Privacy

Homecraft Interiors & Construction, a multi-disciplinary interiors and construction firm working across Karnataka, in Dakshina Kannada, Puttur, Mangalore, Madikeri, Chikmagalur, Mysore, Bangalore. We decide what happens to the details you give us through this site, which makes us responsible for them.

Registered name and address

Homecraft Interiors & Construction
802, 2nd Floor, Skyline Building, Blueberry Hills, Yeyyadi, Mangalore, Karnataka 575008

Who to contact about your data

We are a small firm and do not employ a separate data officer. Questions, corrections and complaints about your details go to the partner responsible for enquiries, reachable at projects@homecraftx.com or +91 94805 23425. Mark it “data request” and it will be handled rather than filed with the enquiries.

The enquiry form on the contact page is the main place this site asks you for anything. Four fields are needed to answer you at all; two are yours to skip.

Name

To know who to ask for when we call.

Mobile number

To call or message you back about your enquiry.

Email address, optional

To reply in writing and send updates about your project.

Town or city

To know where the property is and whether we cover it.

What you need

To route the enquiry to the right part of the firm.

Your message, optional

Whatever you choose to tell us about the work.

The testimonials page has a second form, for clients who want to say how the work went. It is separate from an enquiry: nobody calls you about it, and it is not added to the enquiry list.

Your review

The words themselves, as you wrote them.

Your name

So a reader knows who said it. Shown if you allow us to publish.

Town or city

So a reader knows the work was near them.

What we did for you

So a reader knows which kind of job it describes.

A photograph, if you attach one

So a reader can see the work. Optional, and shown only if we publish the review.

Your permission to publish it

Recorded because we will not put your words on the site without it.

A photograph you attach is re-saved by us before it is stored, which removes the information a camera writes inside the file: the GPS coordinates where it was taken, the device, and the date. We keep the picture, not the record of where you were standing.

A review is never published automatically. It arrives hidden, we read it, and it goes on the site only if we choose to publish it and you gave permission on the form. You can withdraw that at any time using the contact details above and we will take it down. Reviews are kept until you ask us to remove them, or until we take them off the site, rather than for the six months that applies to enquiries: a published review is meant to stay up.

Once an enquiry arrives, we keep a record of how we have handled it. You did not type these, so they are worth stating plainly:

The date and time you got in touch

So we know how long you have been waiting.

A status: new, contacted, visit booked, or closed

So two people do not call you about the same thing.

A copy of any email we send you, including its full text

So anyone picking up your project can see what has already been said.

A log of messages sent, with the address, subject and whether it arrived

So we can tell a message that failed from one you simply have not answered.

Your enquiry is also written to a second copy on the website server, as a safeguard against losing it if the main store is unreachable. It holds the same details and nothing more.

We use an outside service to see how this site is used: Google Analytics, which counts visits and which pages get read.

Nothing loads until you say yes. Until you answer, and forever after if you decline, no script from any of them is placed on the page and no such company receives anything about you at all. Declining costs you nothing: every part of this site works the same either way, and we do not ask twice.

If you do agree, they set their own cookies and see your IP address, your approximate location from it, your device and browser, the pages you open and what you click. We never send them your name, your number or your email.

They process this outside India, under their own terms rather than ours: Google for up to fourteen months.

What we still do not do: no advertising cookies, no pixels for ad networks, no profiling, and nothing that follows you to other websites.

One cookie is ours: a sign-in cookie for our private admin area, set only when a member of our staff signs in, holding no information about visitors and expiring after eight hours. Your answer to the question above is not a cookie at all. It is kept in your own browser and never sent to us.

Our host keeps ordinary server logs, which usually include IP addresses, for security and to keep the site running. We do not use them to identify you. When a member of staff signs in to the admin, their IP address is held briefly in memory to slow down repeated wrong passwords, and is never written to disk.

You asked us to contact you, and we hold what you sent so we can do that. In the language regulators use, our basis is your request and the steps taken at your request before any contract, together with our legitimate interest in keeping an accurate record of our own dealings with a prospective client.

We do not sell your details, rent them, or pass them to anyone for marketing. We do not use them to advertise to you anywhere.

We are not a Significant Data Fiduciary under the DPDP Act: we hold a small number of enquiries, no sensitive categories, and nothing about children. That is why the contact above is a person at the firm rather than an appointed Data Protection Officer.

Running the site means a small number of suppliers necessarily handle your details on our behalf. They act on our instructions and may not use your details for their own purposes.

Sanity

Stores enquiries, the message log, testimonials and the site's content. Servers operated by Sanity.io, outside India.

Google (Gmail)

Delivers the alert to us and any update we send you. Google's mail infrastructure, outside India.

Vercel

Hosts the site and runs the code that processes the form. Keeps short-lived server logs, which ordinarily include IP addresses. Vercel's edge network, which routes to servers outside India.

Google Analytics

Counts visits and pages read. Only if you agreed to measurement. Google's servers, outside India. Retained up to fourteen months.

Every one of them stores or routes data on servers outside India, so your details leave the country. We transfer them under each supplier's standard data processing terms, which bind them to process only on our instructions and to keep the data secure. India does not currently restrict transfers to these countries. We do not send your details anywhere else.

Enquiries and the message log are kept for six months from the date you got in touch, after which they are deleted. If we are working together by then, the project paperwork is separate and outlives this: what is described here is the enquiry, not the contract.

You can ask us to delete yours sooner, at any point, and we will do it without asking why.

The site is served over an encrypted connection. The admin area is reachable only with a password, which is never stored: we keep only a one-way scrambled version of it, and the sign-in cookie cannot be read by scripts in your browser. Access is limited to the people at Homecraft who need it.

No system is completely secure, and we will not pretend otherwise. If something goes wrong that affects you, we will tell you.

If we publish something you said about our work, along with your name, town and sometimes a photograph, we ask you first. Nothing goes on the site until you have agreed, and asking us to take it down later is enough to have it removed.

This site is meant for people commissioning building and interior work, and is not directed at children. We do not knowingly collect anything from a child. If you believe a child has sent us details, tell us and we will delete them.

Write to projects@homecraftx.com and you can ask us to:

• Give you a copy of everything we hold about you.
• Correct anything we have recorded wrongly.
• Delete what we hold, including the message log.
• Stop using your details while a complaint is being sorted out.
• Explain who we have shared them with.

We will acknowledge within 7 days and complete the request within 30 days. You do not need to give a reason, and asking costs nothing.

If you are unhappy with how we have handled it, you can complain to the Data Protection Board of India, or to the supervisory authority where you live if that is elsewhere.

If we change how this site handles your details, we will change this page and move the date at the top. Where a change matters to people who have already enquired, we will tell them directly rather than expecting them to notice.

Pages elsewhere on the internet that we link to have their own privacy practices, and we are not responsible for them.