Privacy Policy

This Privacy Policy explains how DECFORT, a Unit of ARN GROUP, collects, uses, stores, shares and protects personal data when you visit decfort.com, submit an enquiry, request a quotation or consultation, communicate with us, visit our office, engage us for interior design or renovation services, or otherwise interact with us. It also explains the choices and rights available to you.

DECFORT is a Unit of ARN GROUP and provides interior design, renovation, project execution and related services. In this Policy, “DECFORT”, “we”, “us” and “our” refer to DECFORT, a Unit of ARN GROUP, which operates this website and determines how personal data collected through the website and our services is used.

By providing personal data to us, you acknowledge that you have read this Policy. Where consent is required by law, we will ask for it separately and give you a reasonable way to withdraw it.

1. Scope

This Policy applies to personal data collected through:

• decfort.com and its forms, landing pages, blogs, galleries and other website features;
• telephone calls, SMS, email, WhatsApp and social media pages or messages;
• consultations, office visits, site visits, surveys, measurements, quotations, design discussions, agreements, project execution and after-sales support;
• events, referrals, advertisements and lead-generation campaigns; and
• vendors, contractors, designers, workers, job applicants and other business contacts, where relevant.

This Policy does not govern third-party websites, applications or platforms that have their own privacy policies, even if they are linked to or embedded in our website.

2. Personal Data We Collect

2.1 Contact and enquiry data

When you request a consultation, quotation, call-back or other information, we may collect your name, mobile number, email address, preferred contact method, city or locality, property type, BHK or property configuration, expected possession date, project timeline, budget range and the services you are interested in.

2.2 Property and project data

To understand, design and execute a project, we may collect the project address, access details, floor plans, measurements, photographs, videos, drawings, design preferences, material selections, family or occupancy requirements, site conditions, snag lists, schedules, approvals and other information you choose to share. Project files may incidentally contain personal items, people or location information. Please avoid sharing information that is not needed for the project.

2.3 Transaction and service data

If you become a customer, we may collect quotations, invoices, payment status, transaction references, contracts, change requests, warranty or service records, complaints, feedback and correspondence. Payments may be processed by banks, payment gateways or other providers. We do not ask for or intentionally store your card PIN, CVV, UPI PIN, internet-banking password or one-time password.

2.4 Communication data

We may retain emails, WhatsApp messages, SMS, social media messages, call notes, meeting notes and customer-support records. If a call is recorded, we will provide notice where required by law.

2.5 Website and device data

When you use the website, our systems and approved service providers may automatically receive your IP address, browser type, device type, operating system, language, approximate location derived from IP address, referring page, pages viewed, links clicked, date and time of access, session identifiers and cookie or advertising identifiers. We use this information for website operation, analytics, security and, where permitted, advertising measurement.

2.6 Content submitted or published

If the website allows comments, reviews, testimonials, image uploads or other submissions, we may collect the submitted content and associated account, contact, IP and browser information. Content you choose to publish may be visible to other users and may be copied outside our control.

2.7 Vendor applicant and business contact data

For vendors, contractors, designers, workers, job applicants and other business contacts, we may collect identity and contact details, work history, qualifications, portfolio, references, tax or banking details, agreements, attendance or performance information and other data needed to evaluate or manage the relationship.

2.8 Sensitive information

We do not seek sensitive information through ordinary website enquiry forms. Please do not submit passwords, card credentials, health information, biometric information, government identification numbers or other sensitive information unless we specifically request it for a lawful and necessary purpose and provide appropriate notice.

3. How We Collect Personal Data

We may collect personal data:

• directly from you when you complete a form, call, message, email, visit our office, attend a consultation, sign an agreement or work with us on a project;
• from a family member, co-owner, architect, developer, broker, referral partner or another person who represents that they are authorised to share it;
• from our website, cookies, analytics tools, advertising platforms and communication systems;
• from publicly available sources, including public social media profiles or property and business information; and
• from service providers or campaign partners that collected your data lawfully and are permitted to share it with us.

If you provide personal data about another person, you must have authority to do so and must inform that person about this Policy where required.

