Skip to content

Your Cart

Your cart is empty

Your Privacy

Privacy Policy

Shyam Ahuja ("we", "us", "our") is committed to protecting your privacy and handling your personal data with care, transparency, and respect. This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal information when you:

  • Visit and use our website at shyamahuja.com
  • Place an order for ready-made or bespoke products
  • Submit an enquiry, consultation request, or showroom appointment
  • Subscribe to our newsletter or communications
  • Interact with us via email, phone, WhatsApp, or any other channel

By accessing our website or engaging with our services, you signify that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our website and services.

This Privacy Policy is governed by and must be read in conjunction with:

  • The Digital Personal Data Protection Act, 2023 (DPDP Act)
  • The Information Technology Act, 2000 (IT Act)
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)

Last Updated: February 15, 2026

Questions? Contact Us

01

Definitions

To ensure clarity throughout this document, the following terms are defined:

Shyam Ahuja / We / Us / Our: Shyam Ahuja, a luxury handcraft brand operating under the Jaipur Rugs Group, with its registered office at G-250, Mansarovar Industrial Area, Jaipur, Rajasthan, India — 302020.
You / User / Customer:Any individual or entity who visits our website, places an order, submits an enquiry, or interacts with Shyam Ahuja in any capacity.
Personal Data: Any information that, directly or indirectly, allows for the identification of a natural person. This includes, but is not limited to, name, email address, phone number, postal address, IP address, and purchase history.
Sensitive Personal Data: As defined under India's SPDI Rules 2011 — passwords, financial information, physical or mental health conditions, sexual orientation, medical records, biometric information, and similar data. Shyam Ahuja does not collect sensitive personal data.
Data Fiduciary: Under the DPDP Act 2023, Shyam Ahuja is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data.
Data Principal: You — the individual whose personal data is being collected and processed.
Processing: Any operation performed on personal data, including collection, recording, storage, use, sharing, disclosure, or deletion.
Cookie: A small piece of data generated by a website and saved by your browser. It is used to identify your browser, store preferences, remember login information, and enable analytics.
Device: Any internet-connected device — phone, tablet, computer, or any other — used to access our website.
IP Address: A unique number assigned to every device connected to the internet. It can often be used to identify the general location from which a device is connecting.
Service / Website: The Shyam Ahuja website at shyamahuja.com and all its associated pages, subdomains, and digital touchpoints.
Third Party: Any individual, company, or organisation that is not Shyam Ahuja or you, the user.
02

Who We Are and How to Contact Us

Shyam Ahuja

G-250, Mansarovar Industrial Area

Jaipur, Rajasthan, India — 302020

shop@shyamahuja.com

+91 92516 64409

For all privacy-related queries, requests, or complaints, please contact us directly at shop@shyamahuja.com.
03

What Personal Data We Collect

We collect personal data only when it is necessary to serve you and only through lawful means. Below is a comprehensive account of what we collect and how.

3.1 Information You Provide Directly


When you interact with our website or team, you may provide:


  • Identity Information: Full name, title
  • Contact Information: Email address, phone number, WhatsApp number
  • Delivery and Billing Address: Street address, city, state, PIN code, country
  • Order Information: Products selected, customisation details, special instructions
  • Bespoke Order Details: Design preferences, dimensions, colour choices, material selections, reference images, installation information
  • Payment Information: We do not collect or store card or bank account details directly. All payment data is processed through our secure, third-party payment gateway. We receive only a transaction reference and confirmation of payment.
  • Consultation Details: Notes, preferences, and communications exchanged during digital or in-person design consultations
  • Account Information: Username and password if you create an account on our website
  • Communication Records: Emails, WhatsApp messages, enquiry form submissions, and any other written or digital correspondence you send to us
  • Feedback and Reviews: Any ratings, testimonials, or feedback you provide voluntarily

3.2 Information Collected Automatically


When you visit our website, we automatically collect certain technical and behavioural data:


  • IP Address and Geolocation Data: Used to identify your approximate location and improve website performance
  • Device Information: Device type, operating system, browser type and version
  • Usage Data: Pages visited, time spent on each page, links clicked, scroll depth, entry and exit pages
  • Referral Data: The website or search query that directed you to our website
  • Session Data: Date and time of your visit, session duration
  • Log Data: Server logs that record your interaction with our website for security and diagnostic purposes
  • Cookie Data: See Section 7 below for full details on cookies and tracking technologies

