Privacy Policy

1. Our Commitment to Your Privacy

Welcome to George Kaitharan Buildware. In this policy, “George Kaitharan Buildware” (also “we,” “us,” or “our”) is the Data Fiduciary, meaning we determine the purpose and means of processing your personal data. You, our valued customer and visitor, are the Data Principal.

This Privacy Policy outlines our commitment to protecting your privacy and explains how we collect, use, process, and protect your personal data in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDPA). This policy applies to your interactions with our website, our showrooms in Kerala, and any of our other services.

2. The Personal Data We Collect

We collect personal data that is necessary for the specific purposes outlined in this policy.

• Information You Provide: This includes personal data you give us when you request a quote, place an order, or fill out a form, such as your name, email address, phone number, delivery address, and GSTIN for business transactions.
• Information We Collect Automatically: When you use our website, we may collect technical data like your IP address, browser type, and usage patterns. This is done through tools like cookies to improve our website’s functionality and your experience.
• Communications: We maintain a record of our communications with you to ensure we can provide consistent and effective customer service.

3. Purpose and Lawful Basis for Processing Your Data

We process your personal data based on the following lawful grounds as recognized under the DPDPA:

a) Your Consent:

For certain activities, such as sending you marketing promotions or newsletters, we will process your data only after receiving your free, specific, informed, and unambiguous consent. You have the right to withdraw this consent at any time.

b) For Legitimate Uses:

We may process your personal data for other legitimate purposes, including:

• Fulfilling Our Contract with You: To process your orders, provide quotes, arrange for delivery, and manage your account.
• Responding to Your Enquiries: To provide you with information and customer support you have voluntarily requested.
• Compliance with Law: To comply with any legal obligation, such as for taxation purposes or in response to a lawful request by a government authority.
• Improving Our Services: To analyze how our services are used, allowing us to enhance our website, product selection, and customer service.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with trusted third parties known as Data Processors, who process data on our behalf. This is done only under our instruction and for specific purposes.

• Delivery Partners: We share your name, address, and phone number with our logistics partners to deliver your orders.
• Technology Service Providers: We work with companies that provide services like website hosting and analytics (e.g., Google Analytics).
• Legal Authorities: We may be required to disclose your data to law enforcement or other government bodies as required by Indian law.

These Data Processors are contractually obligated to protect your data and are not permitted to use it for their own purposes.

5. Data Retention Period

We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected. After the purpose is served, we will erase your personal data, unless we are required to retain it for a longer period to comply with legal obligations (e.g., tax or commercial laws).

6. Your Rights as a Data Principal

Under the DPDPA, you have the following rights over your personal data:

• Right to Access: You have the right to request a summary of the personal data we process and the details of that processing.
• Right to Correction and Erasure: You have the right to request the correction of inaccurate or misleading data, the completion of incomplete data, and the erasure of data that is no longer needed for its original purpose.
• Right to Grievance Redressal: You have the right to a readily available means of grievance redressal. Please see Section 9 for details on how to contact our Grievance Officer.
• Right to Nominate: You have the right to nominate another individual who can exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please contact our Grievance Officer.

7. Data Security and Breach Notification

We have implemented appropriate technical and organizational security measures, including website SSL encryption, to protect your personal data from unauthorized access, alteration, or disclosure.

In the unfortunate event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by law.

8. Processing of Children’s Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect or process personal data from children without obtaining verifiable parental consent, as required by the DPDPA. If you believe we have inadvertently collected such information, please contact us immediately so we can take appropriate action.

9. Grievance Redressal

For any questions, concerns, or to exercise your rights under this policy, please contact our dedicated Grievance Officer:

We are committed to resolving your concerns in a timely and efficient manner.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. The updated policy will be posted on our website with a new effective date.