Last updated: September 24, 2026

This Privacy Policy explains how BHUTRA MARBLE PRIVATE LIMITED (“Bhutra Marble”, “we”, “us”, “our”) collects, uses, shares and protects your personal data when you visit https://bhutrastones.com, view our products on Google or other platforms, submit an enquiry through our website or our Facebook/Instagram lead forms, or communicate with us.

We are based in India, and this policy is written in line with India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Because people from other countries can access our website and product listings, this policy also includes information under the EU and UK General Data Protection Regulation (Section 13) and California privacy laws, including the CCPA as amended by the CPRA, and CalOPPA (Section 14).

1. Who we are

Ashish Bhutra, KH NO 228/194, Makrana Road, Khatoli, Kishangarh, Rajasthan 305801, India. We decide how and why your personal data is used. We are the “Data Fiduciary” under the DPDP Act and the “controller” under the GDPR.

2. What personal data we collect

Data you give us:

• Name, mobile number, email address, city and your marble/stone requirements, when you fill an enquiry form on our website or a lead form on Facebook or Instagram
• Email address, when you subscribe to our newsletter
• Details you share on call, WhatsApp, email or video call, such as delivery address, order details, invoices, and photos or videos for return requests

Data collected automatically when you use our website:

• IP address, browser and device type, pages visited, time spent, clicks, referring website and approximate location
• Cookie and similar identifiers (see Section 5)

Data from third parties:

• When you submit a lead form on Facebook or Instagram, Meta shares the details you entered with us.

3. Why we use your data

• To respond to your enquiry by call, WhatsApp or email and share product details, prices and availability
• To process orders, deliveries, returns and refunds
• To send you offers and updates by email, only if you have separately opted in. You can unsubscribe anytime using the link in every email.
• To measure and improve our advertising on Meta (Facebook/Instagram) and Google
• To understand how visitors use our website and improve it
• To keep our website and systems secure
• To comply with legal, tax and accounting requirements

We use your data only for the purpose for which you gave it, or for purposes permitted under applicable law.

4. Who we share your data with

We do not sell your personal data for money. We share it with service providers who process it on our behalf, under our instructions:

• TeleCRM: customer relationship management (storing and managing enquiries)
• Make (make.com): automation that transfers enquiry data between our forms, CRM and advertising platforms
• MailerLite: sending emails to newsletter subscribers
• Meta Platforms (Facebook/Instagram): lead forms, and measuring ad performance. We may send your phone number or email to Meta in hashed form (converted into an irreversible code) to measure which ads led to enquiries.
• Google (Analytics, Ads, Tag Manager): website analytics and ad measurement
• Microsoft Clarity: website usage analytics, including heatmaps and session recordings
• Transport and logistics partners: your name, phone number and delivery address, only to complete a delivery

Some advertising tools on our website (Meta Pixel and Google Ads tags) may be considered “sharing” for advertising under California law. See Section 14.

We may also disclose data where required by law, a court or a government authority, or in the event of a merger or transfer of our business.

5. Cookies and tracking technologies

Our website uses cookies and similar technologies:

• Essential: needed for the website to work
• Analytics: Google Analytics and Microsoft Clarity, to understand how visitors use the site
• Advertising: Meta Pixel and Google Ads tags (through Google Tag Manager), to measure ad performance and show relevant ads

You can accept or reject non-essential cookies through the cookie banner on our website, and change your choice at any time. Where required by law (for example, for visitors from the EU and UK), analytics and advertising cookies are used only after you give consent. You can also block cookies in your browser settings, though this may affect how the website works.

Do Not Track: Our website does not currently respond to browser “Do Not Track” signals. You can control tracking through the cookie banner and your browser settings.

6. How long we keep your data

• Enquiry data of people who do not become customers: up to [X months] from the last interaction, after which it is deleted or anonymised
• Customer and order data: as long as required under tax, accounting and other applicable laws
• Newsletter data: until you unsubscribe
• Cookie data: as per the cookie’s duration, or until you clear it from your browser

7. International data transfers

We are based in India, so your data is processed in India. Some of our service providers store or process data in other countries, such as the United States. Transfers from India are made as permitted under the DPDP Act and not to any country or entity restricted by the Government of India. For personal data of individuals in the EU and UK, our service providers use recognised safeguards, such as the European Commission’s Standard Contractual Clauses, where required.

