Privacy Policy
Last updated: 29 November 2025

1. Who we are

This website, https://citylinefurniture.com, is operated by Ashbourne Enterprises (OPC) PVT. LTD., which operates under the brand name “Cityline Furniture”.

In this Privacy Policy:

• “Cityline Furniture”, “we”, “us”, “our” refers to Ashbourne Enterprises (OPC) PVT. LTD. operating the Cityline Furniture brand and website.

• “You”, “user” refers to any visitor, customer, or user of our website.

This Policy explains how we collect, use, disclose, and protect your personal information when you use our website or contact us through it. It is intended primarily for users located in India, especially Hyderabad, Telangana.

2. Scope of this policy

This Privacy Policy applies to personal information collected through:

• Our website: https://citylinefurniture.com

• Contact / enquiry forms on the website (including forms powered by HubSpot)

• Blog comments or reviews (if enabled)

• Email or phone contact initiated using details shown on the website

• Links to WhatsApp or social media from this website, where we receive your personal data as a result

If you interact with us through third-party platforms (for example WhatsApp, Instagram, Facebook, Google, HubSpot-hosted forms), their own privacy policies will also apply in addition to this one.

3. What personal data we collect and why

We may collect and process the following categories of personal data:

• a) Identity and contact details

  • Data collected: Name, email address, phone number, city/location, and any address details you choose to share.

  • Purpose: To contact you, understand your requirements, provide quotations, schedule site visits, measure your space, and manage orders or service requests.

• b) Project and service-related information

  • Data collected: Details about your home or site, interior layout, measurements, photos or videos you share with us, design preferences, budget range, timelines, and any notes you provide regarding custom furniture, sofa repair, or interior work.

  • Purpose: To understand your project requirements, prepare proposals, share designs, plan production, and deliver our services.

• c) Form submissions via HubSpot

  • Data collected: Information you enter into any form on our website (for example name, contact details, project details, message, source of enquiry).

  • Purpose: We use HubSpot as our customer relationship management (CRM) and forms platform. When you submit a form, the data is stored in our HubSpot CRM so we can track enquiries, respond efficiently, and maintain accurate records.

• d) Website usage and technical data

  • Data collected: IP address, browser type and version, device type, operating system, referral source, pages visited, time spent on pages, and other diagnostic or analytics data.

  • Purpose: To maintain website security, detect spam or abuse, improve website performance, and understand how users interact with our site.

• e) Communication data

  • Data collected: Records of your communication with us (emails, contact form messages, call details, and where applicable WhatsApp or chat conversations initiated via the website).

  • Purpose: To respond to your queries, provide support, maintain service history, and handle after-sales or warranty issues.

• f) Comments (if enabled)

  • Data collected: Data shown in the comments form, your IP address, and browser user-agent string.

  • Purpose: To help detect and block spam and maintain site security.

  • An anonymized string created from your email address (a “hash”) may be sent to the Gravatar service to check if you are using it. Gravatar’s privacy policy is available at: https://automattic.com/privacy/. After approval of your comment, your profile picture from Gravatar (if enabled by you) may be visible to the public in the context of your comment.

• g) Media uploads (if enabled)

  • Data collected: Any images or media you upload to the website.

  • Purpose: For example, to help us understand existing furniture, site conditions, or design preferences.

  • Important: If you upload images, you should avoid including embedded location data (EXIF GPS). Visitors to the website can download and extract location data from such images.

4. Cookies and similar technologies

We may use cookies and similar technologies to operate and improve our website.

• a) Comments-related cookies

  • If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies.

  • These are for your convenience so you do not have to re-enter details when leaving another comment.

  • These cookies may last for up to one year.

• b) Login-related cookies (if accounts are enabled)

  • If you visit our login page, we set a temporary cookie to check if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

  • When you log in, we set cookies to save your login information and screen display preferences.

  • Login cookies generally last for around two days, and screen options cookies may last for up to one year.

  • If you select “Remember Me”, your login may persist for about two weeks. When you log out, login cookies are removed.

