Privacy Policy

This Privacy Policy describes how RasaHaus ("RasaHaus", "we", "us", or "our") collects, uses, stores, processes, and protects personal information when you visit our website, place an order, communicate with us, or otherwise interact with our products and services.

RasaHaus is committed to protecting the privacy of its customers and website visitors and handling personal information responsibly, transparently, and in accordance with applicable Indian laws.

This policy applies to all visitors, customers, prospective customers, and other individuals whose personal information is collected through the RasaHaus website, online store, customer service channels, or other authorised business interactions.

By accessing our website or voluntarily providing personal information to us, you acknowledge that you have read this Privacy Policy. Where consent is legally required, we will seek such consent separately and in an appropriate manner.

1. Information We Collect

We may collect the following categories of information, depending on how you interact with RasaHaus and the services you use.

1.1. Personal and Contact Information

When you create an account, place an order, request a quotation, contact customer support, or subscribe to communications, we may collect:

• Full name and, where applicable, business or organisation name.

• Email address and telephone or mobile number.

• Billing address, shipping address, and delivery instructions.

• Account login information and account preferences, where applicable.

• Communication preferences and information voluntarily provided in enquiries or correspondence.

1.2. Order and Transaction Information

To process and fulfil purchases, we may collect and maintain information relating to:

• Products purchased, including bespoke furniture, lighting, mirrors, paintings, artwork, plants, planters, fragrances, and décor.

• Order numbers, invoices, quotations, purchase history, and transaction status.

• Customer-approved drawings, dimensions, measurements, designs, finishes, and product specifications for customised orders.

• Delivery details, installation requirements, service requests, and delivery acknowledgements.

• Refund, cancellation, return, replacement, and warranty claim records.

1.3. Payment Information

Payments made through our website may be processed by third-party payment gateways, banks, or other authorised payment service providers.

We may receive information such as transaction reference numbers, payment status, payment method, and other details necessary to reconcile and administer transactions.

Unless expressly disclosed and lawfully required, RasaHaus does not intend to collect or store complete credit or debit card numbers, card security codes, or banking passwords. Such information is handled by the relevant payment service provider in accordance with its own security and privacy practices.

1.4. Technical and Usage Information

When you access our website, certain technical information may be collected automatically through server logs, cookies, analytics tools, and similar technologies, where enabled.

This may include:

• Internet Protocol (IP) address.

• Browser type, device type, operating system, and language preferences.

• Pages visited, products viewed, browsing activity, and referring website.

• Date, time, and duration of website visits.

• Website performance, error logs, and security-related information.

Such information may be used to maintain website functionality, improve user experience, analyse website performance, and protect against fraud or unauthorised activity.

1.5. Communications and Customer Support Information

Where you contact RasaHaus by email, telephone, messaging platforms, website forms, or other authorised channels, we may collect and retain the information contained in those communications.

This may include enquiries, complaints, feedback, product preferences, delivery instructions, and information necessary to resolve service or warranty issues.

We may also retain records of communications where reasonably necessary for customer service, contractual administration, dispute resolution, or legal compliance.

1.6. Information from Third Parties

We may receive information about you from third parties where reasonably necessary for our business operations, including:

• Payment gateways and financial institutions, for transaction verification.

• Logistics providers and delivery partners, for shipment tracking and delivery confirmation.

• Website hosting, e-commerce, analytics, and technology service providers.

• Advertising and marketing platforms, where you interact with our advertisements or have provided the relevant permissions.

We shall use such information only for legitimate and disclosed purposes, subject to applicable law and the terms governing the relevant service.

2. How We Use Your Information

RasaHaus collects and processes personal information for specific business and operational purposes, including the following.

RasaHaus shall not use personal information for purposes materially different from those disclosed at the time of collection without obtaining the required consent or establishing another lawful basis under applicable law.

