Privacy Policy

Last updated: 27 May 2026  ·  Effective from the date of last update

At MyCarpenter, we take your privacy seriously. This Privacy Policy explains what personal information we collect when you use mycarpenter.online or book any service with us, how we use it, who we share it with, and your rights over it. We are committed to handling your data in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

This Privacy Policy forms part of our Terms & Conditions. By using our Platform or booking a service, you confirm you have read and accepted this Policy.

1. Definitions

• "You" or "Data Principal" means the individual whose personal data is collected and processed by us.
• "We", "Us", "Our", or "Data Fiduciary" means Designs Palette Development Solutions LLP, operating the MyCarpenter brand.
• "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
• "Sensitive Personal Data or Information (SPDI)" as defined under Rule 3 of the SPDI Rules, 2011 — including passwords, financial information, biometric data, and similar categories.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, retrieval, use, disclosure, and erasure.
• "Platform" means the website mycarpenter.online and our WhatsApp, telephone, and email booking channels.
• "Service Provider" means any third party (such as Razorpay, AiSensy, or WhatsApp Business) we engage to assist in service delivery.

2. Information We Collect

2.1 Information You Provide to Us

• Identity: Full name, date of birth (if provided)
• Contact: Mobile number (WhatsApp), email address, service address (flat/house number, building, street, area, PIN)
• Account credentials: One-Time Passwords (OTPs) for login verification
• Booking details: Service requested, time slot, special instructions, materials notes
• Communication: Messages, calls, and chat history between you and our support team or your assigned carpenter
• Feedback & ratings: Service ratings, written reviews, complaints, and feedback shared with us
• AMC subscription data: For AMC subscribers — last 4 digits of Aadhaar (for identity cross-verification only; see Section 7), AMC Reference Number, and contract details

2.2 Information Collected Automatically

• Device information: Device type, browser type, operating system, IP address
• Usage data: Pages visited, time spent, click patterns, referring URLs
• Cookies and similar technologies: See Section 8
• Location: Approximate location derived from IP address or your service address (we do not track real-time GPS location)

2.3 Information from Service Delivery

• Before/after job photographs taken by our carpenter at your premises — see Section 6 for detailed handling
• Job completion reports filed by the carpenter, including work performed and any observations
• Carpenter feedback about service conditions, customer interactions, or any issues encountered

2.4 Information from Third Parties

• Payment confirmation data from Razorpay (transaction status, payment method type — but not card numbers or bank account details)
• Delivery confirmations from WhatsApp Business API / AiSensy

3. How We Use Your Information

We use your Personal Data only for the following specific purposes:

• Service delivery: Confirming bookings, assigning carpenters, sharing your address and contact with the assigned carpenter for the service visit, sending booking confirmations and visit reminders
• Communication: Sending WhatsApp updates about your booking, calling you with arrival notifications, responding to support queries
• Payment processing: Routing payments through Razorpay, generating invoices, processing refunds
• AMC administration: Tracking free-visit balance, sending renewal reminders, applying AMC discounts at booking
• Quality assurance: Reviewing carpenter performance, investigating complaints, improving service quality
• Legal & tax compliance: Maintaining GST-compliant records, complying with audit requests, responding to lawful government requests
• Security: Detecting fraud, preventing account misuse, investigating suspicious activity
• Marketing (optional, with your consent): Sending service updates, seasonal offers, and information about Designs Palette home consultations. You may opt out at any time

We will not use your Personal Data for any purpose materially different from the above without your explicit consent.

4. Legal Basis for Processing

We process your Personal Data based on one or more of the following legal grounds:

• Consent: You provide consent when registering, booking a service, or subscribing to an AMC. Consent is the primary basis for all processing.
• Performance of contract: Processing necessary to deliver the booked Service or honour the AMC Contract.
• Legal obligation: Compliance with tax laws (GST records), the IT Act, and other applicable Indian regulations.
• Legitimate interest: Limited use for fraud prevention, service quality improvement, and internal record-keeping, balanced against your privacy rights.