  • If you edit or publish an article, an additional cookie may be stored in your browser. It includes no personal data and simply stores the post ID of the article you edited. It typically expires after one day.

• c) Analytics and performance cookies

  • If we use analytics tools (such as Google Analytics or HubSpot analytics), these tools may set cookies to understand traffic and usage patterns.

  • Such tools generally collect information in an anonymized or pseudonymized manner and are used to improve content and user experience.

You can control or delete cookies through your browser settings. Disabling certain cookies may impact website functionality.

5. Embedded content from other websites

Articles or pages on this site may include embedded content such as:

• Videos

• Images or galleries

• Maps

• Articles or social media feeds

Embedded content from other websites behaves as if you visited the other website directly. These external sites may:

• Collect data about you

• Use cookies

• Embed additional third-party tracking

• Monitor your interaction with embedded content, including tracking if you are logged into that other website

We do not control third-party websites and are not responsible for their privacy practices. You should review their privacy policies separately.

6. How we use your personal data

We use your personal data for the following purposes:

• a) To respond to enquiries and provide services

  • Handling your queries submitted through HubSpot forms or other channels

  • Scheduling site visits and measurements

  • Providing quotations, proposals, and design options

  • Managing orders, production, delivery, and installation

• b) To manage customer relationships

  • Maintaining enquiry and customer records in HubSpot CRM

  • Tracking follow-ups and communication history

  • Providing after-sales support and handling warranty-related issues

• c) To improve our website and services

  • Understanding how visitors use the website

  • Improving content, user experience, and marketing campaigns

  • Troubleshooting and resolving technical issues

• d) To maintain security and prevent misuse

  • Detecting and preventing spam, fraud, or unauthorized access

  • Protecting the integrity of our website, systems, and users

• e) To comply with legal obligations

  • Complying with applicable Indian laws and regulations

  • Responding to lawful requests from authorities

  • Meeting tax, accounting, and record-keeping requirements

7. Legal basis and consent (India context)

To the extent applicable under Indian law (including the Digital Personal Data Protection Act, 2023, when and as fully in force), we rely on the following bases for processing your personal data:

• a) Consent

  • When you voluntarily submit your details through forms, email, or WhatsApp.

  • When you opt in to receive communication or marketing from us.

• b) Performance of a contract or pre-contract steps

  • When we process your information to provide quotations, proposals, and services you request.

• c) Legal obligations

  • When we process your data to meet tax, accounting, or statutory requirements or respond to lawful requests.

• d) Legitimate interests

  • When we use your data to improve our services, maintain security, prevent fraud, or manage enquiries, provided these interests are balanced with your rights and expectations.

8. Who we share your data with

We do not sell your personal data.

We may share your data with:

• a) Internal team members

  • Authorized staff who need access to respond to your enquiries, visit your site, prepare designs, manufacture furniture, or manage your project.

• b) Service providers (including HubSpot)

  • HubSpot CRM and forms:

    • We use HubSpot as our CRM and forms platform.

    • When you submit a form on our website, your information (such as name, contact details, and enquiry) is transmitted to and stored in HubSpot.

    • HubSpot acts as our data processor and processes this data only on our behalf to help manage enquiries, follow-ups, and customer communication.

  • Other service providers may include website hosting, email service providers, backup and storage providers, analytics services, IT security services, and similar vendors.

  • These service providers are expected to use your data only to provide services to us and not for their own unrelated purposes.

• c) Business partners or subcontractors

  • For example, logistics partners, installation teams, or specialist vendors involved in delivering your project.

  • We share only the minimum data necessary to perform the required work.

• d) Government authorities or legal entities

  • Where required by law, regulation, legal process, or to protect our rights, property, or the safety of our staff and users.

If you request a password reset (where user accounts exist on the site), your IP address may be included in the reset email as an additional security measure.

9. How long we retain your data

We retain personal data for as long as necessary for the purposes described in this Policy or as required by law.

• a) Comments

  • If you leave a comment, the comment and its metadata may be retained indefinitely.

  • This allows us to recognize and automatically approve follow-up comments instead of holding them for moderation.