3.3 Information from Third Parties


We may receive personal data about you from:


  • Payment Gateways: Transaction confirmation and fraud signals
  • Logistics Partners: Delivery status updates and address verification
  • Analytics Providers: Aggregated behavioural data from tools such as Google Analytics
  • Social Media Platforms: If you engage with our content on Instagram, Facebook, or other platforms and those platforms share interaction data with us
  • Referral Partners: If you are referred to us by an interior designer, architect, or business partner

3.4 Information We Do Not Collect


We do not collect:


  • Sensitive Personal Data: Including financial account numbers, government identity numbers (Aadhaar, PAN), health or medical information, or biometric data
  • Children’s Data: Personal data from children under the age of 18 (see Section 13)
  • Card Information: Credit or debit card numbers — these are handled entirely by our payment gateway
04

How We Use Your Personal Data

We use the personal data we collect for specific, legitimate purposes only. We will never use your data for purposes beyond those listed below without informing you and obtaining your consent.

4.1 To Process and Fulfil Your Orders


  • Process, confirm, and dispatch your purchases
  • Communicate order status, shipping updates, and delivery tracking
  • Manage returns, exchanges, or replacements
  • Handle payment verification and fraud prevention

4.2 To Manage Bespoke and Custom Projects


  • Record and process your design specifications and preferences
  • Coordinate with our artisans and production team
  • Share project updates and approval requests throughout the production process
  • Maintain a record of your bespoke history for future reference and repeat orders

4.3 To Respond to Enquiries and Provide Customer Support


  • Respond to questions, complaints, and feedback
  • Manage consultation appointments and follow-ups
  • Resolve disputes and process refund or exchange requests
  • Provide after-sales support and care guidance

4.2 To Manage Bespoke and Custom Projects


  • Record and process your design specifications and preferences
  • Coordinate with our artisans and production team
  • Share project updates and approval requests throughout the production process
  • Maintain a record of your bespoke history for future reference and repeat orders

4.3 To Respond to Enquiries and Provide Customer Support


  • Respond to questions, complaints, and feedback
  • Manage consultation appointments and follow-ups
  • Resolve disputes and process refund or exchange requests
  • Provide after-sales support and care guidance

4.4 To Send You Marketing Communications


  • Send newsletters, new collection announcements, event invitations, and exclusive offers — only if you have explicitly opted in
  • Personalise content and recommendations based on your browsing or purchase history
  • Reach you through social media platforms using custom audience tools, where permitted by your settings

You can opt out of marketing communications at any time. See Section 10 for details.


4.5 To Improve Our Website and Services


  • Analyse how visitors use our website to improve design, navigation, and content
  • Conduct internal research and analytics
  • Test new features, collections, or services
  • Monitor and resolve technical issues

4.6 To Comply with Legal Obligations


  • Maintain financial and transaction records as required under Indian law
  • Respond to lawful requests from courts, government authorities, or regulatory bodies
  • Detect, investigate, and prevent fraudulent or illegal activity
  • Enforce our Terms and Conditions and other agreements
05

Legal Basis for Processing Your Personal Data

Under India's DPDP Act 2023, we process your personal data based on the following legal grounds:

Consent: Where you have given us explicit, informed, and voluntary consent to process your data. This applies to marketing communications, cookie-based tracking, and optional data collection. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Contractual Necessity: Where processing is necessary to fulfil your order, manage a bespoke project, or provide the service you have requested. Without this data, we cannot complete your purchase or deliver your product.

Legal Obligation: Where we are required by Indian law to process and retain certain data — for example, financial records under the Companies Act or GST regulations.

Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes website security, fraud prevention, and improving our products and services.
06

How We Share Your Personal Data

Shyam Ahuja does not sell, rent, or trade your personal data to any third party for commercial gain. We may share your data in the following limited and controlled circumstances:

6.1 Logistics and Delivery Partners


We share your name, contact number, and delivery address with our courier and logistics partners solely for the purpose of delivering your order. These partners are contractually bound to use your data only for delivery and not for any other purpose.

