Privacy Policy

1. Who we are

This Privacy Policy explains how The House of Agrawal LLC, a Georgia limited liability company with its registered office at Cumming, Georgia 30040, United States (“THOA US”), and The House of Agrawal LLP, a limited liability partnership organized under the laws of India with its workshop in Moradabad, Uttar Pradesh (“THOA India,” and together with THOA US, “THOA,” “we,” “us,” or “our”), handle information about you when you visit thehouseofagrawal.com (the “Site”).

THOA US manages customer-facing relationships — sales, trade accounts, press, and client communications. THOA India handles manufacturing. Information you submit through the Site is received by THOA US and shared with THOA India only to the extent necessary to fulfill a specific inquiry or order.

For questions about this Policy, email legal@thehouseofagrawal.com.

2. Scope

This Policy covers the Site only. Separate written agreements — such as trade program terms, non-disclosure agreements, or purchase orders — may govern specific commercial relationships and may contain additional privacy commitments.

We do not operate an online store. The Site is a portfolio and inquiry platform. No transaction is completed on the Site.

3. Information we collect

Information you provide

When you submit a form on the Site — including the contact form, trade application, product inquiry, newsletter signup, or the Inquiry List submission — we collect the information you enter. Depending on the form, this may include:

• —Name
• —Business name, job title, and website
• —Business address, city, state or region, and country
• —Email address and phone number
• —Resale certificate or professional license details (trade applicants)
• —Project description, product interests, and any other details you choose to share

Inquiry List (on-device)

The “Inquiry List” feature stores your selected products in your browser’s localStorage. This data remains on your device and is not transmitted to us unless you submit the list through the inquiry form.

Information collected automatically

When you visit the Site, our hosting provider and our analytics tools receive standard technical data, including:

• —IP address (truncated or anonymized where applicable)
• —Device type, operating system, and browser
• —Pages viewed, referring URL, and time spent
• —Approximate geographic region derived from IP address

Cookies and similar technologies

We use a small number of cookies and similar technologies (such as localStorage and pixels) for essential site function (for example, remembering your Inquiry List and maintaining form state) and for analytics (understanding aggregate usage patterns). You can block or delete cookies through your browser settings. Blocking essential cookies may affect some features.

4. How we use information

We use the information we collect to:

• —Respond to your inquiry, pricing request, or trade application
• —Verify the credentials of trade applicants (e.g., resale certificates, professional licenses)
• —Send communications you have requested, such as our trade newsletter
• —Improve the Site's content, design, and performance
• —Keep records for business, accounting, and compliance purposes
• —Prevent fraud, abuse, and misuse of the Site
• —Comply with applicable law, court orders, and regulatory requests

We do not use your information for automated decision-making that produces legal or similarly significant effects about you.

5. Legal basis for processing

We process personal information where we have a legitimate business interest in operating and promoting our business, where you have given consent (for example, by opting in to the newsletter), where processing is necessary to respond to your request, or where we are required to do so by law.

6. How we share information

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

We share information with service providers who process data on our behalf under contractual obligations of confidentiality:

• —Vercel Inc. — website hosting, deployment, and privacy-friendly aggregate analytics (no cookies, no personal identifiers)
• —Supabase Inc. — database and file storage
• —Resend Inc. — transactional and notification email delivery

We may also share information:

• —Between THOA US and THOA India, as necessary for fulfillment
• —With professional advisors (lawyers, accountants, auditors) under duty of confidentiality
• —In connection with a business sale, merger, financing, or reorganization, subject to confidentiality
• —When required by law, court order, or lawful government request

7. International transfers

THOA US is based in the United States. THOA India is based in India. When you submit information to the Site, it may be transferred to and processed in either jurisdiction. By using the Site, you understand and agree to this cross-border transfer.

8. Data retention

We keep your information for as long as needed to:

• —Maintain an active business relationship with you
• —Respond to inquiries and follow-up communications
• —Comply with tax, accounting, and legal obligations (typically seven years for business records in both the US and India)
• —Resolve disputes and enforce our agreements

When the above purposes are satisfied, we delete or anonymize the information.

9. Your rights

Depending on where you live, you may have specific rights regarding your personal information.

Residents of the United States

If you are a resident of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or another state with a comparable privacy law, you may have the right to:

• —Know what personal information we collect, use, and share about you
• —Request a copy of your personal information
• —Request correction or deletion of your personal information
• —Opt out of the "sale" or "sharing" of personal information — we do not sell or share
• —Not be discriminated against for exercising these rights

Residents of India

Under the Digital Personal Data Protection Act, 2023, you may have the right to access, correct, complete, update, or erase your personal data, to withdraw consent, to nominate another person to exercise your rights in case of incapacity, and to raise a grievance.

How to exercise your rights

Email legal@thehouseofagrawal.com with the subject line “Privacy Request.” We will verify your identity and respond within the timelines required by applicable law (typically 45 days under CCPA, 30 days under DPDP, extendable as the law allows). You may designate an authorized agent to act on your behalf, subject to verification.

Grievance Officer (India)

For DPDP grievances, contact our Grievance Officer at legal@thehouseofagrawal.com. If your grievance is not resolved satisfactorily, you may escalate to the Data Protection Board of India.

10. Children’s privacy

The Site is directed at businesses, design professionals, and adult buyers. It is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has submitted information to us, contact us and we will delete it.

11. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), access controls, and vendor agreements with our service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident that materially affects your information, we will notify you and any required authorities in accordance with applicable law.

12. Third-party links

The Site may link to third-party websites, including our social media profiles on Instagram and LinkedIn. This Policy does not cover those sites. Review their privacy practices before interacting with them.

13. Do Not Track and analytics

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for how to respond, the Site does not currently react to these signals.

We use Vercel Analytics, which does not use cookies, does not store personal identifiers, and does not track you across other websites. Pageview counts and referrer data are anonymized at collection — there is no per-visitor identifier for us (or anyone else) to retain or share.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will post the updated version on this page and revise the “Effective” date above. Material changes will be highlighted on the Site for a reasonable period.

15. Contact