Privacy Policy

The House of MBJ (“we”, “us”, “our”) respects privacy and is committed to protecting personal data collected through this website and associated services in accordance with India’s Digital Personal Data Protection Act, 2023 and the draft DPDP Rules, 2025.

What we collect

• Contact data: name, email, phone, company, and any message submitted via forms or chat.
• Usage data: device info, IP, pages visited, time on site, and interactions via analytics cookies, where consented.
• Marketing preferences: newsletter opt-ins, campaign responses, and consent records.

How we use data

• To respond to enquiries, provide requested information/services, and manage client relationships (performance of a contract/legitimate use permitted by law).
• To run analytics, improve site performance, and measure campaign effectiveness based on valid, revocable consent where required.
• To send marketing communications when consent is given, with an option to withdraw at any time.

Legal basis and consent

Processing is based on free, specific, informed, unambiguous, and unconditional consent where required (e.g., non-essential cookies/marketing), or other lawful uses permitted under the DPDP Act. Consent can be withdrawn at any time, and withdrawal is as easy as giving consent; services that do not rely on such consent will remain accessible.

Cookies and similar technologies

Essential cookies operate to provide core site functionality; non-essential analytics/advertising cookies will load only after explicit consent via our banner or settings. Users can review or change cookie choices at any time via “Cookie Settings,” and records of consent will be maintained as required by the DPDP framework.

Data minimisation, retention, and security

Personal data collected is limited to what is necessary for specified purposes, protected by encryption, access controls, and audit trails as applicable. Data is retained only for as long as needed for the purposes collected or as required by law; retention periods follow DPDP guidance and internal policies.

Rights of individuals

Rights may include access, correction, withdrawal of consent, grievance redressal, and erasure per the DPDP Act and draft Rules. Requests can be made via the contact listed below; identity verification may be required to protect data security.

Cross-border transfers

Where applicable, personal data may be transferred or accessed outside India in accordance with government-allowed destinations/conditions and contractual safeguards.

Children’s data

Services are intended for persons 18+; where relevant, verifiable parental consent is required for processing children’s data per the DPDP framework.

Data breaches

In the event of a breach causing significant harm, notifications will be made to authorities and affected individuals within prescribed timelines and with required details.

Consent managers

Where consent managers are used, individuals may manage consent through such registered entities as recognised by the DPDP framework.

Updates to this policy

This policy may be updated to reflect legal, technical, or business changes; significant changes will be communicated, and the “Last Updated” date will be revised.

Grievance and contact

For privacy inquiries or rights requests, contact the Grievance Officer/Data Protection contact at: info@thehouseofmbj.in, The House of MBJ, Delhi NCR, India. Complaints may also be escalated to the Data Protection Board per the DPDP framework after attempting resolution with us.

Last updated: [27- 08- 2025]