Data Protection Policy | AesthetiX Spaces

Data minimisation: we collect only what a purpose requires, and de-identify wherever analytics suffice.
Access control: role-based access; site photos, floor plans and financials visible only to the team serving your project.
Vendor discipline: processors (hosting, communication, payments) are bound by contract to equivalent protection standards.
Training: our team and key subcontractors receive data-handling and confidentiality obligations as part of onboarding.
Site media rules: project photos/videos are captured for documentation and QC; publication follows the consent recorded in your preferences (see IP Policy, clause 5).
Storage: primary systems hosted on reputed cloud infrastructure with encryption, backups and disaster recovery; records stored in India or in jurisdictions permitted under the DPDP Act.
Reviews: this policy and our registers are reviewed at least annually and after any material system change.

This document is part of the AesthetiX Legal Hub (v2.0, effective 17 July 2026) and is incorporated by reference into every estimate, quotation, invoice and Work Agreement. Questions: privacy@aesthetixspaces.com.