Privacy policy

Practice Name: SPASM Design

Effective Date: July 15, 2026

Last Updated: July 15, 2026

This Privacy Policy explains how SPASM Design and its affiliated entities ("SPASM Design,"we," "us," or "our") collect, use, share, and protect your personal data when you visit our website, do business with us, apply for a role or internship, or otherwise interact with our digital and physical platforms.

Read this Privacy Policy carefully, as it provides transparent information about what personal data SPASM Design collects and how it is processed.

1. The Data Controller & Identity

The data controller responsible for your personal data is SPASM Design, a design and architectural practice headquartered in Mumbai, Maharashtra, India. We operate globally, carrying out architectural projects and consultations worldwide.

2. What Data Do We Collect?

SPASM Design processes personal data from potential and existing clients, project
collaborators, job applicants, consultants, and visitors to this website (referenced throughout as "you" or "your") as necessary to conduct our architectural practice. This includes:

  • Contact Information: Name, email address, telephone number, physical address, company/organization name, and job title.
  • Project Inquiries & Communications: Project briefs, site locations, design
    requirements, and direct mail or email conversations.
  • Recruitment Data: Resumes, CVs, portfolios, educational backgrounds, professional experiences, primary languages, cover letters, and interview notes submitted for solicited or unsolicited roles and internships.
  • Technical & Usage Data: IP address, browser type, device information, website usage statistics, and referral sources collected via analytical tools.

3. How Do We Collect Your Data?

We collect your personal data directly from you, from the organization you represent, or through automated digital tools in the following ways:

  • Direct Communications & Inquiries: Personal data is collected when you exchange emails, submit contact forms, or communicate with us regarding potential or ongoing architectural design projects.
  • Recruitment & Careers: When you apply for employment, internships, or academic collaborations, we collect the credentials and portfolios you submit to evaluate your qualifications. If you are invited to interview, we may also process information provided during that process or collected from referees/former employers with your consent.
  • Social Media & Public Platforms: SPASM Design uses social media platforms (such as Instagram, LinkedIn, Facebook, and YouTube) to showcase our architectural portfolio and communicate with the design community. We may process personal data you make available through your interactions with our channels or credit you for collaborative work with your consent.
  • Visits to Our Studio: When you visit our Mumbai office, we may collect your name and contact details for building security, reception management, or guest Wi-Fi access.

4. How Will We Use Your Data?

We process your personal data under appropriate legal bases (including user consent, contractual necessity, legal compliance, and legitimate business interests) for the following purposes:

  • Service Delivery: To evaluate project opportunities, develop architectural proposals, and fulfill contractual obligations with clients and consultants.
  • Recruitment Management: To assess your suitability for open roles, progress your employment application, verify your identity, or screen you for future vacancies that match your architectural skills.
  • Practice Optimization: To analyse website traffic, diagnose technical issues, improve our digital presentation of global portfolios, and maintain business records.
  • Legal Compliance & Security: To protect our website and internal networks against fraud, unauthorized scraping, or malware, and to comply with applicable statutory laws.

5. International Data Transfers

SPASM Design operates from India and undertakes projects worldwide. Your personal data may be transferred to, stored, and processed by service providers, affiliates, or collaborators located outside your country of residence, including jurisdictions outside the European Union (EU) or European Economic Area (EEA).

Where personal data is transferred internationally, SPASM Design implements appropriate contractual and technical safeguards in accordance with applicable data protection laws (including the Indian DPDP Act and EU GDPR transfer mechanisms) to ensure your data remains protected.

6. Data Security & Storage

We implement reasonable technical and organizational security practices—in compliance with Section 43A of the Information Technology Act, 2000—to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction.

We store personal data only for as long as reasonably necessary to fulfill the purpose(s) for which it was collected, to maintain historical project archives, or to comply with applicable accounting, tax, and legal obligations. When data is no longer required, it is securely deleted or anonymized.

7. Your Statutory Privacy Rights 

Depending on your geographic location and applicable laws (such as India's Digital Personal Data Protection Act, 2023, the EU/UK GDPR, or the California Privacy Rights Act), you possess several rights regarding your personal information:

  • Right to Access: You have the right to request confirmation on whether we process your data and to receive a copy of your personal data.
  • Right to Correction (Rectification): You have the right to request that we correct inaccurate data or complete incomplete information.
  • Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data when it is no longer necessary for the purposes collected, subject to legal retention exceptions.
  • Right to Restrict or Object to Processing: You have the right to object to or request restrictions on how we process your personal data, particularly regarding marketing or automated profiling.
  • Right to Data Portability: Under certain conditions, you have the right to request that we transfer the data we collected directly to you or another organization.
  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
  • Right to Non-Retaliation: You will not be discriminated against or retaliated against for exercising any of your statutory privacy rights.

To exercise any of these rights, please contact us at: spasmindia@gmail.com. We will
acknowledge and respond to your request without undue delay upon identity verification.

8. Cookies & Analytics Policy

SPASM Design uses cookies and similar tracking technologies to improve website
functionality and analyse general web traffic. We use standard, privacy-conscious analytics tools to track visitor numbers and site performance. Users can manage, restrict, or disable cookies directly through their individual browser settings at any time.

9. Third-Party Links

Our website may contain links to external third-party websites (such as design publications, press articles, or social media networks). This Privacy Policy applies solely to the SPASM Design website. If you click on an external link, we encourage you to read the privacy policy of that destination website, as we assume no responsibility for their content or data practices.

10. Children's Privacy

This website is a professional architectural portfolio platform and is not intended for
individuals under the age of 18. SPASM Design does not knowingly solicit or collect personal information from minors.


11. Changes to Our Privacy Policy 

SPASM Design keeps this Privacy Policy under regular review and places any updates directly on this web page. Any material revisions become effective immediately upon publication.
This Privacy Policy was last updated on July 15, 2026.

12. Complaints & Grievance Redressal Procedure

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India), if you have any questions, concerns, or formal grievances regarding how SPASM Design processes your personal data, you may submit a complaint directly to us at:

  • Email Address: spasmindia@gmail.com
  • Office Address: SPASM Design, 311 Raheja Plaza, Shah Industrial Estate, Andheri West, Mumbai 400053, Maharashtra, India.

Our Commitment to Grievance Handling:

  1. We will acknowledge receipt of your complaint within a reasonable timeframe.
  2. We will investigate the concern in accordance with our internal privacy and security procedures.
  3. We will take appropriate steps to address identified issues and communicate the outcome to you.

Submitting a complaint to SPASM Design does not affect your legal right to lodge a grievance with a competent data protection supervisory authority in your jurisdiction.