Last updated 18 August 2026

1. Who we are

Spacioworks Interio Private Limited (“Spacioworks”, “we”, “us”) is an interior design and execution studio registered in India.

Registered office: Suite A-26, Block A, 2nd Floor, RR Towers, 3 Water Works Road, SIDCO Industrial Estate, Guindy, Chennai 600 032
CIN: U74102TN2025PTC185918
GSTIN: 33ABRCS7509M1ZN
Email: care@spacioworks.in
Phone: +91 96000 11441

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described below. You are the Data Principal.

2. What we collect, and why

We collect only what we need to answer your enquiry and deliver a project. We do not buy personal data from third parties, and we do not sell or rent yours to anyone.

2.1 When you send an enquiry

Name, phone number, email address — so a designer can contact you.
City, property type, scope of work and your message — so the person who calls already understands what you are asking for.
How you reached the site — the referring page and any campaign tags in the link you arrived through. This tells us which of our own channels work. It is not used to build a profile of you or to follow you across other websites.

2.2 When you request a brochure

Your name, phone number and email address, so we can send the brochure and follow up once.

2.3 When you apply for a job

Name, phone number, email address, the role applied for, and your CV.
Your CV is stored in our recruitment records and seen internally by the people hiring for that role.

2.4 When you become a client

Billing and site address — required on a GST tax invoice.
Project records — quotations, designs, drawings, site photographs, schedules and handover documents.
Payment records — amounts, dates, mode and reference numbers. We do not collect or store card numbers, UPI PINs, CVVs or net-banking credentials at any point.

2.5 When you use the client portal

A one-time password is sent to your registered mobile number to sign you in, and a session cookie keeps you signed in while you use it. That cookie is strictly necessary for the portal to work and is not used for advertising.

2.6 What we do not do

No advertising cookies, and no third-party tracking or profiling scripts.
No selling, renting or trading of personal data.
No automated decision-making that produces legal or similarly significant effects.
We do not knowingly collect data from children under 18. Our services are contracted by adults and are not directed at children.

3. The basis on which we process

We rely on your consent, given by your clear affirmative action in submitting a form, and on the certain legitimate uses permitted by section 7 of the DPDP Act — principally where you have voluntarily given us your data for a specified purpose, such as asking us to quote for your home.

Some records must be kept regardless of consent because the law requires it, tax invoices under the GST law being the clearest example.

4. Withdrawing consent

You can withdraw consent at any time by writing to care@spacioworks.in. Withdrawing is as easy as giving it was. We will stop processing your data for the purposes you withdraw from, and erase it unless the law requires us to keep it.

Withdrawal is not retrospective: it does not undo processing that was lawful before you withdrew. If you withdraw consent during a live project, we may be unable to continue delivering it.

5. Who else sees your data

We use a small number of service providers, as Data Processors, under contracts requiring them to protect your data and use it only on our instructions.

Cloud hosting and database — to run this website and our internal systems.
Email delivery — to send quotations, invoices, receipts and project updates.
WhatsApp — only where you have chosen to contact us that way.
Vendors and contractors on your project — carpenters, electricians, plumbers and similar receive your site address and the drawings needed to do the work. They do not receive your payment records.
Professional advisers and authorities — our accountants and auditors, and any authority we are legally obliged to disclose to.

Some providers may store or process data on servers outside India. Where that happens it remains subject to this policy and to any restrictions the Central Government notifies under the DPDP Act.

6. How long we keep it

Enquiries that do not become projects — up to three years from last contact, so we can pick the conversation up if you return. Erased sooner on request.
Job applications — up to one year from the date of application, then erased.
Project and client records — for the project and the warranty period that follows, so a warranty claim can actually be honoured.
Invoices, receipts and accounting records — eight years, as required under Indian tax and company law. These cannot be erased earlier.

7. Your rights

Under the DPDP Act you have the right to:

Know what personal data of yours we hold and process, and who we have shared it with.
Correct what is inaccurate, complete what is incomplete, and update what is out of date.
Erase your personal data where we are not legally required to keep it.
Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
Complain to us, and escalate if we do not resolve it.

To exercise any of these, write to care@spacioworks.in from the email address or with the phone number we hold for you, so we can identify you. We respond within 30 days, at no charge.

We may ask you to verify your identity before acting, and may decline a request that is manifestly unfounded or repetitive — telling you why.

8. Grievance redressal

If you are unhappy with how we have handled your personal data, contact our Grievance Officer:

Grievance Officer: Dilip Moorthy, Co-Founder & Chief Business Officer
Email: care@spacioworks.in
Post: Suite A-26, Block A, 2nd Floor, RR Towers, 3 Water Works Road, SIDCO Industrial Estate, Guindy, Chennai 600 032

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

If you remain dissatisfied you may complain to the Data Protection Board of India, established under the DPDP Act.

9. How we protect your data

Encryption in transit, and access control so staff see only what their role requires.
Access logging and monitoring on our systems.
Backups, so your project records survive a failure.
Contractual security obligations on every processor we use.

If a personal data breach occurs we will notify each affected person and the Data Protection Board without delay, and file the detailed report required under the DPDP Rules within 72 hours.

10. Changes to this policy

We update this page when what we do changes, and change the date at the top. If a change materially affects how we use your data we will tell you directly rather than rely on you to check.

This policy is written to be read and understood. It does not limit any right you have under the Consumer Protection Act, 2019 or any other law.

Privacy policy