Privacy policy.

This website, formnhue.com, is operated by Form and Hue Private Limited, B-320, Gera's Imperium Gateway, Near Nashik Phata Metro Station, PCMC, Pune 411034, Maharashtra, India (“Form & Hue”, “we”, “us”). For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary, and for visitors covered by the EU or UK General Data Protection Regulation (“GDPR”) we are the controller of your personal data.

Questions about this policy or your data can be sent to connect@formnhue.com or by post to the address above.

We collect only what we need.

Information you give us

• When you use the enquiry form: your name, email address, phone number, project location, project type, project stage and your message.
• When you email or call us: your contact details and whatever you choose to tell us about your project.

Information collected automatically

• Our web server records standard technical logs (IP address, browser type, pages requested, date and time) to keep the site secure and working. These logs are kept for a short period and are not used to identify you.
• Your privacy choice is stored on your device (see our Cookie Policy).
• Analytics data is collected only if you switch analytics on in the privacy settings.

We do not knowingly collect sensitive personal data, and we ask you not to include it in enquiries.

We do not sell your personal data, we do not use it for advertising, and we do not make automated decisions about you.

We share personal data only where needed, and only with parties bound to protect it:

• Service providers that host this website and our email, acting as our Data Processors under written terms.
• Project partners such as consultants, contractors or vendors, only when you have commissioned a project and only the details they need to deliver it.
• Authorities, where the law requires it.

Some providers may process data outside India. Where that happens we rely on transfers permitted under the DPDP Act and, for GDPR-covered data, on appropriate safeguards such as standard contractual clauses.

• Enquiries that do not lead to a project: deleted within 24 months of our last contact.
• Client and project records: kept for the period required by Indian tax and company law (generally up to 8 years), then deleted.
• Server logs: kept for up to 90 days.
• Your privacy choice: kept on your device for up to 12 months, after which we ask again.

When you withdraw consent, we stop processing and erase the related data unless the law requires us to keep it.

Under the DPDP Act, 2023

• Access a summary of the personal data we process about you and the processing activities.
• Correct, complete, update or erase your personal data.
• Withdraw consent at any time, as easily as you gave it.
• Nominate another person to exercise your rights in the event of death or incapacity.
• Have a grievance addressed by us, and if unresolved, complain to the Data Protection Board of India.

Under the GDPR (EU and UK visitors)

• Access, rectification, erasure and restriction of processing.
• Data portability and the right to object to processing based on legitimate interests.
• Withdraw consent at any time without affecting earlier processing.
• Complain to your local supervisory authority.

To exercise any right, write to connect@formnhue.com. We will respond within 30 days and may ask you to verify your identity.

In line with the DPDP Act and the Information Technology Act, 2000, you can contact our Grievance Officer about any concern with how we handle your data:

Grievance Officer, Form and Hue Private Limited
B-320, Gera's Imperium Gateway, Near Nashik Phata Metro Station, PCMC, Pune 411034, Maharashtra, India
Email: connect@formnhue.com (subject: Data Protection Grievance)
Phone: +91 83296 19392

We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

This website is not directed at children. We do not knowingly process the personal data of anyone under 18 without verifiable consent from a parent or lawful guardian. If you believe a child has sent us personal data, contact us and we will delete it.

The site is served only over HTTPS, loads no third-party code unless you opt in to analytics, and hosts its own fonts. Access to enquiries is limited to the people who need it. No method of transmission is completely secure, but we apply reasonable security safeguards as required by the DPDP Act.

We may update this policy when our practices or the law change. The date at the top shows the latest version. Material changes will be highlighted on this page.