3. Legal Basis for Processing

3.1. RasaHaus shall collect and process personal information on the basis of consent, contractual necessity, compliance with applicable legal obligations, or other grounds permitted under applicable Indian law.

3.2. Where consent is required, we shall seek consent that is informed, specific, and freely given, and shall provide information about the purposes for which the relevant personal information will be processed.

3.3. You may decline to provide information that is not necessary for a particular service. However, withholding information essential to fulfil an order, process a payment, arrange delivery, or comply with legal requirements may prevent us from providing that service.

3.4. Where processing is based on consent, you may withdraw that consent using the contact details or other withdrawal mechanism provided by RasaHaus. Withdrawal shall not affect the lawfulness of processing undertaken before the withdrawal, nor prevent processing that is otherwise lawfully required or permitted.

3.5. The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 have been notified with phased commencement provisions. RasaHaus shall implement the applicable obligations as and when they become effective and shall comply with the privacy and data protection laws currently applicable to its operations.

4. Cookies and Similar Technologies

4.1. Our website may use cookies, pixels, tags, local storage, and similar technologies to support website functionality, remember preferences, analyse usage, and improve the shopping experience.

4.2. Cookies are small data files stored on your device when you visit a website. They may help the website recognise your browser and remember certain information.

4.3. RasaHaus may use the following categories of cookies:

4.4. Essential cookies may be necessary for the operation of the website. Non-essential analytics and marketing cookies shall be used subject to applicable consent requirements.

4.5. You may manage cookie preferences through the cookie consent mechanism made available on the website, where implemented, or through your browser settings.

4.6. Disabling certain cookies may affect website functionality, including account access, shopping cart features, or checkout operations.

4.7. Third-party technologies may be governed by the respective providers' privacy policies and terms. RasaHaus does not control the independent cookie practices of third-party websites or services.

5. Sharing and Disclosure of Personal Information

RasaHaus does not sell customers' personal information to third parties in exchange for monetary consideration.

We may share personal information with the following categories of recipients, strictly to the extent reasonably necessary for the purposes described in this policy.

5.1. Service Providers

We may share information with third-party service providers who assist with our business operations, including:

• Website hosting and e-commerce platform providers.

• Payment gateways and transaction processing services.

• Logistics, courier, and delivery partners.

• Customer relationship management and customer support platforms.

• Website analytics, security, and technology providers.

• Email, messaging, and communication service providers.

Such providers may process personal information on our behalf and shall be engaged subject to appropriate contractual, confidentiality, and security obligations, as applicable.

5.2. Business and Professional Advisors

We may disclose information to our accountants, auditors, lawyers, consultants, insurers, and other professional advisors where reasonably necessary for business administration, legal advice, accounting, taxation, insurance, or dispute resolution.

5.3. Legal and Regulatory Authorities

We may disclose personal information to courts, law enforcement agencies, government authorities, regulators, or other authorised persons where required by law, legal process, court order, or a valid governmental request.

We may also disclose information where reasonably necessary to establish, exercise, or defend legal claims or to protect the rights, safety, and property of RasaHaus, its customers, or others, subject to applicable law.

5.4. Business Transfers

In the event of a merger, acquisition, restructuring, sale of business assets, financing transaction, or similar corporate transaction, personal information may be transferred to the relevant parties, subject to appropriate confidentiality and data protection safeguards and applicable law.

5.5. Marketing and Advertising Partners

Where permitted by law and subject to applicable consent requirements, we may share limited information with advertising, analytics, and marketing service providers to measure campaigns, manage advertising, or deliver relevant promotional communications.

We do not authorise such providers to use customer information for unrelated purposes contrary to the terms governing the relevant engagement or applicable law.

6. Third-Party Websites and Services

6.1. Our website may contain links to third-party websites, social media platforms, payment gateways, or other external services.

6.2. These third-party services may have their own privacy policies, cookie practices, and terms of use, which are independent of RasaHaus.

6.3. RasaHaus does not control and shall not be responsible for the privacy practices, security, content, or data handling practices of independent third-party websites or services.