4. Purposes of Processing

We may process personal data to:

• respond to enquiries and arrange calls, consultations, office meetings, site visits or measurements;
• understand your requirements and prepare concepts, estimates, quotations, designs, schedules and proposals;
• enter into and perform contracts, manage approvals and changes, procure materials, coordinate contractors and execute projects;
• communicate project status, payment milestones, service updates, warranties and after-sales support;
• process invoices and payments, maintain accounts and comply with tax, audit and record-keeping obligations;
• provide customer support, handle complaints, resolve disputes and establish, exercise or defend legal claims;
• operate, maintain, troubleshoot, secure and improve our website, systems, services and customer experience;
• measure campaign performance, understand website use and prevent spam, fraud, misuse and security incidents;
• send offers, project ideas, design updates or other marketing communications where you have consented or where otherwise permitted by law;
• evaluate vendors, contractors, applicants and other business relationships; and
• comply with applicable law, lawful requests, court orders and directions from competent authorities.

5. Consent and Other Permitted Uses

We process personal data only for lawful purposes. Depending on the circumstances and applicable law, processing may be based on your consent, your voluntary provision of data for a specified service or request, performance of a contract, compliance with law, protection of legal rights, or another legitimate use permitted by law.

You may decline to provide optional information. If information is necessary to respond to an enquiry, prepare an accurate quotation, verify site conditions, execute a project, process payment or comply with law, we may be unable to provide the relevant service without it.

6. Calls, Messages and Marketing

If you submit an enquiry or request a call-back, you authorise us to contact you about that request through the telephone number, email address or messaging channel you provided. We may also send marketing communications if you have consented or if applicable law otherwise permits.

You can stop promotional messages by using an unsubscribe option, replying “STOP” where supported, or contacting us at info@decfort.com. We may retain a limited suppression record so that we can respect your opt-out. Opting out of marketing does not stop necessary project, payment, safety, warranty or customer-service communications.

7. Cookies, Analytics and Embedded Content

Cookies and similar technologies are small files or identifiers used to operate websites, remember choices, measure use and support advertising. Our website may use the following categories:

• Strictly necessary technologies that support security, forms, sessions and basic website functions;
• Preference technologies that remember language, display or form choices;
• Analytics technologies that help us understand visits, traffic sources and website performance; and
• Advertising technologies that measure campaigns, limit repetition and support relevant advertising where permitted.

The website currently uses Google Tag Manager to manage approved website tags. Depending on our active configuration, those tags may include analytics or advertising services. Pages may also contain embedded videos, maps, social media posts or links from providers such as YouTube, Google, Facebook or Instagram. Those providers may receive device, cookie and interaction data under their own privacy policies.

Where required, we will seek consent before placing or activating non-essential cookies. You can use any cookie settings made available on the website and can also block or delete cookies through your browser. Blocking some technologies may affect website functionality.

8. Project Photographs, Videos, Testimonials and Portfolio Use

We may take project photographs, videos or progress records for measurement, supervision, quality control, documentation, warranty and dispute-resolution purposes. We may use identifiable customer names, testimonials, voice recordings, images, videos or recognisable residential interiors for public marketing only when we have appropriate consent or other lawful authorisation.

Where practical, we remove or obscure personal documents, number plates, family photographs, precise addresses and other unnecessary identifiers before publishing project content. You may withdraw marketing consent by contacting us. Withdrawal will not affect use that occurred lawfully before withdrawal, and removal from third-party reposts or printed material may not always be immediately possible.

9. Sharing of Personal Data

We may share personal data only to the extent reasonably necessary with:

• authorised employees and team members of DECFORT and ARN GROUP;
• interior designers, architects, site supervisors, contractors, carpenters, electricians, plumbers, painters, installers, fabricators and other project professionals;
• material suppliers, manufacturers, logistics providers, surveyors, service technicians and warranty partners;
• website hosts, cloud-storage providers, customer-management systems, email, telephony, messaging, analytics, advertising, cybersecurity and IT-support providers;
• banks, payment providers, accountants, auditors, insurers, legal advisers and other professional advisers;
• developers, property managers, residents’ associations or security teams when site access or project coordination requires it;
• government authorities, regulators, courts, law-enforcement agencies or other persons when disclosure is required or permitted by law; and
• a buyer, investor, successor or adviser in connection with a proposed or completed merger, restructuring, sale or transfer of all or part of our business, subject to suitable confidentiality arrangements.

We require service providers and project partners to use personal data only for authorised purposes and to protect it appropriately. We do not sell or rent personal data for money. We may share aggregated or de-identified information that does not reasonably identify an individual.

10. International Processing

Some technology, communication, analytics, cloud or support providers may process or store personal data outside India. When this occurs, we will take reasonable steps to use providers that protect the data and will comply with any transfer restrictions or safeguards required under applicable Indian law.

