Skip to content
Sunlit contemporary villa living room opening to a planted courtyardVelan Spaces · Hyderabad

Privacy policy

Draft — to be reviewed by the studio’s legal adviser before launch.

Last updated: [Date]

This policy explains how [Registered business name], trading as Velan Spaces (“we”, “us”, “our”), collects and uses your personal data when you visit our website or ask us about a project. We process personal data in line with the Digital Personal Data Protection Act, 2023 and the rules made under it, and we are the Data Fiduciary for the data described here. Our address is [Address], and you can write to us at [Email].

What we collect

Information you give us. When you fill in our consultation form, or contact us by email, phone or WhatsApp, we may collect:

  • your name, phone number, email address and city or country
  • property details, such as type, location, size, status and move-in timeline
  • the scope of work you want, a budget range and your preferred consultation format
  • floor plans, photographs or other files you upload
  • anything else you choose to share, including how you heard about us

Information collected automatically. When you visit our website, we and our service providers may collect:

  • device and browser information, and your approximate location from your IP address
  • pages you visit, time spent on them and how you arrived at the site, through cookies described below

Please do not share financial account details, government ID numbers or health information through the website.

Why we use your data

We use your personal data to:

  • respond to your enquiry, arrange a consultation and prepare proposals you ask for
  • keep in touch about an enquiry or project you have started with us
  • understand how visitors use our website so we can improve it
  • measure the performance of our advertising, where you have agreed to this
  • meet our legal, tax and accounting obligations

We do not sell your personal data.

We process data given through our consultation form on the basis of the consent you give, with a clear notice, when you submit it.

We set analytics and advertising cookies only with your consent, which you can give or refuse through the cookie banner on our website.

Some processing is needed to comply with the law, for example keeping records required for tax purposes, or is a legitimate use permitted under the Act.

You may withdraw your consent at any time by writing to [Email]. Withdrawing consent does not affect processing that took place before you withdrew it. If you withdraw consent, we may no longer be able to respond to your enquiry or continue discussions about a project.

How long we keep your data

We keep personal data only as long as we need it for the purpose it was collected, or as required by law.

  • Enquiries that do not become projects: up to [24 months] from our last contact with you, after which we delete them.
  • Client project records: for the duration of the project and afterwards for as long as required for warranty, tax and legal purposes.
  • Analytics data: according to the retention settings of our analytics provider, which we set to [14 months].

When we no longer need your data, we delete it or make it anonymous.

Who we share it with

We share personal data only with service providers who help us run our website and our business, and only as much as they need. These include:

  • Email and communication providers, who deliver form submissions and emails to us
  • Hosting providers, including Vercel, which hosts our website
  • Analytics providers, including Google Analytics, which helps us understand website use
  • Advertising platforms, including Google Ads and Meta, which help us measure and improve our advertising, where you have consented to advertising cookies

These providers must protect your data and use it only on our instructions. Some may process data outside India, where the Act permits it.

We may also share personal data where required by law or to protect our legal rights. If you become a client, we share relevant project details with the contractors and suppliers working on your project.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access a summary of the personal data we hold about you and how we use it
  • Correct personal data that is inaccurate or incomplete, and update it
  • Erase personal data we no longer need, subject to our legal obligations
  • Withdraw consent at any time
  • Nominate another person to exercise your rights in the event of your death or incapacity
  • Grievance redressal, by raising a complaint with our grievance officer

To exercise these rights, write to [Email]. We may need to verify your identity, and will respond within the time the law requires.

Grievance officer

If you have a concern about how we handle your personal data, please contact our grievance officer:

[Grievance officer name, email] [Address]

We will acknowledge your complaint and respond as quickly as we can, and within the period prescribed under the Act. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Cookies

Cookies are small files stored on your device when you visit a website. We use:

  • Essential cookies, which the website needs to work, such as remembering your cookie choices
  • Analytics cookies from Google Analytics, which show us how visitors use the site
  • Advertising cookies and pixels from Google Ads and Meta, which measure whether our advertising leads to enquiries and may be used to show you our advertising elsewhere

Analytics and advertising cookies are set only if you accept them through our cookie banner. You can change your choice at any time through the cookie settings link in the footer, or block cookies in your browser.

Children

Our website and services are intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has shared personal data with us, please contact us at [Email] and we will delete it.

Security

We take reasonable technical and organisational measures, such as access controls and encrypted connections, to protect personal data against loss, misuse and unauthorised access. If a breach occurs, we will notify you and the authorities as the law requires.

Changes to this policy

We may update this policy when our practices or the law change. The updated policy will appear on this page with a new date, and we will tell you about significant changes by email or a notice on the website.

Contact us

[Registered business name] [Address] Email: [Email]