Privacy Policy

Last Updated: December 2025

Jurisdiction: Hyderabad, Telangana, India | Governing Law: Digital Personal Data Protection Act, 2023 (DPDP Act)

Introduction

ZenStudios ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

As a "Data Fiduciary" under the DPDP Act, we are responsible for ensuring that your personal data is processed lawfully, fairly, and transparently.

1. Personal Data We Collect

We collect the following types of personal data ("Data Principal" information):

Identity Data

  • Full name
  • Email address
  • Phone number
  • Profile picture (if provided via Google OAuth)

Property & Project Data

  • Property addresses and details
  • Interior design preferences and room configurations
  • Budget and pricing information
  • Property photos you upload

Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Usage patterns and page visits

2. Purpose of Data Processing

We process your personal data only for specific, lawful purposes:

PurposeLegal Basis
Creating and managing your accountYour consent
Providing interior design quotesContract performance
Processing property listingsContract performance
Sending service-related communicationsLegitimate interest
Marketing communicationsYour explicit consent
Improving our servicesLegitimate interest
Legal complianceLegal obligation

3. Your Rights as a Data Principal

Under the DPDP Act 2023, you have the following rights:

Right to Access

Request a summary of your personal data and how it's being processed.

Right to Correction

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data when no longer needed.

Right to Withdraw Consent

Withdraw your consent at any time with same ease as giving it.

Right to Grievance Redressal

Lodge complaints if you believe your data rights are violated.

Right to Data Portability

Export your data in a structured, machine-readable format.

Exercise Your Rights: You can exercise these rights through yourDashboardor by contacting our Data Protection Officer at dpo@zenstudios.in

4. Data Sharing & Third Parties

We may share your personal data with:

  • Service Partners: Interior designers, property agents, and developers (only when you request their services)
  • Technology Providers: Cloud hosting (secure, encrypted), payment processors (PCI-DSS compliant)
  • Legal Authorities: When required by law or court order

We do NOT sell your personal data to third parties.

5. Data Retention

We retain your personal data only as long as necessary:

Data TypeRetention Period
Account dataUntil account deletion + 30 days
Transaction records7 years (legal requirement)
Design quotes3 years or until project completion
Marketing preferencesUntil consent withdrawn
Technical logs90 days

6. Data Security

We implement reasonable security safeguards as required by the DPDP Act:

  • Encryption in Transit: TLS 1.2+ for all data transmission
  • Encryption at Rest: PII encrypted in our databases
  • Access Controls: Role-based access, principle of least privilege
  • Authentication: Secure password hashing (bcrypt), JWT tokens
  • Monitoring: Security audit logs, intrusion detection

7. Cookies & Tracking

We use cookies with your consent for:

  • Necessary: Authentication, security, session management
  • Functional: Remembering your preferences (city, theme)
  • Analytics: Understanding usage patterns (with consent)
  • Marketing: Personalized content (with explicit consent)

You can manage your cookie preferences at any time through our cookie settings banner.

8. Data Breach Notification

In the event of a personal data breach that may cause harm to you, we will:

  • Notify the Data Protection Board of India within 72 hours
  • Inform affected Data Principals without undue delay
  • Provide details of the breach and remedial measures taken

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately, and we will delete such information.

10. Grievance Redressal

If you have any concerns about how your personal data is being processed, you may contact our Grievance Officer:

Data Protection Officer / Grievance Officer

Email: dpo@zenstudios.in
Phone: +91 40 1234 5678
Address: ZenStudios, Hitech City, Hyderabad, Telangana 500081, India

We will acknowledge your grievance within 48 hours and resolve it within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of our services after such notification constitutes acceptance of the updated policy.

12. Contact Us

For any questions about this Privacy Policy or our data practices:

ZenStudios

Email: privacy@zenstudios.in
DPO: dpo@zenstudios.in
Phone: +91 40 1234 5678
Address: Hitech City, Hyderabad, Telangana 500081, India