Our Privacy Policy

Last Updated: March 28, 2026

Steel Decor ("we", "us", "our") operates WhatsApp chatbot services through Meta's WhatsApp Business Platform. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you interact with our WhatsApp bot at +91 98674 14409.

***

### 1. Information We Collect

When you message our WhatsApp bot, we collect:

From WhatsApp/Meta (automatically):

- Phone number

- Name (if provided by WhatsApp)

- Profile picture (if public)

- Message content and metadata (timestamp, read receipts)

- Device and network information

- Location (if shared)

From our conversations:

- Order details, inquiries, service requests

- Custom design specifications

- Contact preferences

- Business information you provide

No sensitive data (health, financial account numbers, government IDs) is collected.

***

### 2. How We Use Your Information

We use your data for legitimate business purposes:

- Respond to customer inquiries and service requests

- Process orders and provide fabrication quotes

- Send order confirmations, updates, and delivery notifications

- Provide customer support

- Improve bot response quality

- Comply with legal obligations

Marketing communications require your explicit consent and include clear opt-out instructions.

***

### 3. Legal Basis for Processing

Our processing complies with:

- India's Digital Personal Data Protection Act 2023 (DPDP)

- EU GDPR (for EU customers)

- WhatsApp Business Messaging Policy

- Meta Platform Terms

Processing basis:

- Contract: Order fulfillment and customer support

- Legitimate Interest: Business operations, fraud prevention

- Consent: Marketing communications

- Legal Obligation: Tax records, dispute resolution

***

### 4. Data Sharing and Disclosure

We NEVER sell your data. Limited sharing occurs:

| Recipient | Purpose | Data Shared |

|-----------|---------|-------------|

| Meta Platforms | WhatsApp service delivery | Phone number, messages (end-to-end encrypted) [developers.facebook](https://developers.facebook.com/documentation/business-messaging/whatsapp/data-privacy-and-security/) |

| Payment processors | Order payments | Order amount, customer name |

| Delivery partners | Shipping | Name, phone, address |

| Hosting providers | Data storage | Encrypted conversation logs |

| Legal authorities | Legal compliance | Only when required by law |

***

### 5. Data Storage and Security

- Duration: Conversations retained for 3 years (order support + legal compliance), then permanently deleted

- Location: Secure servers in India (compliant with DPDP cross-border rules)

- Security:

- End-to-end encryption (WhatsApp messages)

- AES-256 encryption (stored data)

- Access controls and audit logs

- Regular security assessments

***

### 6. Your Rights and Choices

You have full control over your data:

| Right | How to Exercise |

|-------|-----------------|

| Access | Reply "DATA" to see stored information |

| Rectification | Reply "UPDATE" with corrections |

| Erasure ("Right to be Forgotten") | Reply "DELETE" - all data permanently removed within 30 days |

| Opt-out | Reply "STOP" - no further messages |

| Withdraw Consent | Reply "NOPROMO" - no marketing messages |

| Complaint | Contact us below or file with data protection authorities |

Immediate effect: Opt-outs processed instantly. No further messages sent.

***

### 7. WhatsApp Business Platform Specifics

- Meta receives: Phone number, message content, timestamps (end-to-end encrypted during transit)

- We receive: Same data for business purposes

- No message content stored by Meta after delivery (E2EE)

- Business-initiated conversations follow 24-hour session rules per WhatsApp policy

***

### 8. Third-Party Links and Services

Our bot may contain links to:

- Steel Decor website (steeldecor.in)

- Payment gateways

- Google Maps (delivery tracking)

Each service has its own privacy policy. Review before use.

***

### 9. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect data from minors. Parents/guardians can request deletion via contact below.

***

### 10. International Data Transfers

Data processed in India with safeguards for international customers:

- EU customers: Standard Contractual Clauses with Meta

- Other regions: Legality checks per local laws

***

### 11. Changes to This Policy

We may update this policy. Significant changes sent via WhatsApp with 30 days notice. Continued use = acceptance.

***

### 12. Contact Information

Steel Decor

Jash Dodia, Chief Strategist

Mumbai, Maharashtra, India

Phone: +91 98674 14409

Email: info@steeldecor.in

Website: steeldecor.in

Data Protection Queries: Reply "PRIVACY" to bot or email privacy@steeldecor.in

***

### 13. Governing Law

This policy governed by Indian law. Disputes resolved in Mumbai courts.

***

Effective: March 28, 2026

***