The controller responsible for data processing on this website is: Mandeep Kumar Budnbed Technologies (House of Suvarna is a brand of Budnbed Technologies) Fanningerstraße 45, 10365 Berlin, Germany Email: hello@houseofsuvarna.com

We are not required to appoint a data protection officer. For any privacy question, contact us at the email address above.

We only process personal data where a legal basis under Art. 6(1) GDPR applies:

Our website is aimed at businesses. We do not knowingly collect data from children.

Our website is delivered through two providers:

​

Netlify. Our domain is served by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA.

​

Figma Sites. The website content itself is built and hosted with Figma Sites, provided by Figma, Inc., 760 Market St, Floor 10, San Francisco, CA 94102, USA. When you open our website, your browser loads this content directly from Figma’s servers.

​

When you visit our website, both providers automatically process technical data your browser sends: IP address, date and time of access, pages visited, browser type and operating system. We use this data only to deliver the website securely and to detect misuse. Legal basis: Art. 6(1)(f) GDPR.

​

Both providers process data in the USA. Netlify and Figma are certified under the EU-US Data Privacy Framework, and both offer data processing agreements including the EU Standard Contractual Clauses. Log data is deleted in line with each provider’s retention policy.

Our forms (request a quote, name your price, request catalogue, book a meeting, start a program, contact) are provided by Tally BV, August Van Lokerenstraat 71, 9050 Ghent, Belgium.

​

What we collect, depending on the form: name, company, business email, phone (optional), VAT ID, business type, delivery postcode, product requirements, target prices, uploaded files such as logos or designs, and your message.

​

Purpose: to answer your request, prepare quotes and run our business relationship with you.

Legal basis: Art. 6(1)(b) GDPR for quote, price, meeting and program requests; Art. 6(1)(f) GDPR for general contact and catalogue requests.

Processor: Tally processes this data on our behalf under a data processing agreement (Art. 28 GDPR). Form data is encrypted and stored in Europe.

Retention: requests that do not lead to an order are deleted after 12 months. Data that becomes part of an order is kept as described in section 7.

When you email us or meet with us, we process your name, contact details, company and the content of our communication to handle your request and, if it leads to one, our contract.

​

Email: our email provider processes messages on our behalf under a data processing agreement.

Video calls: if you choose a video meeting, we use the video conferencing tool agreed with you. That provider’s privacy policy also applies.

Orders: to fulfil orders we share the data needed with our manufacturing partners in India, inspection agencies, freight forwarders, customs brokers and delivery companies (see section 7).

Legal basis: Art. 6(1)(b) GDPR for requests and contracts; Art. 6(1)(f) GDPR for general B2B communication.

Cookie consent. When you first visit our website, a cookie banner asks for your consent. Technically necessary cookies are always active (§ 25(2) TDDDG). All other cookies and analytics are only used if you agree (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can change or withdraw your consent at any time through the cookie settings on our website.

​

Google Analytics. With your consent, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors use our website. Google Analytics uses cookies and processes data such as pages visited, time on page, device and browser information and approximate location. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. Data is stored for 14 months.

​

Fonts. All fonts are delivered with our website. No separate connection to Google Fonts is made.

​

Social media links. Links to Instagram and LinkedIn are plain links. Data is only transferred to those platforms if you click them.

​

Blog. Our articles are published on Medium. Our website only links to them. Data is transferred to Medium (A Medium Corporation, USA) only when you click a link and open an article there; Medium’s own privacy policy then applies.

Recipients. We share personal data only where needed: hosting, form and email providers (as processors), manufacturing partners, inspection agencies, freight forwarders, customs authorities, delivery companies, our tax advisor and our bank.

Transfers outside the EU. Order details may be shared with manufacturing partners in India. India has no EU adequacy decision. We transfer only what is needed to produce your order (usually company name, contact person and specifications) and use EU Standard Contractual Clauses where personal data is involved, or rely on Art. 49(1)(b) GDPR where the transfer is necessary to perform our contract with you.

Retention. We delete personal data once it is no longer needed. Business letters, invoices and accounting records are kept for the periods required by German commercial and tax law (§ 257 HGB, § 147 AO), currently up to 10 years.

You have the right to:

• access your data (Art. 15 GDPR)

• correct it (Art. 16 GDPR)

• have it deleted (Art. 17 GDPR)

• restrict processing (Art. 18 GDPR)

• receive it in a portable format (Art. 20 GDPR)

• object to processing based on legitimate interest (Art. 21 GDPR)

• withdraw consent at any time, with effect for the future (Art. 7(3) GDPR)

To use these rights, email hello@houseofsuvarna.com.

You can also complain to a data protection authority. Ours is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

We update this policy when our services, tools or the law change. The current version is always available on this page.

Last updated: 5th Nov 2026