where we rely on Legitimate Interests.

Exercising your rights

Email hello@aplusbdecor.com or write to us at the address in How to contact us. We may ask for specific information to confirm your identity and process your request. We will respond within one month. Whether we must fulfil a request depends on factors such as why and how we process your personal information. If we reject a request in whole or in part, we will tell you why at the time, subject to any legal restrictions.

Your right to complain to a supervisory authority

If you are not satisfied with our response or with how we process your personal information, you can complain to the data protection regulator where you live.

For users in the EU and EEA, you can find the contact details of your regulator at edpb.europa.eu.

For users in the UK, the regulator is:

Users in India

We process personal data under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP Act") as a Data Fiduciary. Data you give us through the enquiry form is used only for the purpose you gave it for: to respond to your enquiry.

Under the DPDP Act you have the right to:

• access information about the personal data we process and the parties we share it with;
• correction, completion and updating of your personal data;
• erasure of your personal data;
• grievance redressal; and
• nominate another person to exercise your rights if you die or become unable to do so.

Grievance Officer: Francis, hello@aplusbdecor.com. We will respond to your request or grievance within the period the DPDP Rules prescribe. If your grievance is not resolved, you may complain to the Data Protection Board of India.

Changes to this Privacy Policy

We may change this Privacy Policy at any time. If we make material changes, we will update the date at the top of this page and post the new version on the Service or by other appropriate means. Changes take effect when we post the modified version, unless we say otherwise at the time. By continuing to use the Service after a change takes effect, you accept that the modified Privacy Policy applies.

How to contact us

If you have questions about our practices, or want to exercise a privacy right that may be available to you, contact us using one of the methods below.

1. Email: hello@aplusbdecor.com
2. Post: APLUSB DECOR PRIVATE LIMITED, Hazaribagh, Jharkhand 825301, India