This policy explains what personal data Poolsmart collects through poolsmart.in, blog.poolsmart.in, WhatsApp, email and phone, why we collect it, who we share it with, and how you can access, correct or delete it.

1. Who we are

Poolsmart ("Poolsmart", "we", "us") is based at SH 49, Uthandi, Kannathur Reddy Kuppam, Tamil Nadu 603112, India. We curate and specify swimming pool and spa systems for residences and hospitality projects.

For the personal data described here, Poolsmart is the Data Fiduciary under the Digital Personal Data Protection Act, 2023.

2. What we collect

When you send an enquiry or request a concierge consultation: your name, phone number, email address, city or project location, project type, the products or spaces you ask about, and anything you write in the message.

When you contact us on WhatsApp, by email or by phone: your number or email address, the name on your account, and the conversation, including any drawings, site photos or documents you send.

When you subscribe to the Journal on blog.poolsmart.in: your email address and, if you give it, your name.

When you browse the site: your IP address, browser and device type, pages viewed, the site that referred you, and an approximate location derived from your IP address. This is collected through cookies and similar technologies (Section 6).

We do not ask for bank or card details, government ID numbers, or health information through the site. Please do not include them in forms or messages.

3. How we use it

• To respond to your enquiry and advise on products, specifications and project scope
• To prepare proposals, arrange site visits and keep you updated on your project
• To send product, project and Journal updates, where you have agreed to receive them
• To understand how the site is used, improve it, and measure our advertising
• To keep the site secure, prevent misuse, and meet our legal, tax and accounting obligations

We process your data on the basis of the consent you give when you submit a form, message us or subscribe, and for the legitimate uses the law permits, such as responding to a request you have made or complying with a legal obligation.

4. Who we share it with

We do not sell your personal data. We share it only where needed for the purposes above:

• Brand partners and manufacturers whose products you have enquired about, to specify, quote or supply them
• Installation, service and logistics partners engaged on your project
• Service providers who process data on our behalf: website hosting (GoDaddy), email, WhatsApp Business (Meta), analytics and advertising (Google, Meta) and our CRM. They may use your data only to provide their service to us.
• Government or regulatory authorities, where the law requires it

5. Data stored outside India

Some of our service providers, including Google and Meta, store data on servers outside India. We transfer personal data outside India only as Indian law permits, including any restrictions notified by the Government of India.

6. Cookies and analytics

• Essential cookies keep the site and its forms working.
• Analytics (Google Analytics 4 and Microsoft Clarity) show us which pages are used and how visitors move through the site.
• Advertising (Google Ads tag and Meta Pixel) measures our ads and lets us show relevant ads on other platforms.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop the enquiry forms from working. You can also manage ad personalisation in your Google and Meta account settings.

7. How long we keep it

• Enquiries and conversations: up to 3 years after our last interaction, or longer while a project is in progress
• Project, invoice and payment records: for the period required under tax and company law
• Journal subscriptions: until you unsubscribe
• Analytics data: for the retention period set in each analytics tool

After that, we delete the data or remove what identifies you.

8. How we protect it

Access to personal data is limited to people who need it for the purposes above. The site uses HTTPS, our accounts are access-controlled, and our service providers are bound to protect the data they handle for us. No system is completely secure. If a breach affects your data, we will inform you and the Data Protection Board of India as the law requires.

9. Your rights

You can ask us to:

• Access a summary of the personal data we hold about you and how we use it
• Correct or update data that is inaccurate or incomplete
• Erase your data, where we no longer need it and the law does not require us to keep it
• Withdraw consent at any time, as easily as you gave it. This does not affect processing already carried out.
• Nominate a person to exercise these rights on your behalf in the event of death or incapacity
• Raise a grievance with us, and if it is not resolved, complain to the Data Protection Board of India

To stop marketing messages, reply STOP on WhatsApp or use the unsubscribe link in any email. For any other request, email info@poolsmart.in with the subject "Privacy request". We may ask you to confirm your identity before acting on it.

10. Children

This site is meant for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared data with us, contact us and we will delete it.

11. Other websites

Our site links to Instagram, Facebook, LinkedIn and brand partner websites. Their own privacy policies apply when you visit them.

12. Changes to this policy

We update this policy when our practices or the law change. The date at the top shows the latest version. If a change is significant, we will note it on the site.

13. Contact and Grievance Officer

We acknowledge every privacy request or grievance within 7 days and resolve it within 30 days.