Privacy Policy
How Glora Sheet protects your privacy, secures WhatsApp and lead integrations, and complies with India's highest data protection standards.
1. Overview & Commitment to Privacy
Glora Sheet (“we”, “our”, or “us”), operating under the primary brand domain glorasheet.com, is Delhi NCR's leading distributor of architectural decorative sheets, marble glora sheets, natural wood textures, artistic relief panels, and luxury interior surface materials.
This comprehensive Privacy Policy document details the transparent methodologies by which we collect, record, process, store, and safeguard personal and commercial information collected through our website, mobile communications, quotation generators, sample request workflows, and third-party integration platforms like WhatsApp.
2. Statutory Governance & Legal Framework
Our data collection, handling, and governance protocols strictly comply with all relevant Indian statutory enactments and digital regulatory frameworks, specifically:
- Digital Personal Data Protection Act, 2023 (DPDP Act 2023): Upholding the fundamental principles of purpose specification, data minimization, consent management, data principal rights, and grievance redressal.
- Information Technology Act, 2000 (IT Act 2000): In compliance with Section 43A and Section 72A addressing data security and unauthorized disclosure.
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules): Ensuring comprehensive managerial, operational, technical, and physical safeguards.
- Consumer Protection (E-Commerce) Rules, 2020: Ensuring honest disclosure and consumer protection for all online catalog enquiries and commerce transactions.
3. Categories of Data We Collect
We gather only the explicit information required to fulfill product sample dispatches, quote project estimates, and arrange safe surface transport to your site:
- Identity & Contact Details: Full name, telephone/mobile number, email address, company/design firm name, and professional role (architect, interior designer, contractor, or homeowner).
- Sample & Material Dispatch Addresses: Delivery address, PIN code (covering Delhi, Gurugram, Noida, Greater Noida, Faridabad, Ghaziabad, and inter-state North India), site landmark, and site contact person for unloading.
- Project Specifications: Selected sheet codes (e.g., GS01AA001 series, wood veneer grain requests), square footage requirements, finish specifications, and photos/blueprints shared voluntarily for consultations.
- Technical & Telemetry Data: IP address (anonymized for rate-limiting), browser type, operating system, and high-level browsing patterns to optimize catalog loading speeds.
4. WhatsApp & Platform Integration Security
A substantial portion of interior design consultations, high-resolution texture video previews, and free sample confirmations occur via our official WhatsApp integration channels (+91 80765 15402). We enforce rigorous security protocols over this workflow:
WhatsApp Enterprise Security Architecture
- End-to-End Encryption: All conversations initiated through our official WhatsApp links are protected by WhatsApp's Signal protocol encryption. Only you and our authorized material consultants can read what is sent.
- Zero Telemarketing Sharing: Your WhatsApp phone number is never shared with third-party aggregators, advertisement networks, or external lead brokers.
- Strict Access Control: Only vetted customer service executives and logistics dispatch managers have access to WhatsApp enquiry logs, secured via multi-factor authentication (MFA).
- Ephemeral Blueprints: Architectural blueprints and project elevation drawings shared for material calculation are stored securely on access-controlled drives and never publicised without explicit written consent.
When you click a “Chat on WhatsApp” or “Order Sample on WhatsApp” button on Glora Sheet, a pre-formatted message including the product code is loaded into your WhatsApp application. You maintain full autonomy over whether to transmit the message.
5. Legitimate Purpose of Data Processing
We process collected customer information strictly under the following legal bases:
- Contractual Fulfillment: Processing order bookings, invoicing commercial project orders, and arranging doorstep physical sample dispatches.
- Customer Support & Technical Consultation: Answering queries about adhesive selection (heat-resistant, solvent-based), surface bending radii, and substrate compatibility.
- Logistics Coordination: Sharing your site delivery location and unloading phone number with our specialized tempo/flatbed delivery drivers across Delhi NCR.
- Legal & Tax Compliance: Maintaining GST billing records and audit trails in accordance with the Goods and Services Tax Act, 2017.
6. Payment Processing & Transaction Security
Financial trust is foundational to our e-commerce and wholesale operations. We maintain absolute compliance with modern banking and digital payment security:
- PCI-DSS Certified Gateways: Online payments (UPI, credit/debit cards, net banking) are handled directly through Reserve Bank of India (RBI) authorized payment aggregators (e.g., Razorpay) certified to PCI-DSS Level 1.
- No Cardholder Data Retention: Glora Sheet never sees, processes, or stores your 16-digit card number, CVV code, expiration date, or UPI MPIN on our web servers or databases.
- Tokenized Transactions: All payment handshakes occur via encrypted HTTPS/TLS 1.3 channels directly with your issuing bank.
7. Infrastructure, Storage & Encryption Standards
Our website infrastructure employs industry-leading technological safeguards to prevent unauthorized access, tampering, or data leakage:
- Encryption in Transit: 100% of network traffic to and from Glora Sheet is enforced over HTTPS utilizing Transport Layer Security (TLS 1.3) with modern cryptographic ciphers.
- Encryption at Rest: Cloud data stores (PostgreSQL and Cloudflare R2 object storage) employ Advanced Encryption Standard (AES-256) at rest.
- Hardened Network Perimeter: Protected by global Content Delivery Networks (CDNs), Web Application Firewalls (WAF), and automated DDoS mitigation.
8. Strict Non-Disclosure & Third-Party Policy
We do not sell, rent, trade, or monetize your personal data. Information is shared solely with vetted sub-processors necessary for service execution:
- Logistics Partners: Local Delhi NCR tempo drivers, courier partners (Bluedart, Delhivery for outstation sample swatches), receiving solely your name, site address, and phone number for delivery execution.
- Infrastructure Providers: Cloud storage and hosting providers (Cloudflare, Neon, Upstash) bound by strict data processing agreements (DPAs).
- Law Enforcement & Statutory Authorities: Only when compelled under lawful summons, court orders, or statutory mandates under Indian law.
9. Data Retention & Automatic Purging
We retain your information only as long as necessary to satisfy the purposes delineated in this policy:
- Sample & Enquiry Records: Retained for 180 days to facilitate re-orders or follow-up consultations, after which non-commercial lead data is systematically pruned.
- Commercial & Tax Records: Invoices, e-way bills, and payment records are maintained for 7 years as mandated under Indian Income Tax and GST legislation.
10. Your Rights under the DPDP Act 2023
As a Data Principal under the Digital Personal Data Protection Act 2023, you enjoy comprehensive sovereignty over your personal data:
- Right to Access: Request a full summary of personal data held about you and processing activities undertaken.
- Right to Correction & Updation: Rectify inaccurate, misleading, or outdated personal information.
- Right to Erasure: Request the deletion of personal data no longer required for statutory or contractual fulfillment.
- Right to Withdraw Consent: Opt out of communications or revoke consent at any time without punitive consequences.
- Right of Grievance Redressal: Register grievances directly with our designated Grievance Officer.
12. Grievance Officer & Official Contact
In accordance with the Information Technology Act 2000 and the DPDP Act 2023, the details of our designated Grievance Officer are published below:
Designation: Compliance & Grievance Redressal Officer
Entity Name: Glora Sheet
Official Address: Delhi, Delhi NCR, 110001, India
Direct Email: [email protected]
Contact Helpline: +918076515402
Response Turnaround: All data principal requests and grievances are acknowledged within 24 hours and resolved within statutory timelines (maximum 15 business days).
Questions regarding this policy?
Contact the Glora Sheet Compliance and Customer Care Desk for official clarifications or grievance redressals.