This policy explains how Dreamspace Interiors Pvt Ltd collects, uses, shares and protects your personal data when you use our website. Last updated: 7 October 2026.
1. Introduction and Scope
Dreamspace Interiors Pvt Ltd (brand name: Dreamspace India) is a commercial interior design and build company headquartered in Mumbai. In this policy, "Dreamspace India", "we", "us" and "our" refer to Dreamspace Interiors Pvt Ltd. Our registered office is at Lodha Supremus, 411, Off Mahakali Caves Rd, next to Hotel Bindra Supremacy, Chakala Industrial Area (MIDC), Andheri East, Mumbai, Maharashtra 400093.
This Privacy Policy applies to www.dreamspaceindia.com (the "Website") and to any personal data you share with us through it: the enquiry and contact form, and email or phone conversations that begin on the Website.
We process personal data in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under them. For the purposes of the DPDP Act, we act as the Data Fiduciary for the personal data described here.
By using the Website or submitting your details to us, you confirm that you have read this policy. Where the law requires your consent, we will ask for it separately and clearly at the point of collection. If you do not agree with this policy, please do not use the Website or submit personal data through it.
2. Information We Collect
We collect only the personal data we need for the purposes in this policy. Depending on how you interact with us, this may include:
| Category | Examples | When we collect it |
|---|---|---|
| Identity and contact details | Name, email address, phone number, company name, designation | Enquiry and contact forms; emails and calls |
| Project details | Location, size and type of space, budget range, timelines, requirements you describe | Enquiry forms, proposal discussions, site visits |
| Recruitment details | CV, work history, qualifications, portfolio, current and expected compensation | Job applications sent to us |
| Technical data | IP address, browser type and version, device type, operating system, pages visited, time spent, referring website, approximate location | Automatically, when you browse the Website |
| Communication records | Messages, email correspondence, call notes, feedback | When you contact us or respond to us |
We do not knowingly collect sensitive personal data such as financial account details, government ID numbers, health data or biometric data through the Website. Please do not include these in any form or message you send us.
If you give us personal data about another person (for example, a colleague or a referee), you confirm that you are permitted to share it and that the person has been informed.
3. How We Collect Information
We collect information in three ways:
Directly from you. When you fill in a form, apply for a role, or contact us by email or phone.
Automatically. Through cookies and similar technologies when you visit the Website (see Section 6).
From other sources. From business contacts, referrals, public professional profiles such as LinkedIn, event interactions, and analytics or advertising platforms we use to understand how the Website performs.
Enquiries received through the Website are recorded in our customer relationship management (CRM) system so that our team can follow up.
4. How We Use Your Information
We use your personal data only for specific, lawful purposes:
- To respond to your enquiries and provide information about our design, build and turnkey services.
- To prepare proposals, quotations and project plans, and to deliver and manage projects you have engaged us for.
- To maintain relationships with clients, consultants, vendors and other business contacts.
- To process job applications, assess candidates and contact them about openings.
- To send updates, project showcases, newsletters or event invitations, where you have agreed to receive them.
- To operate, secure and improve the Website, including troubleshooting, analytics and measuring the performance of our marketing.
- To comply with legal, accounting, tax and regulatory obligations, and to establish, exercise or defend legal claims.
- To detect, prevent and investigate fraud, misuse or security incidents.
We will not use your personal data for a purpose that is unrelated to the one for which you gave it, unless you consent again or the law allows it.
5. Consent and Lawful Basis
We process your personal data on the basis of your consent, or for the limited "legitimate uses" the DPDP Act recognises. Examples are responding to an enquiry you voluntarily made, complying with a legal obligation, and employment-related purposes.
Where we rely on consent, it will be free, specific, informed and given by a clear affirmative action, such as ticking a box or submitting a form beside a consent notice. You may withdraw consent at any time by contacting us through the Contact Us page (Section 15). Withdrawal does not affect processing already done, and we may be unable to continue a service that depends on that data. We will stop processing within a reasonable time unless the law requires us to keep it.
8. Third-Party Websites and Services
The Website may link to or embed third-party content, such as social media pages, maps, videos or partner sites. We do not control these sites and are not responsible for their privacy practices or content. Please read their privacy policies before sharing personal data with them.
9. Data Retention
We keep personal data only for as long as it is needed for the purpose it was collected for, or as the law requires. Once the purpose is served and no legal or business need remains, we delete or anonymise the data.
| Data | Typical retention |
|---|---|
| Enquiries that do not lead to a project | 24 months from last contact |
| Client and project records | Duration of the project plus the period required by tax, accounting and contract law |
| Job applications | 24 months after the role is closed, unless you ask us to delete earlier |
| Website analytics data | 14 months |
We may keep data for longer where needed to resolve a dispute, enforce an agreement or meet a legal obligation.
10. Data Security
We use reasonable technical and organisational safeguards to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. These include access controls limited to staff who need the data, password protection, secure hosting and encrypted connections (HTTPS) on the Website.
No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the law requires.
11. Your Rights
Under the DPDP Act, you have the following rights over your personal data:
- Access. Ask for a summary of the personal data we process, the processing activities, and the other parties we have shared it with.
- Correction and completion. Ask us to correct inaccurate or misleading data and complete incomplete data.
- Erasure. Ask us to erase your data when it is no longer needed for the purpose it was collected, unless the law requires us to keep it.
- Withdrawal of consent. Withdraw a consent you have given, as explained in Section 5.
- Complaints. Raise a complaint about how we handle your data by contacting us (Section 15).
- Nomination. Nominate another person to exercise your rights if you die or become unable to do so.
To exercise any of these rights, contact us through the Contact Us page (Section 15). We may need to verify your identity first. We will respond within a reasonable period and in any case within the time the law prescribes.
If your complaint is not resolved, you may complain to the Data Protection Board of India once it is operational for this purpose. Please contact us first so we can try to resolve it.
12. Children's Privacy
The Website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has given us personal data, please contact us and we will delete it. Where the law requires verifiable consent from a parent or guardian, we will obtain it before processing a child's data.
13. Cross-Border Data Transfers
We store and process personal data mainly in India. Some of our service providers, such as cloud hosting, email or analytics platforms, may process data on servers outside India. Where this happens, we transfer data only as the DPDP Act permits and require the provider to protect it to a standard consistent with this policy.
14. Changes to This Policy
We may update this policy from time to time to reflect changes in law, our practices or the Website. The "Last updated" date at the top shows the latest version. We will post changes on this page and, where a change is significant or the law requires it, notify you directly. Please review this page regularly. Continuing to use the Website after an update means you accept the revised policy, without affecting any consent you have already given or withdrawn.
15. Contact Us
If you have any questions about this policy, want to exercise your rights, or wish to make a complaint, please use the Contact Us page on our Website (www.dreamspaceindia.com) and fill in your details. Include your name, contact information and a clear description of your request. We will acknowledge your message promptly and aim to resolve it within a reasonable time.
