Summary
- We collect what you give us (account, enquiry and appointment details) and basic sign-in records, to run your account, answer you and keep the site secure.
- We do not sell or rent your personal data, and we do not use advertising trackers.
- Passwords are stored as one-way hashes. Our staff cannot read them, and we will never ask you for yours.
- Essential cookies keep you signed in and hold your cart. Optional cookies (a Google map on our About page) load only if you allow them.
- You can ask to see, correct or delete your data, or withdraw consent, by writing to [email protected].
01Who we are
ELA Designer Joolry (“we”, “us”) runs the website elajoolry.com and the ELA Designer Joolry Android app. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for the personal data described here, which means we decide why and how it is used and we are responsible for it.
Our showroom: Shah & Nahar Industrial Estate, A-1 / 251, Sitaram Jadhav Marg, Lower Parel, Mumbai 400013, Maharashtra, India.
This policy is also our privacy policy under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
02What we collect
| Data | When | Used to |
|---|---|---|
| Account details: full name, username, password, phone number, and if you add them, email and organisation | When you create an account | Create and secure your account, show you our catalogue, contact you about your account |
| Sign-in records: date and time, IP address, approximate location worked out from the IP address (city, region, country, postal code, internet provider), device type and model, operating system and browser | Each time you sign in on the website or the app | Protect accounts, detect misuse, and let our staff see and end active sessions |
| Enquiries and appointments: name, phone, email, company, preferred date and time, the designs you ask about, your message, and the IP address the request came from | When you send an enquiry or book a consultation | Reply to you, prepare quotes, arrange your visit, block spam |
| Orders: the design, price and your contact details | When an enquiry becomes an order | Fulfil the order and keep the accounting records the law requires |
| Newsletter: email address and the IP address it was submitted from | When you subscribe | Send you new collections and previews |
| Cart: the designs you add | While you browse | Build your enquiry; held only in your session |
| Technical data: IP address, browser, page requested and time | Every visit, in our server logs | Keep the site running and secure, and investigate faults |
We do not take card or bank details on this website, and we do not ask for Aadhaar, PAN or any other government ID online. Please do not include such details in enquiry messages.
03Passwords and sign-in
- Since 8 November 2026 we store passwords only as a one-way hash (bcrypt). Our staff cannot read your password.
- If you forget your password, contact us. We will confirm who you are and set a new one for you.
- We will never ask for your password by phone, email or WhatsApp. Do not share it with anyone.
- Showroom accounts can be set to expire after a visit. Our staff can extend or close an account at any time.
- Your sign-in is kept by a session cookie that ends when you log out or close the browser. All pages are served over an encrypted HTTPS connection.
04Why we use it, and on what basis
We process personal data for the purposes listed in section 2, and only on these grounds allowed by the DPDP Act:
- Your consent, which you give when you create an account, subscribe, or accept optional cookies. You can withdraw it at any time, as easily as you gave it (see section 10).
- Legitimate uses under Section 7 of the DPDP Act: where you have voluntarily given us data for a specific purpose, such as an enquiry or an appointment request, and to comply with the law, a court order or a request from a government authority.
We do not sell personal data, we do not run advertising or tracking cookies, and we do not make automated decisions that affect you.
06App permissions
The ELA Designer Joolry Android app asks for these permissions, and only uses them for the features named:
- Camera: to scan product barcodes and QR codes, and for the 3D and augmented-reality viewer. The camera feed is processed on your phone. We do not record or upload it.
- Microphone: Android requests it together with the camera for the 3D viewer. The app does not record or store audio.
- Internet: to load the catalogue and stock.
- Storage on your device: the app keeps catalogue images and stock on your phone so it works offline. This stays on your phone and is removed when you clear the app’s data or uninstall it.
When you share a design to WhatsApp or another app, that app’s own privacy policy applies to what you send. You can turn any permission off in your phone’s Settings; the related feature will then stop working.
08How long we keep it
| Data | Kept for |
|---|---|
| Account details | While your account is open. We delete them on request, or within 3 years of your last sign-in, unless the law requires us to keep them longer. |
| Sign-in and security records | At least 1 year, as the DPDP Rules, 2025 require, then deleted. |
| Enquiries and appointment requests | 3 years from your last contact with us. |
| Orders and invoices | 8 years, as required by accounting and GST law. |
| Newsletter email | Until you unsubscribe. |
09How we protect it
- Encrypted HTTPS connections on every page.
- Passwords stored only as one-way hashes.
- Access to customer data limited to authorised staff, with staff sign-ins recorded.
- Spam and abuse filters on our enquiry forms.
No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the DPDP Act requires, including what happened and what you can do.
10Your rights
Under the DPDP Act you can:
- Access a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
- Correct, complete or update it, or ask us to erase it when it is no longer needed.
- Withdraw consent at any time. We will then stop the processing that relied on it. Anything done before you withdrew stays lawful.
- Raise a grievance with our Grievance Officer (section 12).
- Nominate someone to exercise these rights for you if you die or become unable to do so.
To use any of these rights, email [email protected] with the subject “Privacy request”, or call us. We may ask you to confirm your identity first. We reply within 30 days, and resolve grievances within the 90 days the DPDP Rules allow.
If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
To stop newsletters, use the unsubscribe link in any newsletter email or write to us.
11Children
Accounts are for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their details, contact us and we will delete them. Anyone may browse the catalogue as a guest.
12Grievance Officer
For questions, requests or complaints about your personal data, contact:
13Changes to this policy
When we change this policy we will update the date at the top of this page. If a change affects how we use data you have already given us, we will tell you on the website or by email, and ask for your consent again where the law requires it.