11. Data Retention

We retain personal data only for as long as needed for the purposes described in this Policy, including service delivery, warranties, accounting, tax, audit, security, dispute resolution and legal compliance. Our general retention approach is set out below. Actual periods may be shorter or longer when justified by the circumstances or required by law.

Record category	General retention approach
Enquiries and leads	Normally up to 24 months after the last meaningful interaction if no project begins, unless you ask us to delete the data or a longer period is justified.
Customer and project records	For the relationship and normally up to 8 years after project closure, or longer where tax, warranty, contractual, audit or legal requirements apply.
Design and site files	For the project, warranty and reasonable reference period. Identifiable marketing copies are retained only while consent or another lawful authorisation remains valid.
Marketing records	Until you opt out, the purpose ends or consent is withdrawn. A minimal suppression record may be retained to honour your choice.
Applicant and vendor records	Normally up to 12 months for unsuccessful applicants and for the business relationship plus the required legal and accounting period for vendors.
Security and system logs	For the security period required by applicable law and operational need. Relevant ICT logs may be retained for at least 180 days where required.
Cookies and analytics	For the duration stated in the relevant cookie settings or provider configuration, subject to your choices and applicable law.

When a retention period ends, we delete, anonymise or securely isolate the data unless continued retention is required or permitted by law. Backup copies may remain for a limited period until they are overwritten or securely deleted.

12. Security

We use reasonable administrative, technical and physical safeguards appropriate to the nature of the data and the risks involved. These may include access controls, password and account management, device and malware protection, secure backups, restricted sharing, confidentiality obligations, vendor safeguards, staff awareness, logging and incident-response procedures.

No website, transmission or storage system is completely secure. You should use trusted devices and networks, protect your accounts and never send passwords, PINs or one-time passwords to us. If you believe your interaction with us is no longer secure, contact us promptly.

13. Personal Data Breaches

If we become aware of a personal data breach, we will assess it, take reasonable containment and remediation steps, preserve relevant records and notify affected individuals, the Data Protection Board of India, CERT-In or other authorities when and within the time required by applicable law.

14. Your Rights and Choices

Subject to applicable law, you may request to:

• obtain information about the personal data we process and the manner in which it is used or shared;
• access a summary or copy of personal data that you have provided, where applicable;
• correct inaccurate data and complete or update incomplete data;
• erase personal data that is no longer necessary or that must be erased after valid withdrawal of consent;
• withdraw consent for future processing where processing depends on consent;
• opt out of promotional communications;
• raise a grievance about our handling of personal data; and
• nominate another individual to exercise rights in the event of death or incapacity, where this right applies.

To protect your privacy, we may verify your identity and authority before acting on a request. Rights are not absolute. We may retain or continue processing data where needed to provide a requested service, comply with law, maintain security, prevent fraud, protect another person’s rights, or establish, exercise or defend legal claims. We will respond within the period required by applicable law.

15. Children

Our website and services are intended for adults arranging property or interior services and are not directed to children under 18. We do not knowingly ask children to submit enquiries or provide personal data. If a project requires information about a child’s room or needs, an adult should provide only what is necessary. Where applicable law requires verifiable parental consent, we will seek it before processing a child’s personal data.

If you believe that a child has provided personal data to us without appropriate authorisation, contact us so that we can review and delete or otherwise address it.

16. Third Party Services and Links

Our website may contain links to or embedded content from third parties, including map, video, social media, messaging, review and payment services. Those parties may collect data directly from your device and apply their own privacy policies. We do not control their privacy practices and encourage you to review their notices before using their services.

17. Changes to This Policy

We may update this Policy to reflect changes in our services, technology, vendors, legal requirements or data practices. We will post the updated version on this page and revise the “Last updated” date. If a change materially affects how we use personal data, we will provide additional notice or obtain consent where required.

18. Privacy and Grievance Contact

For access, correction, deletion, consent withdrawal, marketing opt-out, privacy questions or complaints, contact:

19. Applicable Law

This Policy is intended to support compliance with applicable Indian privacy, data-protection and cybersecurity law, including the Information Technology Act 2000 and applicable rules, the Digital Personal Data Protection Act 2023 and Digital Personal Data Protection Rules 2025 as their provisions become applicable, and lawful directions issued by competent authorities. If a provision of this Policy conflicts with mandatory law, the mandatory law will prevail.

This Policy describes privacy practices and does not replace the commercial terms, scope, warranties, payment terms or other provisions of a quotation, work order or service agreement.