Privacy Policy
Effective Date: July 2026 | Applicable to: houseplans.in
This Privacy Policy describes how Home Plans PDF ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website or enquire about our house plan products. We are committed to compliance with the Digital Personal Data Protection (DPDP) Act, 2023 of India.
1. What We Collect
We collect the following personal data when you submit an enquiry, purchase a plan, or interact with our site:
| Data Type | Examples | How Collected |
|---|---|---|
| Identity | Your name | Enquiry / lead form |
| Contact | Phone number, WhatsApp number, email address | Enquiry / purchase form |
| Technical | IP address, browser type, device type, page visited | Cloudflare (automatic, for security) |
| Marketing Attribution | UTM parameters (utm_source, utm_medium, utm_campaign), Google Click ID (gclid), Facebook Click ID (fbclid) | URL parameters captured at form submission |
| Bot-protection & Telemetry | Altcha Proof-of-Work token, aggregate mouse move count, event trust flag | Automated verification and behavioral checks on form submission |
We do not collect: Aadhaar numbers, PAN numbers, financial account details, or sensitive personal data as defined by the DPDP Act 2023.
2. Why We Collect It
We use your personal data for the following lawful purposes:
- To respond to enquiries: When you fill in a lead form, we use your name and phone/WhatsApp number to contact you with the information you requested.
- To process orders: If you purchase a house plan PDF, we use your contact details to deliver the download link and provide post-sale support.
- To prevent fraud and abuse: IP addresses, Altcha cryptographic tokens, and basic behavioral telemetry are used to detect spam and bot submissions without relying on third-party tracking.
- To measure marketing effectiveness: UTM and click-ID attribution helps us understand which advertising campaigns are working, without selling this data to anyone.
We collect only what is reasonably necessary for these purposes (data minimisation principle under DPDP Act 2023, Section 4).
3. How We Store It
- Cloudflare KV (Key-Value Store): Form submissions are initially processed by our Cloudflare Worker and may be stored in Cloudflare KV for deduplication and rate-limiting. Cloudflare's infrastructure is SOC 2 Type II certified. Data centres: primarily EU/US (Cloudflare global edge).
- Notion Database: Qualified lead records are forwarded to a private Notion workspace accessible only to our team. Notion is GDPR-compliant and encrypts data in transit (TLS) and at rest (AES-256).
- Retention: Lead data is retained for a maximum of 24 months from the date of collection, or until you request erasure, whichever is earlier.
4. Who We Share It With
We do not sell, rent, or share your personal data with any third party for their own marketing or commercial purposes. Ever.
We may share limited data with the following categories of processors, solely to provide you our service:
- Cloudflare, Inc. โ Infrastructure, DDoS protection, and R2 object storage. Cloudflare Privacy Policy โ
- Notion Labs, Inc. โ CRM and lead management. Notion Privacy Policy โ
We do not use Google Analytics, Facebook Pixel, or any third-party behavioural tracking cookies on this website as of the effective date above.
5. Your Rights Under the DPDP Act 2023
As a Data Principal under India's Digital Personal Data Protection Act 2023, you have the following rights:
- Right to Access (Section 11): You may request a summary of the personal data we hold about you.
- Right to Correction (Section 12): You may request correction of inaccurate or incomplete personal data.
- Right to Erasure (Section 12): You may request deletion of your personal data where it is no longer required for the purpose it was collected.
- Right to Grievance Redressal (Section 13): You may raise a grievance with us, and we will respond within the timeframe prescribed under the Act.
- Right to Nominate (Section 14): You may nominate an individual to exercise your rights in the event of your death or incapacity.
To exercise any of the above rights, contact us at: [privacy@houseplans.in]. We will respond within 72 hours to acknowledge your request and complete it within the timelines prescribed by the DPDP Act 2023.
6. How to Withdraw Consent
You gave us consent to contact you when you submitted our enquiry form. You may withdraw that consent at any time by:
- Using our self-serve consent withdrawal form โ instant, 1-click withdrawal.
- Replying "STOP" to any WhatsApp message we send you.
- Sending an email to [privacy@houseplans.in] with the subject line "Withdraw Consent โ [Your Phone Number]".
Withdrawal of consent does not affect the lawfulness of any processing done before the withdrawal. After withdrawal, we will cease contact within 48 hours and schedule your data for deletion within 30 days.
7. Cookies & Local Storage
We use minimal cookies and browser storage to provide a seamless experience:
- Draft Persistence (sessionStorage): We temporarily save your form inputs (e.g., name, phone) in your browser's
sessionStorageso you don't lose your data if you accidentally refresh the page. This is cleared immediately upon successful submission. - Offline Queueing (localStorage): If your internet connection drops while submitting a form, we save your encrypted submission in your device's
localStorage. It is automatically sent to us when you regain connection, ensuring you don't have to fill out the form twice. - Attribution (sessionStorage): If you arrive from an ad, UTM parameters are saved in
sessionStorageso they persist until you submit the form. This data stays on your device and is sent only upon submission. - Theme preference: If you toggle light/dark mode, your preference is saved in
localStorage. This is never transmitted to our servers.
We do not use: advertising cookies, persistent tracking pixels, Google Analytics, Facebook Pixel, or any third-party cookie-based tracking.
8. Contact & Grievance Officer
For privacy-related grievances, data requests, or questions about this policy, contact us at:
Home Plans PDFPrivacy & Grievance Contact: [privacy@houseplans.in]
Response time: 72 hours (acknowledgement), 15 days (resolution)