6.2 Payment Gateway Providers


Your payment is processed by a secure, third-party payment gateway. We share only the transaction reference required for processing. We do not share, store, or have access to your card or banking details.

6.3 Technology and IT Service Providers


We work with third-party technology providers for website hosting, email delivery, customer relationship management, and data analytics. These providers access your data only to the extent necessary to provide their services to us and are bound by data processing agreements.

6.4 Marketing and Analytics Platforms


If you have opted into marketing communications, we may share your email address or other contact details with email marketing platforms or social media platforms (such as Meta) for the purpose of delivering targeted communications. This is done only with your consent and you can withdraw it at any time.

6.5 Interior Designers, Architects, and Trade Partners


If your order is placed or coordinated through a trade partner such as an interior designer or architect, we may share relevant order details with them. We will not share your personal data with trade partners beyond what is necessary for your project.

6.6 Legal and Regulatory Authorities


We will disclose your personal data to courts, law enforcement agencies, or government regulators if we are legally required to do so, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

6.7 Business Transfers


In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Shyam Ahuja's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and your data will remain subject to this Privacy Policy.

6.8 With Your Explicit Consent


We may share your data with any third party not listed above if you give us your explicit written consent to do so.
07

Cookies and Tracking Technologies

7.1 What Are Cookies?


Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over time. Our website also uses similar technologies such as web beacons and pixel tags, which work alongside cookies to help us understand how our website is used.

7.2 Types of Cookies We Use


Strictly Necessary Cookies: These are essential for the website to function correctly. They allow you to browse the site, add items to your enquiry list, and complete purchases. These cannot be disabled.

Preference Cookies: These remember your choices — such as language, region, or layout preferences — to provide a more personalised experience.

Analytics and Performance Cookies:These help us understand how visitors use our website by collecting anonymous data on pages visited, time spent, and browsing paths. We use tools such as Google Analytics for this purpose.

Marketing and Targeting Cookies: These track your browsing activity to show you relevant advertisements on other websites and platforms. They may be set by us or by third-party advertising partners, including social media platforms.

7.3 Your Cookie Choices


In accordance with India's DPDP Act 2023, we request your explicit consent before placing non-essential cookies on your device. You will be presented with a cookie consent banner when you first visit our website.

You may at any time:

  • Accept all cookies
  • Accept only essential cookies
  • Manage your preferences for individual cookie categories
  • Withdraw your consent by adjusting your browser settings or cookie preferences on our website

Please note: disabling certain cookies may affect the performance and functionality of our website, but will not prevent you from browsing or making an enquiry.

7.4 Third-Party Cookies


Some cookies on our website are set by third parties, including Google Analytics and Meta (Facebook). These third parties may independently collect data in accordance with their own privacy policies. We encourage you to review those policies separately.
08

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Indian law. Below are our standard retention periods:

Data Type Retention Period
Order and transaction records Minimum 7 years (as required under Indian financial and tax law)
Bespoke order records 7 years from project completion
Customer account data For the duration of the account, plus 2 years after closure
Enquiry and consultation records 2 years from last interaction
Marketing and communication preferences Until you opt out, then deleted within 30 days
Website analytics data Up to 26 months (Google Analytics default)
Cookie consent records 3 years from date of consent
Legal and compliance records As required by applicable law

Once data is no longer required, it is securely deleted, anonymised, or archived in a manner that prevents identification.
09

Data Security

We take the security of your personal data seriously and have implemented appropriate technical, physical, and organisational safeguards to protect it.

Technical Measures:

  • SSL (Secure Sockets Layer) encryption for all data transmitted between your browser and our servers
  • Secure, PCI-compliant third-party payment gateways
  • Password protection and access controls on all internal systems
  • Regular software updates and security patching

Organisational Measures:

  • Restricted access to personal data — only authorised personnel who need it to perform their role
  • Internal data handling guidelines and training for staff
  • Contractual data protection obligations imposed on all third-party service providers

Limitations: No method of electronic transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required under applicable Indian law, without undue delay.

If you suspect any unauthorised access to your data or account, contact us immediately at shop@shyamahuja.com.
10

Marketing Communications and Your Right to Opt Out

We will send you marketing emails, newsletters, and promotional communications only if you have opted in to receiving them — either during your first purchase, through our website sign-up form, or by any other explicit means.