6.4. Customers are advised to review the applicable privacy policies of third-party services before providing personal information or completing transactions through those services.

6.5. Any personal information submitted directly to a third-party service shall be governed by the privacy terms applicable to that service, subject to any obligations independently applicable to RasaHaus.

7. Data Retention and Deletion

7.1. RasaHaus shall retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, administer the customer relationship, comply with applicable legal obligations, or establish, exercise, or defend legal claims.

7.2. Different categories of information may be retained for different periods depending on the nature of the information and the purpose of processing.

7.3. Where personal information is no longer necessary for the relevant purpose and is not required to be retained under applicable law, RasaHaus shall take reasonable steps to delete, anonymise, or otherwise dispose of it securely.

7.4. Requests for deletion shall be assessed in accordance with applicable law. Information may be retained where required for legal compliance, accounting, taxation, fraud prevention, the establishment or defence of legal claims, or other lawful purposes.

7.5. Deletion from active systems may not immediately remove all copies from secure backups or archival systems. Any such residual information shall remain subject to appropriate safeguards and shall be deleted or overwritten in accordance with applicable retention and backup practices.

8. Data Security

8.1. RasaHaus shall implement reasonable technical, organisational, and administrative safeguards designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse, or destruction.

8.2. Depending on the nature of the information and the systems involved, safeguards may include:

• Access controls and restricted access to personal information.

• Password protection and authentication measures.

• Secure hosting and data transmission arrangements, where supported.

• Use of reputable payment service providers for payment processing.

• Appropriate confidentiality obligations for employees, contractors, and service providers.

• Reasonable procedures for identifying and responding to suspected security incidents.

8.3. Access to personal information shall be limited to personnel and service providers who reasonably require such access for authorised business purposes.

8.4. RasaHaus shall take reasonable steps to ensure that third-party service providers handling personal information on its behalf maintain appropriate safeguards, subject to the nature of the engagement and applicable law.

8.5. Notwithstanding these safeguards, no method of electronic transmission, storage, or internet-based communication can be guaranteed to be completely secure. RasaHaus therefore does not warrant absolute security against all possible security incidents.

8.6. Where a personal data breach occurs, RasaHaus shall take appropriate steps to investigate, contain, and address the incident and provide notifications to affected individuals or authorities where required under applicable law.

9. Your Privacy Rights and Choices

Subject to applicable law, individuals whose personal information is processed by RasaHaus may have the following rights and choices.

9.1. Access and Information

You may request information about the personal data concerning you that is processed by RasaHaus and seek clarification regarding the purposes of processing, subject to applicable law.

9.2. Correction and Updating

You may request correction or updating of inaccurate or incomplete personal information held by RasaHaus, including contact details, delivery addresses, and account information.

Certain changes to order or transaction records may be subject to verification and applicable accounting or legal requirements.

9.3. Deletion

You may request deletion of personal information where it is no longer necessary for the purpose for which it was collected or where deletion is otherwise available under applicable law.

Such requests shall be subject to legal retention requirements and other lawful grounds for continued processing.

9.4. Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent by contacting RasaHaus using the details provided in this policy or through an available consent management mechanism.

Withdrawal of consent shall not affect the lawfulness of processing undertaken before withdrawal. It may, however, affect our ability to provide certain services that depend on the relevant information.

9.5. Marketing Preferences

You may opt out of promotional emails by using the unsubscribe link in the relevant communication, where available, or by contacting us directly.

You may also request that RasaHaus discontinue promotional SMS or other marketing communications through the applicable opt-out mechanism or customer support channel.

Please note that opting out of marketing communications will not prevent us from sending essential transactional or service-related communications, such as order confirmations, payment notifications, shipping updates, safety notices, or warranty communications.

9.6. Grievance Redressal

You may raise concerns or complaints regarding the collection, use, storage, disclosure, or handling of your personal information by contacting the Grievance Officer identified in Section 10.

