Privacy Policy

1Who We Are

Furniture Indian & Craft Private Limited (“Furniture Indian”, “we”, “us”, “our”) is a company incorporated under the Companies Act 2013, specialising in handcrafted Indian wooden furniture and interior décor. Our registered office:

Furniture Indian is the data controller for personal data collected via our website and B2B trade channels. We are responsible for deciding how and why personal data is processed.

2Data We Collect

We do not collect or store full payment card numbers. Payment processing is handled by PCI-DSS-compliant gateways (Razorpay, Stripe, PayPal). We receive only a masked card reference and transaction confirmation.

3How We Use Your Data

• Order fulfilment: Processing, packing, shipping, and tracking furniture orders; issuing GST invoices and export documentation (including for large consignments).
• Custom furniture requests: Managing bespoke design briefs, wood-selection consultations, production timelines, and client approvals.
• Account management: Creating and maintaining your customer or wholesale account, authenticating logins, and managing preferences.
• Customer support: Responding to queries, complaints, delivery issues, and warranty or repair requests.
• Marketing & communications: Sending order confirmations, dispatch alerts, and — with your consent — catalogues, new collection launches, and interior-décor inspiration newsletters.
• B2B & interior-designer trade: KYB (Know Your Business) checks, credit assessment, issuing commercial invoices, and facilitating bulk export/import documentation.
• Analytics & product improvement: Understanding how visitors browse our collections so we can improve our range and online experience.
• Legal compliance: Meeting obligations under GST law, customs regulations, anti-money laundering rules, and other applicable legislation.
• Fraud prevention & security: Detecting and preventing fraudulent transactions or unauthorised account access.

4Legal Basis for Processing (GDPR)

For customers in the EEA, United Kingdom, and jurisdictions with equivalent data-protection laws, we rely on the following legal bases:

5Data Sharing

We do not sell your personal data. We share it only with the following categories of recipients, strictly on a need-to-know basis:

• Logistics & freight partners (e.g., Blue Dart, DHL, Gati, Mahindra Logistics, India Post) — to deliver your furniture safely.
• Payment processors (Razorpay, Stripe, PayPal) — to process payments securely.
• Cloud & hosting providers — to operate our website and store data securely.
• Email & CRM service providers — to send transactional and marketing communications.
• Analytics tools — aggregated, anonymised data to measure website and catalogue performance.
• Legal & regulatory authorities — when required by law, court order, or customs regulation (e.g., DGFT, Customs, GST authorities).
• Professional advisors — lawyers, auditors, and insurers under confidentiality obligations.
• Business transfers — if Furniture Indian is acquired or merges, your data may transfer as a business asset; you will be notified in advance.

All third-party processors are bound by data processing agreements that prohibit them from using your data for any purpose other than providing services to us.

6International Data Transfers

As an international furniture exporter, your data may be processed in countries outside India, including the EEA, USA, UAE, and Singapore. Where we transfer personal data outside India or the EEA, we ensure adequate protections through one or more of the following:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions recognised by the relevant supervisory authority.
• Binding Corporate Rules or equivalent approved frameworks.
• The data-transfer provisions of India’s DPDP Act 2023 (see §12).

7Data Retention

We retain personal data for as long as necessary for the purposes set out in this policy, subject to legal minimums:

8Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

To exercise any right, contact our Data Protection Officer (see §14). We will respond within 30 days (extendable to 90 days for complex requests, with notice).

9Cookies & Tracking

We use the following categories of cookies:

• Essential cookies: Required for login sessions, shopping cart, wishlist, and site security. Cannot be disabled.
• Analytics cookies: Help us understand how visitors browse our furniture collections (e.g., Google Analytics with IP anonymisation). Require your consent.
• Marketing cookies: Used to show relevant furniture and décor advertisements across platforms. Require your consent.
• Preference cookies: Remember your language, currency, room-style filters, and display preferences.

You can manage your cookie preferences via the cookie banner on your first visit, or at any time through your browser settings. Note that disabling essential cookies may affect site functionality.

10Security

We implement industry-standard technical and organisational measures to protect your personal data, including:

• TLS/SSL encryption for all data in transit.
• At-rest encryption for sensitive stored data.
• Hashed and salted passwords (bcrypt).
• Role-based access controls — only authorised staff access personal data.
• Regular security audits and vulnerability assessments.
• Incident response and breach notification procedures (we will notify affected individuals within 72 hours of becoming aware of a reportable breach).

11Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly. Parents or guardians who believe a child has submitted personal data to us should contact us at support@furnitureindian.com.

12India — Digital Personal Data Protection Act 2023

As an Indian data fiduciary, Furniture Indian & Craft complies with the Digital Personal Data Protection (DPDP) Act 2023 and applicable rules. Indian residents (“data principals”) have the following rights under the Act:

• Right to access information about personal data processed and the entities with whom it has been shared.
• Right to correction and erasure of inaccurate or outdated personal data.
• Right to grievance redressal — you may raise a complaint with us within the timelines set by applicable rules.
• Right to nominate another individual to exercise your rights in the event of your death or incapacity.

We process personal data of Indian residents on the basis of consent or for legitimate uses as defined under the DPDP Act. Cross-border transfer of Indian personal data is conducted only to countries notified as permitted under the Act.

To exercise your rights under the DPDP Act, contact our Grievance Officer (see §14).

13Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Notify registered customers by email for significant changes.
• Display a prominent notice on our homepage for 30 days following the update.

Continued use of our website or services after the effective date constitutes acceptance of the revised policy.

14Contact & Data Protection Officer

For privacy-related queries, data-subject requests, or complaints:

If you are an EEA resident and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, CNIL in France, BfDI in Germany).