Privacy Policy

Last updated: 18 May 2026. We follow the Digital Personal Data Protection Act, 2023 (DPDP) — this page explains it in plain English.

  • We collect only the minimum data needed to quote & install
  • No sale or rental of your data to third parties — ever
  • Data stored on Indian servers (AWS Mumbai region)
  • You can request full deletion at any time — done in 30 days

1. What data we collect

WhereWhat we captureWhy
Price calculatorsDimensions, configuration, derived priceStored only in your browser's localStorage to remember your cart. Not transmitted to us until you submit a quote form.
Quote / contact formName, mobile, email, PIN code, project address (optional)To call you back, schedule site visit, ship the PDF quote.
WhatsApp inquiriesPhone number, message threadTo respond to your inquiry. We use Meta's WhatsApp Business API.
Phone calls to/from usCall recording (where mandated), call duration, agent notesTraining, quality, dispute resolution. Recordings deleted after 90 days.
Site analyticsPseudonymous device ID, page-view path, source channelImprove product pages & calculator UX. Tracked via Google Analytics 4 with IP anonymisation on.
PaymentLast 4 digits of card / UPI handle, transaction IDReconciliation. We never see or store full card numbers — handled by our PCI-DSS Level-1 gateway (Razorpay).

2. Cookies & tracking

We use three categories of cookies:

  • Essential — calculator cart, language, cookie consent itself. Cannot be turned off; the site won't work without them.
  • Analytics — Google Analytics 4 (anonymised IP), Microsoft Clarity (privacy mode). You can turn these off via our cookie banner.
  • Marketing — Meta Pixel, Google Ads conversion. You can turn these off via our cookie banner.

We do not use cross-site advertising tracking. We do not buy or sell data through Data Management Platforms.

3. How long we keep your data

4. Who we share data with

A

Service providers

AWS (hosting, Mumbai region), Razorpay (payments, India), Google Workspace (email, EU region — DPF certified), Meta WhatsApp Business (messaging), Zoho CRM (sales pipeline, India).

B

Logistics partners

BlueDart, Delhivery, project-specific transporters — only the delivery address & phone number, only for the duration of shipment.

C

Statutory authorities

GSTN (for e-invoicing & e-way bills), Income-tax dept (TDS reporting), only as legally required.

D

Never with

Advertising networks, data brokers, lead-resale services, "marketing list" buyers. We have never sold or rented a single customer record.

5. Your rights under DPDP 2023

India's Digital Personal Data Protection Act, 2023 gives you the following rights — and we honour all of them, regardless of whether the rules are notified for our category yet:

  • Right to access — get a copy of every record we hold about you
  • Right to correct — fix any inaccurate detail
  • Right to erase — request deletion (within 30 days; some data retained per statutory rules above)
  • Right to nominate — choose someone to act on your behalf in case of incapacity
  • Right to grievance redressal — escalate to our Data Protection Officer (below)

6. Data Protection Officer

For any privacy-related request:

Email: [email protected]
Phone: +91 78953 28080
Postal: Data Protection Officer, WoodenMax, Plot 51, Nampally, Hyderabad — 500001

You will receive an acknowledgement within 24 hours and a substantive response within 7 working days. Unresolved complaints can be escalated to the Data Protection Board of India once the appellate framework is notified.

7. Children's data

We do not knowingly collect data from anyone under 18. Our site is a B2C/B2B sales channel for high-value home-improvement products and is not directed at children. If you believe a child has submitted personal data to us, email [email protected] — we will delete it within 24 hours.

8. Updates to this policy

Material changes are communicated by email to every customer with an active account 30 days before they take effect. Minor edits (typos, contact details) take effect immediately and are noted in the change log at the bottom of this page.

Frequently asked questions

Do you sell my data to other window companies for lead resale?

Absolutely not. We have never resold a single lead. Doing so would destroy our reputation and is contractually prohibited by the agreements we sign with our customers.

I gave my number on the price calculator. Why am I getting WhatsApp messages from your sales team?

Because by submitting the form you opted in to receive a quote PDF and follow-up. You can reply STOP to the WhatsApp thread or write to [email protected] to opt out — we close the loop within 24 hours.

Can I get a copy of every record you hold about me?

Yes. Email [email protected] from the address you originally signed up with. We deliver a ZIP file with your form submissions, call notes, WhatsApp chats and orders within 7 working days.

Where is my data stored?

Primary database — AWS Mumbai region (ap-south-1). Backups — AWS Hyderabad region (ap-south-2). Both are within India. Email is on Google Workspace which keeps copies on EU servers under the EU-US Data Privacy Framework adequacy decision.

I want to be deleted from your CRM permanently.

Send a request to [email protected]. Within 30 days, we remove all records except those we are legally bound to keep (e.g., invoices for GST audit — 8 years per Section 36 of the CGST Act). Those are anonymised wherever possible and access-restricted.

Ready to lock down a final binding quote?

WoodenMax engineers visit free within 48 hours, measure on site, and share a locked PDF quote with GST & transport pre-confirmed.

Book free site visit →

GST 18% extra • Free transport on ₹15L+ orders ≤ 1,000 km from Hyderabad • policy