Requests may be subject to reasonable identity verification to protect personal information from unauthorised disclosure.

9.7. Rights Under Applicable Law

RasaHaus shall recognise and facilitate privacy rights available to individuals under applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025, to the extent and from the dates on which the relevant provisions become applicable.

Nothing in this policy shall be interpreted as limiting a right or remedy available under applicable law.

10. Grievance Officer and Privacy Contact

For privacy-related enquiries, requests, complaints, or concerns regarding the processing of personal information, you may contact the following:

Grievance Officer

For RasaHaus

Legal Entity

Pastel Design Studio (operating under the brand name RasaHaus)

Email indranil@pastelstudio.in

Postal Address

[Insert registered office address of Pastel Design Studio]

Subject Line Privacy Policy – Data Protection Request / Grievance

10.1. When submitting a request or complaint, please provide your name, contact details, order number where applicable, and a description of the concern or request.

10.2. RasaHaus may request reasonable information to verify your identity and confirm that the request is being made by the individual concerned or an authorised representative.

10.3. We shall acknowledge and address privacy-related requests and grievances within the timeframes prescribed by applicable law or, where no specific timeframe applies, within a reasonable period.

10.4. If a grievance is not resolved to your satisfaction, you may pursue the remedies or escalation mechanisms available under applicable law, including approaching the relevant regulatory or adjudicatory authority where such mechanism is available.

11. Children's Privacy

11.1. RasaHaus's website and services are intended for individuals who are legally capable of entering into transactions under applicable law.

11.2. We do not knowingly solicit personal information directly from children for independent purchases or marketing purposes.

11.3. Where personal information relating to a child is required for a lawful purpose, such as delivery arrangements made by a parent or guardian, it shall be processed only to the extent reasonably necessary and in accordance with applicable law.

11.4. Where parental or guardian consent or other safeguards are required under applicable law, RasaHaus shall implement such requirements before undertaking the relevant processing.

11.5. If we become aware that personal information has been collected from a child in circumstances contrary to applicable law, we shall take reasonable steps to address the issue, including deletion where appropriate and legally permissible.

12. International Data Transfers

12.1. RasaHaus primarily operates in India. However, certain third-party technology, hosting, analytics, payment, or communication service providers may process or store information using infrastructure located outside India.

12.2. Where personal information is transferred outside India, RasaHaus shall take reasonable steps to ensure that such transfers are undertaken in accordance with applicable Indian law and any restrictions or requirements prescribed by competent authorities.

12.3. The location and processing practices of third-party service providers may change from time to time. Information may therefore be processed in jurisdictions other than the customer's location, subject to applicable safeguards and legal requirements.

12.4. RasaHaus shall not knowingly transfer personal information in a manner that violates applicable legal restrictions on international data transfers.

13. Changes to This Privacy Policy

13.1. RasaHaus reserves the right to update, modify, or revise this Privacy Policy from time to time to reflect changes in business operations, website functionality, technology, service providers, or applicable legal requirements.

13.2. The updated policy shall be published on the RasaHaus website with a revised "Last Updated" date.

13.3. Where a material change affects the purposes or manner of processing personal information and applicable law requires further notice or consent, RasaHaus shall provide such notice or seek such consent through appropriate means.

13.4. Any revised policy shall apply prospectively, subject to applicable law and any specific rights or obligations arising from earlier transactions.

13.5. Customers and website visitors are encouraged to review this policy periodically to remain informed about how their personal information is handled.

14. Governing Law and Jurisdiction

14.1. This Privacy Policy shall be governed by and construed in accordance with the laws of India.

14.2. Any disputes relating to this policy shall be subject to the jurisdiction of competent courts and authorities in accordance with applicable law.

14.3. Nothing in this section shall restrict a consumer's right to approach a competent consumer dispute redressal commission, the Data Protection Board of India, or another appropriate authority where such right or remedy is available under applicable law.