Privacy Policy

1. Introduction

HN Enterprises respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share your data when you interact with our website or engage our services, and describes the rights available to you under applicable Indian law.

This policy applies to personal data collected through our website (www.hnenterprise.co.in), contact form, email correspondence, phone calls and the delivery of our commercial interior fit-out services.

By using our website or contacting us, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are (Data Controller)

For the purpose of applicable data protection laws, HN Enterprises is the data controller responsible for your personal information.

If you have questions or concerns about how your data is handled, please contact us at the address above.

3. Information We Collect

Information you provide directly

• Contact form: Your name, company name, phone number, email address, project type, location and message content
• Email correspondence: Any information included in emails you send to us
• Phone calls: Your name and contact details, and notes from our conversation
• Project engagement: Business and site information necessary to deliver our services, including site addresses, project specifications and authorised contact details

Information collected automatically

• Server logs: IP address, browser type, operating system, referring URL and pages visited — collected automatically when you access our website
• Cookies: Preference data stored in your browser (see Section 10 and our Cookie Policy)

We do not collect sensitive personal data such as financial account details, government identification numbers, health information or biometric data through our website or standard service engagements.

4. How We Use Your Information

Purpose	Data Used
Responding to your enquiry	Name, email, phone, message content
Preparing and sending project proposals	Contact details, project requirements, site information
Managing and delivering your project	All project-related information provided
Sending project updates and communications	Email, phone number
Invoicing and payment administration	Company name, address, contact details
Improving our website and services	Anonymised server log and usage data
Complying with legal obligations	As required by applicable law

We do not use your information for automated decision-making or profiling. We do not use your personal data to send unsolicited marketing communications unless you have opted in to receive them.

5. Legal Basis for Processing

We process your personal data on the following grounds:

• Consent: When you submit our contact form, you consent to us using your information to respond to your enquiry.
• Contractual necessity: When you engage our services, we process your data to fulfil our contractual obligations to you.
• Legitimate interests: We have a legitimate interest in maintaining records of client communications, improving our services and ensuring the security of our systems.
• Legal obligation: We retain certain financial and project records for periods required by applicable Indian tax and corporate law.

Our data processing practices are guided by the Information Technology Act, 2000 (as amended), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

6. Data Sharing

We do not sell, rent or trade your personal information to third parties.

We may share your information with:

• Vetted subcontractors and suppliers — only to the extent necessary for project delivery (e.g. site address and contact details shared with trade contractors working on your project)
• Professional advisors — legal, accounting or insurance professionals, where required
• Government authorities and regulators — where required by applicable law, court order or legal process
• Google Workspace — we use Google Workspace for email and document management; emails sent to ismail@hnenterprise.co.in are processed on Google's servers under their data processing terms

Any third parties with whom we share data are bound by appropriate confidentiality obligations and are not permitted to use your information for their own purposes.

7. Data Storage and Security

Your personal data is stored and processed in India. We use Google Workspace for business email, which may involve data being processed on servers in multiple countries in accordance with Google's standard data processing terms.

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction. These include access controls, password protection and secure communication protocols.

8. Data Retention

• General enquiry data (contacts who did not become clients): retained for up to 2 years from the date of last contact, then securely deleted
• Project and client records (contracts, invoices, correspondence): retained for 7 years from project completion in accordance with Indian tax and corporate record-keeping requirements
• Server logs: typically retained for 90 days for security and troubleshooting purposes
• Cookie consent preferences: stored in your browser's local storage for up to 1 year

After applicable retention periods, personal data is securely deleted or anonymised so it can no longer be associated with you.

9. Your Rights

Under applicable Indian data protection law, you have the following rights in relation to your personal information:

• Right to access: Request a copy of the personal information we hold about you
• Right to correction: Ask us to correct inaccurate or incomplete information
• Right to erasure: Request deletion of your personal data where there is no legitimate reason for us to continue processing it
• Right to restrict processing: Ask us to pause processing of your data in certain circumstances
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal
• Right to grievance redressal: Lodge a complaint with us or, if unsatisfied, with the relevant data protection authority under applicable law

To exercise any of these rights, please contact us at ismail@hnenterprise.co.in. We will respond within a reasonable timeframe. Some rights may be subject to limitations under applicable law.

10. Cookies

Our website uses cookies — small text files stored in your browser. We use essential cookies to maintain basic website functionality and to store your cookie consent preference.

We do not currently use advertising, retargeting or social media tracking cookies. Our website loads fonts from Google Fonts, which may involve Google placing a cookie in your browser.

For full details, including how to manage your cookie preferences, please see our Cookie Policy.

11. Links to Other Websites

Our website may contain links to third-party websites. Once you leave our website, this Privacy Policy no longer applies. We are not responsible for the privacy practices of external sites and recommend that you review their privacy policies before providing any personal information.

12. Children's Privacy

Our website and services are directed at business professionals and commercial entities. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the "Last updated" date at the top of this page. Significant changes will be communicated where practicable.

We encourage you to review this page periodically to stay informed about how we protect your information.

14. Contact and Complaints

If you have any questions, concerns or complaints about our privacy practices or this policy, please contact us:

We take all privacy concerns seriously and aim to resolve enquiries promptly. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant authority under the Digital Personal Data Protection Act, 2023.