5. Sharing & Disclosure of Information

We do not sell, rent, or trade your Personal Data to any third party. We share your data only with the parties below, and only to the extent necessary:

5.1 With the Assigned Carpenter

Your name, mobile number, service address, and details of the booked Service are shared with the specific carpenter assigned to your job — strictly for service delivery. Carpenters are bound by a Service Partner Agreement requiring them to maintain confidentiality and use this data only for the service visit.

5.2 With Service Providers

Provider	Purpose	Data Shared
Razorpay Software Pvt. Ltd.	Payment gateway	Name, email, mobile, transaction amount, booking reference
WhatsApp Business API (via AiSensy)	Customer messaging, booking confirmations	Mobile number, message content, booking reference
Airtel Smartping (DLT platform)	SMS / OTP delivery	Mobile number, OTP, transactional message content
Web hosting & analytics	Website operation, usage analytics	IP address, device type, page-view data

Each Service Provider is bound by its own privacy policy and applicable data protection law. We select Service Providers that meet reasonable security standards.

5.3 With Designs Palette Development Solutions LLP

As MyCarpenter is operated by Designs Palette Development Solutions LLP, your information may be accessed by other teams within DPDS LLP — specifically the Designs Palette interior design team — only for the limited purpose of offering you home improvement or interior design consultations. You may opt out of this internal sharing at any time by emailing hello@mycarpenter.online. Opting out does not affect your MyCarpenter service.

5.4 Legal & Regulatory Disclosures

We may disclose your Personal Data when required to:

• Comply with a court order, summons, or other legal process;
• Respond to lawful requests from government authorities, including tax, police, or regulatory bodies;
• Investigate or defend against legal claims involving MyCarpenter;
• Protect the rights, property, or safety of MyCarpenter, our carpenters, our customers, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of DPDS LLP, your Personal Data may be transferred to the acquiring entity as part of the transaction, subject to the acquirer agreeing to honour this Privacy Policy or providing notice of any changes.

6. Before/After Job Photographs

Our carpenters take photographs of the work area before and after each Service. These photos serve three purposes: proof of work completion, quality assurance, and dispute resolution.

How we handle these photos:

• Photos are limited to the immediate work area — not wider views of your home, family members, or unrelated belongings;
• Photos are sent to your registered WhatsApp number for your records;
• Photos are stored on our secure servers as part of the Booking ID record;
• We do not publish, post on social media, or use any photo from your home for marketing without your separate written consent;
• You may request deletion of specific photos by emailing hello@mycarpenter.online.

If a carpenter inadvertently captures images that include people, sensitive items, or private spaces, please notify us within 7 days and we will delete those images.

7. Aadhaar Handling

For AMC subscribers, we collect only the last 4 digits of your Aadhaar number at the time of subscription, used solely as an identity cross-verification reference. We do not collect the full Aadhaar number, do not perform Aadhaar-based authentication through UIDAI, and do not store any copy of your Aadhaar card.

The last 4 digits are stored as part of your AMC Contract record and are accessed only in the event of identity verification disputes. This data is governed by the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016, and the relevant UIDAI guidelines.

If you would prefer not to provide even the last 4 digits, you may opt out by request — we will use alternative identity references (such as your registered mobile number) in such cases.

8. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

• Strictly necessary cookies: Keep you logged in, remember your booking-cart state, secure form submissions;
• Performance cookies: Track aggregate usage so we can improve page speed and navigation;
• Functional cookies: Remember your preferences (e.g., preferred language) across visits.

We do not currently use third-party advertising cookies. You may disable cookies via your browser settings; however, certain features of the Platform (notably login and booking) may not function correctly without them.

9. Data Security

We follow reasonable security practices and procedures as required under Rule 8 of the SPDI Rules, 2011, and as guided by industry-standard frameworks. Specifically:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using HTTPS (TLS);
• Access controls: Personal Data is accessible only to MyCarpenter employees, contractors, and Service Providers on a strict need-to-know basis;
• Authentication: All customer accounts are protected by OTP-based authentication;
• Carpenter agreements: Every carpenter signs a confidentiality agreement before accessing any customer data;
• Payment security: Card and bank details are handled exclusively by Razorpay, which is PCI-DSS compliant. We do not store payment-instrument data.

