Privacy Notice
Last updated: 7 August 2026
Draft pending legal review. This notice describes our actual practices in plain language and is written to align with the Digital Personal Data Protection Act, 2023. It has not yet been reviewed by a lawyer. If anything here conflicts with the law, the law applies.
Who we are
Rishi Marble and Granites is a sole proprietorship registered in Assam, India (GSTIN 18AGXPA0032D3ZR), trading in tiles, marble and granite from showrooms in Guwahati. For the purposes of the DPDP Act we are the Data Fiduciary for personal data you share with us through this website. You are the Data Principal.
What we collect
We only collect what you actively give us, plus basic technical data needed to serve the site.
- Enquiry details — your name, phone number, and optionally your email and message, when you submit an enquiry form or start a WhatsApp chat from this site. We also record which product or page the enquiry came from, so we can answer you usefully.
- Technical data — your IP address, browser type and the pages you visited, recorded in ordinary server logs and used for security and troubleshooting.
- Analytics — anonymous usage measurement, and only if you consent to it. Decline and no analytics or advertising scripts load at all.
We do not ask for and do not want financial account details, government ID numbers, or any of the sensitive categories of data. Please do not send them through this website.
Why we use it, and on what basis
We use enquiry details for one purpose: to reply to you about the products or visit you asked about, and to follow up on that conversation. The lawful basis is your consent, which you give by ticking the consent box on the enquiry form. We ask for that consent explicitly — we never assume it, and we never record consent on your behalf.
We do not sell your personal data. We do not share it with advertisers or data brokers. We do not use it to build a profile of you.
Who else sees it
Only the service providers we need to run the site and reply to you: our website and database hosting provider, our transactional email provider, and WhatsApp (Meta) if you choose to contact us that way. Each processes data on our instructions. If you message us on WhatsApp, Meta's own privacy terms also apply to that conversation.
We may disclose data where the law requires it — for example, a valid order from a court or a government authority.
How long we keep it
Our policy is to retain enquiry records for up to three years from your last contact with us, which reflects how long a tile or stone purchase decision and its after-sales questions typically run. Server logs are kept for a short operational window. We delete or anonymise data once it is no longer needed for the purpose it was collected for. If you ask us to erase your data sooner, we will.
Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data of yours we hold and who we have shared it with;
- correct or complete anything that is wrong or out of date;
- erase your data where we no longer need it for the purpose you gave it for;
- withdraw your consent at any time — as easily as you gave it;
- nominate someone to exercise these rights for you if you die or become incapacitated.
To make any of these requests, contact us using the details below. There is currently no self-service portal for this; a person handles each request. We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Children
This site is meant for adults buying building materials. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their data, tell us and we will delete it.
Cookies and tracking
We set a small number of strictly necessary cookies so the site works — these carry no advertising identifiers. Analytics and advertising scripts load only after you consent, and you can change your choice at any time. See our Terms of Use for the rules that govern using this site.
Security
Data is transmitted over HTTPS and access to enquiry records is restricted to staff who need it, with every access logged. No system is perfectly secure, and we do not claim otherwise. If a breach affects your data we will notify you and the Data Protection Board as the DPDP Act requires.
Contact us
Questions about this notice, or want to exercise a right above? Reach us at our showroom in Guwahati, or by phone on +91 99540 53054. Showroom addresses are on our showroom page.
DPDP 2023 notice anchor.