Last updated: 27 August 2026

Cadbricks Private Limited (“we”, “us”, “our”) operates https://www.cadbricks.com and provides Scan-to-BIM, BIM modeling and documentation services. This policy explains what personal data we collect, why we collect it, and what rights you have over it.

We are the data fiduciary (controller) for the personal data described here. Our registered office is at 19, Shayona Bungalows V-2, Opp. R C Technical Institute, Chandlodia, Ahmedabad, Gujarat 380061, India.

1. Who this policy covers

This policy applies to:

• visitors to our Website;
• people who contact us or request a quote;
• client-side personnel we deal with during a project; and
• applicants who send us a CV.

It does not change any separate data processing agreement or non-disclosure agreement we have signed with a client. Where such an agreement covers project data, that agreement governs.

2. What we collect

Information you give us. When you submit an enquiry, request a quote, or email us: your name, business email address, phone number, company name, job title, country, and whatever you tell us about your project. If you attach files — drawings, point clouds, site photographs, specifications — we receive those too.

Information we collect automatically. When you visit the Website, our servers, and any analytics tools we have enabled, record your IP address, browser type and version, device type, operating system, referring page, pages viewed, and time spent. This is standard web log and analytics data.

Cookies. See Section 8.

Project data. During an engagement we handle files supplied by the client. These sometimes contain personal data — names in title blocks, surveyor or consultant contact details, occupant names in existing-condition drawings, photographs taken on site. We process this only to deliver the Services, on the client’s instructions, as described in Section 6.

We do not collect payment card details on the Website. Payments are made by bank transfer or through a third-party payment provider, who handles the card or account details directly.

3. Why we use it, and on what basis

What we use it for	Basis
Responding to your enquiry and preparing a quote	Your consent, given when you submit the form; and the steps needed to enter into a contract
Delivering a project and communicating with you about it	Performance of our contract with you or your employer
Invoicing, accounting and tax records	Compliance with Indian legal obligations
Keeping the Website secure and working	Our legitimate interest in operating the site
Understanding how the Website is used, so we can improve it	Your consent to analytics cookies
Sending occasional updates about our services to business contacts	Your consent, withdrawable at any time
Considering a job application	Steps taken at your request before employment

We do not sell personal data, and we do not share it with third parties for their own marketing.

4. Who we share it with

• Service providers who help us operate: cloud hosting and storage, email, file transfer, CRM, accounting and analytics providers. They act on our instructions and are bound by confidentiality.
• Subcontractors and associates who work on parts of a project, under confidentiality obligations no less protective than our own.
• Professional advisers — accountants, auditors, lawyers — where needed.
• Authorities, where we are required by law to disclose.

If our business is transferred or reorganized, personal data may transfer as part of it, subject to this policy.

5. Where your data is processed

We are based in India, and our team and our infrastructure process data in India. Some of our service providers store data outside India, including in the United States and the European Union.

If you are outside India — including our clients in the United States — your personal data will be transferred to and processed in India. India’s data protection framework is set out in the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Where a client requires specific safeguards, contractual terms or a location restriction for project data, we agree those in the engagement contract.

6. Project data supplied by clients

Where a client sends us files that contain personal data, the client is the data fiduciary and we act on their instructions. We:

• use the data only to deliver the agreed Services;
• restrict access to team members working on that project;
• do not use it to train any model, or for any purpose of our own; and
• delete or return it in accordance with Section 7 or the engagement contract.

If you are an individual whose details appear in a client’s project files and you want them removed, please contact the client directly — they control that data. You may also contact us and we will pass the request on.

7. How long we keep it

Data	Retention
Enquiries that do not become projects	24 months from last contact
Project files and deliverables	90 days after final delivery, unless the contract says otherwise
Contracts, invoices and accounting records	As required by Indian tax and company law, currently 8 years
Website analytics	26 months
Job applications	12 months, unless you ask us to delete sooner

8. Cookies

The Website uses essential cookies, which are needed for it to function and to keep it secure. These cannot be switched off.

We operate a cookie consent banner. Where we use analytics cookies to understand how the site is used, they are set only after you accept them through that banner. You can change or withdraw your choice at any time using the banner’s settings, and blocking cookies in your browser may affect how parts of the site work.

9. Security

We use access controls, encrypted transfer, encrypted storage for project files, and staff confidentiality agreements. No system is completely secure, but we take reasonable technical and organizational measures appropriate to the sensitivity of the data. If a personal data breach occurs, we will notify affected individuals and the Data Protection Board of India as required.

10. Your rights

Subject to applicable law, you may ask us to:

• access the personal data we hold about you, and a summary of how it is processed;
• correct data that is inaccurate, incomplete or out of date;
• erase data we no longer need, or that you gave us on consent you have now withdrawn;
• withdraw consent at any time, without affecting processing carried out before withdrawal;
• nominate another person to exercise your rights if you are unable to; and
• complain to the Data Protection Board of India if you are not satisfied with our response.

If you are in the European Union or the United Kingdom, you may also have rights to restrict or object to processing and to data portability. If you are a California resident, you may request disclosure of the categories of personal information we collect and ask us to delete it; we do not sell or share personal information as those terms are defined under California law.

To exercise any right, contact the Grievance Officer below. We will respond within 30 days. We may ask you to verify your identity first.

11. Grievance Officer

For any question, request or complaint about this policy or your personal data:

Divy Pujara
Cadbricks Private Limited
19, Shayona Bungalows V-2, Opp. R C Technical Institute, Chandlodia, Ahmedabad, Gujarat 380061, India
Email: divy.pujara@cadbricks.com
Phone: +91 73599 73522

12. Children

The Website and our Services are directed at businesses and professionals, not children. We do not knowingly collect personal data of anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy. The “last updated” date at the top shows when it last changed. Where a change materially affects how we use your personal data, we will make that clear on the Website or notify you directly.

14. Contact us

Cadbricks Private Limited
19, Shayona Bungalows V-2, Opp. R C Technical Institute, Chandlodia, Ahmedabad, Gujarat 380061, India
Email: info@cadbricks.com
Phone: +91 73599 73522