10. Data Retention

We retain your Personal Data only as long as needed for the purposes set out in this Policy:

Data Category	Retention Period
Account information (name, mobile, email, address)	As long as your account is active, plus 24 months after closure
Booking records and invoices	8 years from the financial year of the booking (as required under GST law)
AMC contracts and related records	8 years from contract expiry (legal & tax compliance)
Before/after photographs	3 years from the service date, unless required for ongoing dispute
Communication logs (WhatsApp, calls, support tickets)	3 years from the date of communication
Website analytics and cookies	Up to 12 months

When the retention period ends, Personal Data is either securely deleted or fully anonymised so it can no longer be linked to you.

11. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, and applicable Indian law, you have the following rights regarding your Personal Data:

• Right to access: Request a summary of the Personal Data we hold about you and the purposes for which it is processed.
• Right to correction: Request that we correct any inaccurate or incomplete data.
• Right to erasure: Request deletion of your Personal Data when it is no longer needed for the purposes collected (subject to legal retention obligations).
• Right to grievance redressal: Raise concerns or complaints about how your data is handled — see Section 15.
• Right to nominate: Nominate another individual to exercise your rights under this Policy in the event of your death or incapacity.
• Right to opt out of marketing: Decline or withdraw consent for marketing communications without affecting service delivery.
• Right to data portability: Request a copy of your data in a commonly used machine-readable format.

To exercise any of these rights, email hello@mycarpenter.online with the subject line "Data Principal Request — [Right Being Exercised]." We will acknowledge within 7 working days and respond substantively within 30 days, as required under applicable law. We may need to verify your identity before processing the request.

12. Withdrawal of Consent

You may withdraw your consent for any optional processing at any time. To do so, email hello@mycarpenter.online or WhatsApp us at +91 81233 62007. Withdrawal is effective once we acknowledge receipt.

Please note: Withdrawing consent may limit our ability to provide you with certain Services. For example, withdrawal of consent for sharing your address with a carpenter will mean we cannot fulfil any new booking. Withdrawal does not affect the lawfulness of processing performed before withdrawal, nor does it override our legal obligations to retain certain records (such as tax invoices).

13. Children's Data

MyCarpenter is not intended for use by individuals under 18 years of age. We do not knowingly collect Personal Data from children. Under the Digital Personal Data Protection Act, 2023, special protections apply to data of children, including verifiable parental consent and a prohibition on tracking, behavioural monitoring, and targeted advertising directed at children.

If you believe a child has registered or submitted Personal Data through our Platform without parental consent, please contact us at hello@mycarpenter.online and we will promptly delete the data.

14. Data Breach Notification

In the unlikely event of a Personal Data breach that is likely to result in significant harm to you, we will:

• Notify affected Data Principals via WhatsApp and email without undue delay;
• Notify the Data Protection Board of India and CERT-In as required under applicable law;
• Describe the nature of the breach, the data categories affected, and the steps we have taken or will take to mitigate the impact;
• Provide guidance on protective measures you may wish to take.

15. Grievance Officer

In accordance with the Information Technology Act, 2000, and the SPDI Rules, 2011, the following officer is responsible for addressing your privacy concerns and grievances:

When emailing the Grievance Officer, please use the subject line "Attn: Grievance Officer — [Brief Description]" so that your message is routed correctly.

If your grievance is not resolved to your satisfaction by the Grievance Officer within 30 days, you may escalate to the Data Protection Board of India once it is constituted under the Digital Personal Data Protection Act, 2023.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for any other operational reason. When we make material changes:

• The "Last updated" date at the top of this page will be revised;
• We will notify you via WhatsApp and email at least 7 days before the change takes effect;
• For significant changes affecting how we process Personal Data, we will seek fresh consent where required by law.

Continued use of the Platform after the effective date of changes constitutes your acceptance of the updated Policy.

17. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your Personal Data:

By using mycarpenter.online or booking any Service, you confirm that you have read, understood, and accepted this Privacy Policy.
© MyCarpenter 2026 — Operated by Designs Palette Development Solutions LLP, Bengaluru.