8. Security

We take reasonable security measures, including restricted access to lead data, secure accounts and access controls with our service providers. No method of transmission over the internet is completely secure. If a personal data breach occurs, we will inform affected individuals and the relevant authorities, including the Data Protection Board of India, as required by law.

9. Your rights

Wherever you are located, you can:

• Ask for a summary of the personal data we hold about you and how it is used
• Ask us to correct, complete or update your data
• Ask us to delete your data, subject to legal retention requirements
• Withdraw your consent at any time. This will not affect processing done before withdrawal.
• Unsubscribe from marketing emails at any time
• Raise a grievance with us

Under the DPDP Act, you can also nominate another person to exercise your rights in case of death or incapacity, and escalate an unresolved grievance to the Data Protection Board of India. We will respond to DPDP requests within the time prescribed by law (not later than 90 days).

Additional rights for individuals in the EU/UK and California are described in Sections 13 and 14.

To use any right, contact us using the details in Section 12. We may need to verify your identity before acting on a request.

10. Children’s data

Our website and services are meant for persons aged 18 years and above. We do not knowingly collect personal data of anyone under 18. If we learn that we have, we will delete it.

11. Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

12. Grievance Officer / Contact

Name: Ashish Bhutra
Email: info@bhutramarble.com
Phone: +91 90011 56068
Address: KH NO 228/194, Makrana Road, Khatoli, Kishangarh, Rajasthan 305801, India

13. Additional information for individuals in the European Economic Area (EEA) and United Kingdom

Legal bases for processing:

• Contract, or steps at your request before a contract: responding to enquiries, sharing quotes, and processing orders, deliveries and returns
• Consent: marketing emails, and analytics and advertising cookies (including sending hashed contact details to Meta for ad measurement)
• Legitimate interests: keeping our website and systems secure, and improving our services, where these interests are not overridden by your rights
• Legal obligation: tax, accounting and other legal requirements

Your rights under the GDPR: In addition to the rights in Section 9, you have the right to:

• Restrict processing of your data in certain cases
• Receive your data in a structured, commonly used format (data portability)
• Object to processing based on legitimate interests, and object at any time to direct marketing
• Lodge a complaint with the data protection authority in your country. In the UK, this is the Information Commissioner’s Office (ICO).

We will respond to your request within one month. This may be extended by up to two further months for complex requests, in which case we will tell you.

For international transfers, see Section 7.

14. Additional information for California residents

This section applies to California residents and supplements the rest of this policy.

Categories of personal information we have collected in the last 12 months:

• Identifiers: name, phone number, email address, IP address, cookie and device identifiers
• Customer records: delivery address and order details
• Commercial information: products you enquired about or purchased
• Internet or network activity: browsing activity on our website and interactions with our ads
• Geolocation data: approximate location based on IP address (not precise location)

We do not collect sensitive personal information as defined under California law.

Sources: directly from you, automatically from your device when you use our website, and from Meta when you submit a lead form on Facebook or Instagram.

Purposes and retention: See Sections 3 and 6.

Disclosure for business purposes: We disclose the categories above to the service providers listed in Section 4, only for the purposes described in this policy.

Sale and sharing: We do not sell personal information. We may “share” identifiers and internet activity with Meta and Google for cross-context behavioural advertising, through the Meta Pixel and Google Ads tags. You can opt out by rejecting advertising cookies in our cookie banner, or by emailing info@bhutrastones.com with the subject “Do Not Share My Personal Information”. We do not knowingly sell or share personal information of consumers under 16 years of age.

Your rights: You have the right to:

• Know what personal information we collect, use, disclose and share, and access it
• Request deletion of your personal information
• Request correction of inaccurate personal information
• Opt out of the sale or sharing of your personal information
• Not be discriminated against for exercising any of these rights

You may submit a request by email or phone (Section 12), or through an authorised agent. We will verify your identity before acting on a request and respond within 45 days, which may be extended by another 45 days with notice to you.

CalOPPA: For our response to “Do Not Track” signals, see Section 5. Changes to this policy are posted on this page with a revised “Last updated” date.

15. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the “Last updated” 24 Sep 2026