You can opt out at any time by:

  • Clicking the unsubscribe link at the bottom of any marketing email we send
  • Writing to us at shop@shyamahuja.com with the subject line "Unsubscribe"
  • Calling us at +91 92516 64409 and requesting removal from our mailing list

Once you opt out, we will remove you from our marketing list within 7 business days. Please note that opting out of marketing communications does not affect our ability to send you transactional emails related to active orders, bespoke projects, or enquiries.
11

Your Rights as a Data Principal

Under the Digital Personal Data Protection Act 2023 and applicable Indian law, you have the following rights with respect to your personal data:

Right to Access: You may request a copy of the personal data we hold about you, along with information on how it is being used and with whom it has been shared.

Right to Correction: You may request that we correct any personal data that is inaccurate, incomplete, or outdated.

Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent. This right is subject to our legal obligations to retain certain data.

Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.

Right to Nominate: Under the DPDP Act, you have the right to nominate an individual who may exercise your data rights on your behalf in the event of your death or incapacity.

Right to Grievance Redressal: You have the right to raise a complaint or concern with us directly if you believe your data has been processed in violation of this policy or applicable law. Please write to us at .

Right to Approach the Data Protection Board: If your grievance is not resolved satisfactorily by us, you have the right to approach the Data Protection Board of India established under the DPDP Act.

To exercise any of the above rights, write to us at shop@shyamahuja.com with the subject line "Data Rights Request." Please include your full name, contact details, and a clear description of your request. We will acknowledge your request within 48 hours and respond fully within 30 days.
12

International Data Transfers

Our website is operated from India and all personal data is stored and processed within India. If you are accessing our website from outside India, please be aware that your data will be transferred to, stored, and processed in India.

By using our website and providing your personal data, you consent to this transfer. We will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

For international customers, data transfers are conducted in compliance with applicable Indian law. We do not currently transfer personal data to countries outside India for the purpose of data processing, except where required by our logistics or payment processing partners, who are bound by their own privacy and security obligations.
13

Children's Privacy

Our website and services are not directed at, and are not intended for use by, individuals under the age of 18. We do not knowingly collect, solicit, or process personal data from children.

If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately at shop@shyamahuja.com. We will investigate and delete such data promptly upon verification.

If we discover that we have collected personal data from a child under 18 without appropriate consent, we will take immediate steps to delete it from our records.
14

Account Security and Responsibility

If you create an account on our website, you are responsible for maintaining the confidentiality of your login credentials. Do not share your password with anyone. Shyam Ahuja will never ask you for your password by email, phone, or any other channel.

You are responsible for all activity that occurs under your account. If you believe your account has been compromised, contact us immediately at shop@shyamahuja.com so we can take appropriate action.
15

Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, or partner pages. Shyam Ahuja is not responsible for the privacy practices, content, or security of those websites.

We strongly encourage you to review the privacy policies of any third-party website before submitting personal information to them. The inclusion of any link on our website does not constitute an endorsement.
16

Changes to This Privacy Policy

We review and update this Privacy Policy periodically to reflect changes in our business practices, legal obligations, or applicable law. When we make material changes, we will:
  • Post the updated policy on this page with a revised effective date
  • Where appropriate, notify you by email if the changes materially affect your rights

Your continued use of our website after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page regularly.
17

Contact Us for Privacy Queries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please get in touch with us directly. We are committed to addressing all privacy-related queries promptly and transparently.

Shyam Ahuja

G-250, Mansarovar Industrial Area

Jaipur, Rajasthan, India — 302020

shop@shyamahuja.com

+91 92516 64409

Monday to Saturday, 10:00 AM to 6:00 PM IST

When writing to us, please include:
  • Your full name and contact details
  • A clear description of your query, concern, or request
  • Any relevant order number or account information, if applicable

We will acknowledge your query within 48 hours and aim to resolve it fully within 30 days of receipt.
18

Entire Agreement

This Privacy Policy, together with our Terms and Conditions, constitutes the entire agreement between you and Shyam Ahuja regarding the collection, use, and protection of your personal data. In the event of any conflict between this policy and any other document, this Privacy Policy shall prevail with respect to data privacy matters.

Need Assistance?

We're Here to Help

Our dedicated team is available to answer any questions regarding our policies and services.

Contact Us