Privacy Policy

We collect personal information only when you choose to share it with us. That includes:

• Information you submit through forms. Name, email, phone, company, country, city and the contents of any message — when you contact us, request a quote, apply to become a partner, or request access to architects’ resources.
• Showroom and project enquiry details. Project location, scope, and design references you choose to share with our team.
• Technical information. IP address, browser type, device, referring page and pages viewed — collected automatically by our hosting provider and analytics tools to keep the site secure and understand which content is useful.
• Cookies and similar technologies. See “Cookies” below.

We do not collect special-category personal data (health, biometrics, political views, etc.) and do not knowingly collect any data from children under 18.

We use what you share for these specific purposes:

• To respond to your enquiry, quote request, or partnership application.
• To send you the information you asked for (catalogues, finish samples, access to architect resources).
• To improve our products, our service, and the website itself — understanding which pages are read, which products are queried, and what visitors look for.
• To meet our legal and tax obligations as a registered Indian company.

We do not use your information to send unsolicited marketing. If you choose to receive our journal or new-product announcements, we ask explicitly and you can unsubscribe at any time.

We process personal information on one of the following lawful bases, depending on the situation:

• Consent — when you submit a form or sign up to a mailing list.
• Legitimate business interests — to operate the website, prevent fraud, and improve our service in ways you would reasonably expect.
• Performance of a contract — to fulfil an order, quote or partnership agreement you have entered into with us.
• Legal obligation — where Indian law (Income Tax Act, GST law, DPDP Act 2023) or any applicable foreign law requires.

We do not sell, rent, or trade your personal information. We share it only with:

• Trusted service providers who help us run the business — our website host (Vercel), email-delivery service (Resend), content platform (Sanity), and analytics (Google Analytics 4). These providers process information under written contracts and only on our instructions.
• Authorised channel partners and showrooms in your region, where you have specifically asked to be put in touch with a local representative.
• Regulators, law-enforcement and courts, where we are legally required to disclose information.

Some of these providers are based outside India. Where personal information is transferred outside India, we ensure contractual safeguards equivalent to the protections required under the DPDP Act 2023 and, where applicable, the EU Standard Contractual Clauses.

numaex.com uses a small number of cookies and similar technologies:

• Strictly necessary cookies — to load the site, remember your preferences (e.g. filter selections on /projects), and protect against abuse. These cannot be turned off.
• Analytics cookies — set by Google Analytics 4 to count visits and understand which pages are read. IP addresses are anonymised before processing.
• Embedded media — pages with embedded video may set cookies from the video provider. We do not control those cookies.

You can disable cookies in your browser settings. Doing so may affect how the site behaves but will not block access.

We keep personal information only as long as we need it for the purposes set out above, and then we delete or anonymise it. As a general rule:

• Website enquiries: up to 36 months after the last contact.
• Partnership applications that did not proceed: up to 24 months.
• Customer & supplier records: as long as required by Indian tax and accounting law.
• Analytics data: aggregated and retained up to 26 months.

You have the right to:

• Ask what personal information we hold about you.
• Have inaccurate information corrected.
• Have your information deleted, where there is no overriding legal need to keep it.
• Withdraw consent at any time, where we rely on consent.
• Object to processing based on our legitimate interests.
• Receive a copy of your data in a portable format.
• Lodge a complaint with the Data Protection Board of India or the relevant supervisory authority in your country.

To exercise any of these rights, write to us at privacy@numaex.com. We will respond within 30 calendar days, normally faster.

We use TLS encryption across all numaex.com traffic, encrypt data at rest with our content and database providers, and limit access to personal information to staff who need it to do their jobs. Our internal CRM is hosted on encrypted servers behind multi-factor authentication.

No system is perfectly secure. If we ever discover a breach affecting your personal information, we will notify you and the appropriate regulator without undue delay, in line with the DPDP Act 2023.

We review this policy at least once a year. If we make a material change, we will update the “last updated” date at the top and, where appropriate, notify you by email or a banner on the site.

For any privacy question, request, or concern, please write to our Data Protection Officer:

Data Protection Officer

Agniforma Architectural Glass Pvt. Ltd.

NUMAEX, Surat, Gujarat, India

privacy@numaex.com