Privacy Policy

Orizons Architects and Builders ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit orizons.in or engage with our services. It is prepared in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian law.

By using our website or services, you acknowledge that you have read this policy. Where we rely on your consent to process data, you may withdraw it at any time without affecting the lawfulness of prior processing.

1. Who We Are (Data Fiduciary)

Under the DPDP Act 2023, Orizons Architects and Builders is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data.

2. Personal Data We Collect

We collect only what is necessary for the purpose stated at the time of collection.

2.1 Data you give us directly

• Name, email address, phone number, and location — submitted through our contact form or consultation request.
• Project details: type of project, budget range, preferred timeline, site location, and design preferences.
• Payment information when processing fees (processed through a secure third-party gateway; we do not store card details).

2.2 Data collected automatically

• IP address, browser type, device type, and operating system.
• Pages visited, time spent, and traffic source — collected via Google Analytics 4 only after you provide explicit consent through our cookie banner.

2.3 Data we do not collect

We do not collect sensitive personal data (financial account details beyond payment processing, health data, biometric data, caste, or religious belief) unless legally required and with your explicit written consent.

3. Lawful Basis for Processing

Under the DPDP Act 2023, we process your personal data only on the following lawful bases:

• Consent — when you submit a contact form, request a consultation, or accept analytics cookies. You may withdraw consent at any time.
• Contract — when processing is necessary to fulfil a service agreement or pre-contractual steps you have requested.
• Legal obligation — when processing is required to comply with applicable Indian law (e.g., GST records, RERA compliance).
• Legitimate interest — for internal business communications, fraud prevention, and site security, where such interests are not overridden by your rights.

4. How We Use Your Data

• To respond to your enquiries and provide architecture, interior design, and construction management services.
• To prepare project proposals, agreements, and invoices.
• To communicate project updates, timelines, and payment schedules.
• To send marketing communications — only if you have opted in, and you may opt out at any time.
• To analyse site usage and improve our content — only with analytics consent.
• To comply with statutory obligations under Indian law.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Sharing of Personal Data

We do not sell, rent, or trade your personal data. We share data only where necessary:

• Project partners — structural engineers, contractors, and consultants engaged for your project, bound by confidentiality obligations.
• Technology providers — cloud hosting (Vercel), database services (MongoDB Atlas), and analytics (Google Analytics 4), each acting as data processors under appropriate data processing agreements.
• Payment processors — for secure transaction handling only; they receive only what is necessary to complete the payment.
• Legal authorities — where disclosure is required by Indian law, court order, or government directive.

Any third party we share data with is required to handle it in accordance with applicable data protection law and our instructions.

6. Cookies and Analytics

We use cookies on this website. Strictly necessary cookies (which keep the site functioning) are set automatically. Analytics cookies (Google Analytics 4) are only set after you give explicit consent through our cookie banner.

You can review and change your preferences at any time using the "Cookie settings" link in the footer of every page. For a full list of cookies we use and how to manage them, see our Cookie Policy.

7. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected, or as required by law:

• Contact form enquiries — up to 3 years from last contact, or until you request deletion.
• Active project records — for the duration of the project and up to 7 years after completion (for statutory and warranty purposes).
• Financial records — 8 years as required under the Income Tax Act and GST rules.
• Analytics data — 14 months in Google Analytics, then automatically deleted.
• Cookie consent preference — 1 year from the date it was set.

When data is no longer required, it is securely deleted or anonymised.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data in transit.
• Access controls limiting data access to authorised personnel only.
• Secure cloud infrastructure with industry-standard hosting (Vercel, MongoDB Atlas).
• Regular review of access logs and security configurations.

In the event of a personal data breach that is likely to cause harm to you, we will notify you and the relevant authorities as required under the DPDP Act 2023 without undue delay.

9. Your Rights Under the DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act 2023, you have the following rights:

• Right to access — request a summary of the personal data we hold about you and how it is being used.
• Right to correction — request that inaccurate or incomplete personal data be corrected.
• Right to erasure — request deletion of your personal data where we no longer have a lawful reason to retain it.
• Right to grievance redressal — raise a complaint with us; we will acknowledge and resolve it within a reasonable period.
• Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to withdraw consent — withdraw any consent given at any time. Withdrawal does not affect the lawfulness of processing already completed.

To exercise any of these rights, contact us at connect@orizons.in. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., Google Maps, Instagram, WhatsApp). We are not responsible for the privacy practices of these external services. We recommend reviewing their privacy policies before sharing any personal information with them.

11. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it without delay.

12. Changes to This Policy

We may update this Privacy Policy when our practices change, when we introduce new services, or when the law requires it. The effective date at the top of this page will reflect the most recent revision. For material changes, we will display a notice on the website. Continued use of our services after the update constitutes acceptance of the revised policy.

13. Grievance Redressal

If you have any concerns, complaints, or queries about how we handle your personal data, please contact our Grievance Officer. We will acknowledge your grievance within 48 hours and resolve it within 30 days in accordance with the DPDP Act 2023.

If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India, once constituted under the DPDP Act 2023.

14. Applicable Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act 2023, the Information Technology Act 2000, and all rules made thereunder. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in Jaipur, Rajasthan.