Privacy Policy

1. Who we are

This Privacy Policy explains how The House of Agrawal LLC, a Georgia limited liability company with its registered office at Cumming, Georgia 30040, United States (“THOA US”), and The House of Agrawal LLP, a limited liability partnership organized under the laws of India with its workshop in Moradabad, Uttar Pradesh (“THOA India,” and together with THOA US, “THOA,” “we,” “us,” or “our”), handle information about you when you visit thehouseofagrawal.com (the “Site”).

THOA US manages customer-facing relationships — sales, trade accounts, press, and client communications. THOA India handles manufacturing. Information you submit through the Site is received by THOA US and shared with THOA India only to the extent necessary to fulfill a specific inquiry or order.

For questions about this Policy, email legal@thehouseofagrawal.com.

2. Scope

This Policy covers the Site only. Separate written agreements — such as trade program terms, non-disclosure agreements, or purchase orders — may govern specific commercial relationships and may contain additional privacy commitments.

We do not operate an online store. The Site is a portfolio and inquiry platform. No transaction is completed on the Site.

3. Information we collect

Information you provide

When you submit a form on the Site — including the contact form, trade application, product inquiry, newsletter signup, or the Inquiry List submission — we collect the information you enter. Depending on the form, this may include:

• —Name
• —Business name, job title, and website
• —Business address, city, state or region, and country
• —Email address and phone number
• —Resale certificate or professional license details (trade applicants)
• —Project description, product interests, and any other details you choose to share

Inquiry List (on-device)

The “Inquiry List” feature stores your selected products in your browser’s localStorage. This data remains on your device and is not transmitted to us unless you submit the list through the inquiry form.

Information collected automatically

When you visit the Site, we and our hosting provider collect technical and usage data automatically, including:

• —Your IP address, which we hash before storing — we don’t keep it in the clear
• —Device type, operating system, and browser
• —Which pages and pieces you view, referring URL, and how long you spend
• —Clicks — including which links and spec-sheet downloads you use
• —A first-party visitor identifier we assign your browser, so we can tell a returning visit from a new one
• —Approximate geographic region, derived from your IP address
• —On a private trade selection prepared for one company, we attribute the visit to that company

Cookies and browser storage

We don’t set third-party cookies. What we use is browser storage, for two things: essential site function (remembering your Inquiry List, maintaining form state) and the first-party visitor identifier described above, which lives in your browser’s local storage rather than a cookie. Clear it any time through your browser settings — doing so resets your visitor identifier and empties your Inquiry List.

4. How we use information

We use the information we collect to:

• —Respond to your inquiry, pricing request, or trade application
• —Verify the credentials of trade applicants (e.g., resale certificates, professional licenses)
• —Send communications you have requested, such as our trade newsletter
• —Improve the Site's content, design, and performance
• —Keep records for business, accounting, and compliance purposes
• —Prevent fraud, abuse, and misuse of the Site
• —Comply with applicable law, court orders, and regulatory requests

We do not use your information for automated decision-making that produces legal or similarly significant effects about you.

5. Legal basis for processing

We process personal information where we have a legitimate business interest in operating and promoting our business, where you have given consent (for example, by opting in to the newsletter), where processing is necessary to respond to your request, or where we are required to do so by law.

6. How we share information

We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

We share information with service providers who process data on our behalf under contractual obligations of confidentiality:

• —Vercel Inc. — website hosting and deployment
• —Supabase Inc. — database, file storage, and the first-party usage analytics described in Section 3 — built and hosted by us, not a third-party analytics vendor
• —Resend Inc. — transactional and notification email delivery

We may also share information:

• —Between THOA US and THOA India, as necessary for fulfillment
• —With professional advisors (lawyers, accountants, auditors) under duty of confidentiality
• —In connection with a business sale, merger, financing, or reorganization, subject to confidentiality
• —When required by law, court order, or lawful government request

7. International transfers

THOA US is based in the United States. THOA India is based in India. When you submit information to the Site, it may be transferred to and processed in either jurisdiction. By using the Site, you understand and agree to this cross-border transfer.

8. Data retention

We keep your information for as long as needed to:

• —Maintain an active business relationship with you
• —Respond to inquiries and follow-up communications
• —Comply with tax, accounting, and legal obligations (typically seven years for business records in both the US and India)
• —Resolve disputes and enforce our agreements

When the above purposes are satisfied, we delete or anonymize the information.

9. Your rights

Depending on where you live, you may have specific rights regarding your personal information.

Residents of the United States

If you are a resident of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or another state with a comparable privacy law, you may have the right to:

• —Know what personal information we collect, use, and share about you
• —Request a copy of your personal information
• —Request correction or deletion of your personal information
• —Opt out of the "sale" or "sharing" of personal information — we do not sell or share
• —Not be discriminated against for exercising these rights

Residents of India

Under the Digital Personal Data Protection Act, 2023, you may have the right to access, correct, complete, update, or erase your personal data, to withdraw consent, to nominate another person to exercise your rights in case of incapacity, and to raise a grievance.

How to exercise your rights

Email legal@thehouseofagrawal.com with the subject line “Privacy Request.” We will verify your identity and respond within the timelines required by applicable law (typically 45 days under CCPA, 30 days under DPDP, extendable as the law allows). You may designate an authorized agent to act on your behalf, subject to verification.

Grievance Officer (India)

For DPDP grievances, contact our Grievance Officer at legal@thehouseofagrawal.com. If your grievance is not resolved satisfactorily, you may escalate to the Data Protection Board of India.

10. Children’s privacy

The Site is directed at businesses, design professionals, and adult buyers. It is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has submitted information to us, contact us and we will delete it.

11. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), access controls, and vendor agreements with our service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident that materially affects your information, we will notify you and any required authorities in accordance with applicable law.

12. Third-party links

The Site may link to third-party websites, including our social media profiles on Instagram and LinkedIn. This Policy does not cover those sites. Review their privacy practices before interacting with them.

13. Do Not Track and analytics

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for how to respond, the Site does not currently react to these signals.

The analytics we run are entirely first-party — built and hosted by us, not outsourced to an ad-tech vendor. As described in Section 3, that means which pages and pieces you view, how long you spend and how you interact with them, the links and spec sheets you click, and a visitor identifier assigned to your browser. On a private trade selection built for one company, we attribute the visit to that company.

We use this to see what is actually landing on the Site, and — for the material we prepare for a specific trade account — to know what that account is genuinely interested in, so the follow-up reflects real interest instead of a guess.

This stays first-party. We do not sell it, we do not share it with ad networks or data brokers, we do not run cross-site trackers or third-party pixels, and none of it is used to serve you ads — on this Site or anywhere else. We keep it for as long as it is relevant to an active trade relationship or open inquiry, then delete it.

Questions about this, or want your visitor data removed? Email legal@thehouseofagrawal.com.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will post the updated version on this page and revise the “Effective” date above. Material changes will be highlighted on the Site for a reasonable period.

15. Contact