Privacy Policy

Fenebris India Pvt Ltd ("Fenebris," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you visit our website fenebrisindia.com or use our mobile application and related services (together, the "Services").

We handle your personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025. Under this law we act as a Data Fiduciary (meaning we decide why and how your personal data is processed), and you are the Data Principal, the person the data is about.

Grievance Officer (required under the DPDP Act and Rule 5(9) of the IT Rules 2011)

You can contact the Grievance Officer for any question, request, or complaint about your personal data. Please include your name, contact details, and a description of your concern. We will acknowledge and resolve your grievance within 30 days of receipt.

We collect only the information we need for the purposes set out in this policy.

Information you give us (through website forms)

• Full name
• Email address
• Phone number
• Company name and designation
• Subject of inquiry and message content

Information we collect automatically (when you visit our website)

• IP address, browser type
• Device information and operating system
• Pages visited and time spent on each page
• Referring website or source
• Cookies and similar tracking technologies

Information from our mobile application

• Device identifiers (Device ID, Advertising ID)
• Mobile operating system version and app version
• Push notification tokens
• App usage statistics and crash reports
• Location data (only if you permit it through device settings)
• Camera or photo library access (only when a specific feature requires it and you have given consent)

We use the information we collect to:

• Respond to your inquiries and provide the services you request
• Communicate with you about projects, updates, and (where you have consented) promotions
• Improve our website, services, and user experience
• Analyse website traffic and usage patterns
• Detect, prevent, and investigate fraud and security incidents
• Comply with legal and regulatory obligations and protect our rights

If we want to use your data for a new purpose not described here, we will ask for your consent again.

We process personal information on one or more of the following grounds:

• Your consent
• Performance of the service or contract you have requested
• Certain legitimate uses, such as preventing fraud, misuse, or security threats
• Compliance with legal and regulatory requirements

Where we rely on consent, we ask for it clearly and specifically, with a plain-language notice, and your consent is free, specific, informed, unconditional, and given by a clear affirmative action.

You can withdraw your consent at any time by emailing the Grievance Officer or, for app permissions, through your device settings. Withdrawal does not affect processing that already took place before you withdrew, and some features may stop working if the data they rely on is withdrawn.

We do not sell, trade, or rent your personal information. We share it only where needed, with:

• Service Providers: Trusted third-party vendors who help us operate the Services, such as hosting, analytics, and email providers, who are contractually bound to protect your data and use it only on our instructions.
• Legal Authorities: Where required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honour this policy.

Our website uses cookies and similar technologies to improve your browsing experience, keep sessions secure, and analyse usage. You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of our website.

Our mobile application may request the following device permissions. Each is requested only when needed and with your prior consent:

• Internet access: Required for core app functionality and communicating with our servers
• Camera: Used only when you choose to upload a photo or scan a document in the app
• Storage / Photos: Used to save or upload files only when you start such an action
• Location: Used only when a location-based feature is active and you have granted permission
• Notifications: Used to send you service updates and alerts (you can disable these in device settings)

You can revoke any permission at any time through your device settings. Revoking a permission may limit certain features but will not affect core functionality. We do not collect data in the background without your knowledge, and data collected through app permissions is used only for the feature that requires it and is never sold.

We keep personal information only as long as needed to fulfil the purposes in this policy or as required by law. We keep financial and transaction records for as long as tax and accounting law requires. When information is no longer needed, we securely delete or anonymise it.

We implement reasonable security practices and procedures, as mandated under Rule 8 of the IT Rules 2011, including encryption, secure servers, access controls, and secure storage. No method of transmission over the Internet is completely secure, but we work to keep your information safe using commercially reasonable measures.

Data breach: If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Rules, without undue delay.

Your information may be stored, processed, or transferred to servers and service providers located outside India. Under the DPDP Act, transfers are permitted to any country the Central Government has not restricted, and we take reasonable steps to ensure your information stays protected wherever it is processed.

Under the IT Rules 2011, the following are classified as Sensitive Personal Data or Information:

• Passwords
• Financial information such as bank account or payment card details
• Physical, physiological, or mental health condition
• Sexual orientation
• Medical records and history
• Biometric information

We do not currently collect SPDI through our website or mobile application unless you explicitly provide it in a message or form. If a future service requires collecting SPDI, we will:

• Obtain your explicit consent before collection
• Clearly state the purpose
• Keep it no longer than required
• Not transfer it to third parties without your consent

Subject to applicable law, you have the right to:

• Access: Get a summary of the personal data we hold about you and how we process it, and obtain a copy where applicable.
• Correction and completion: Have inaccurate or incomplete data corrected, completed, or updated.
• Erasure: Ask us to delete your personal data, unless we are legally required to keep it.
• Withdraw consent: At any time (Section 6).
• Grievance redressal: Raise a complaint with our Grievance Officer (Section 2).
• Nominate: Appoint someone to exercise your rights on your behalf in case of death or incapacity.

To exercise any right, contact us at [email protected]. We will verify your identity before acting and respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

Our website and app may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external sites, and we encourage you to review their privacy policies before providing any personal information.

This Privacy Policy is published in compliance with the Digital Personal Data Protection Act, 2023; the Information Technology Act, 2000; and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("IT Rules 2011").

As required under Rule 4 of the IT Rules 2011, this policy informs you of:

• Types of data collected: Personal identifiers, contact details, device data, and usage information as described in Section 3
• Purposes of collection: Service delivery, communication, analytics, and legal compliance as described in Section 4
• Data recipients: Trusted service providers and legal authorities as described in Section 7
• Retention period: Data is retained only as long as necessary for the stated purpose, as described in Section 10

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date and, where the change is significant, we will notify you. We encourage you to review this policy periodically.

If you have any questions, requests, or concerns about this Privacy Policy or our data handling practices, please contact us:

This policy is written in plain language as required by the DPDP Act. It is available in English, and we can provide a translation on request.