• b) User accounts (if enabled)

  • For registered users, we store the personal information provided in their user profile.

  • Users can view, edit, or delete their personal information at any time (except the username).

  • Website administrators can also see and edit that information.

• c) Enquiries, project and CRM records (including HubSpot)

  • Enquiry details, proposals, project files, and communication logs stored in HubSpot and other systems may be retained for a reasonable period.

  • This supports follow-ups, after-sales service, warranty handling, and legal or accounting requirements.

  • Retention may extend through the duration of your warranty plus any legally required period.

• d) Technical and analytics data

  • Usage logs and analytics data may be retained for a limited period as per the default settings of the tools used, unless a longer period is needed for security or legal reasons.

10. Your rights and choices

Subject to applicable Indian laws, you may have the following rights:

• a) Right to access

  • You can request details of the personal data we hold about you.

• b) Right to correction

  • You can request correction or updating of inaccurate or incomplete personal data.

• c) Right to deletion

  • You can request deletion of personal data that is no longer required for the purposes for which it was collected, or where you withdraw consent (subject to our legal obligations to retain certain data).

• d) Right to withdraw consent

  • Where we process your data based on consent, you may withdraw that consent at any time.

  • Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

• e) Right to raise a grievance

  • You can raise any grievance or complaint regarding how we handle your personal data using the contact details in Section 15.

  • We will aim to respond within a reasonable time frame in accordance with applicable law.

To exercise your rights, contact us using the details in Section 15. We may need to verify your identity before acting on your request.

11. Where your data is processed and stored

Your personal data may be processed and stored in:

• a) India

  • On servers or devices located in India, including our own systems and those of local service providers.

• b) Other countries (including via HubSpot)

  • We use HubSpot to store and manage enquiry and customer data.

  • HubSpot’s servers and infrastructure may be located outside India, including in the European Union or the United States.

  • This means your personal data may be transferred to and processed in countries whose data protection laws may differ from those in India.

By submitting your data through our forms or otherwise, you understand that such cross-border transfers may occur for the purpose of processing your enquiry and managing our relationship with you. We take reasonable steps to ensure your data is handled securely and in line with this Policy.

12. Data security

We use reasonable technical and organizational measures to protect your personal data against:

• Unauthorized access or disclosure

• Accidental loss, destruction, or damage

• Misuse or alteration

These measures may include:

• Secure hosting and server configurations

• Limited internal access on a need-to-know basis

• Use of reputable third-party providers such as HubSpot, hosting, and email services

• Regular monitoring for unusual activity where feasible

Where we use third-party service providers like HubSpot, we select reputable providers that implement industry-standard security measures to protect personal data processed on our behalf.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security, and you provide information at your own risk.

13. Children’s privacy

Our website and services are not directed at children under 18 years of age. We do not knowingly collect personal data from children.

If you believe that a child has provided personal data to us without appropriate consent, please contact us using the details in Section 15. We will take steps to delete such information where required by law.

14. Where your data is sent (spam detection and security)

Visitor comments and certain form submissions may be checked through:

• Automated spam detection services

• Security and firewall tools

These services may process technical details such as your IP address, browser user-agent, and content entered in forms to detect spam, bots, or malicious usage. Some of these systems may be hosted outside India.

15. Contact and grievance officer

If you have any questions about this Privacy Policy, want to exercise your rights, or wish to raise a complaint, please contact:

Grievance Officer
Ashbourne Enterprises (OPC) PVT. LTD. – Cityline Furniture
Hyderabad, Telangana, India

• Email: contact@ashbourne.in

• Phone: 8074108149

We will aim to respond within a reasonable period, in accordance with applicable Indian laws.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example, due to:

• Changes in law or regulation

• Changes in our technology or internal processes

• Changes in the services we offer

Any updates will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically to stay informed about how we handle your personal data.

Implementation notes for you (not part of the live policy text):

• a) Replace the placeholder email and phone number in Section 15 with your actual Cityline Furniture contact details.

• b) If you are not using comments, user logins, or specific analytics tools yet, you can remove or simplify those parts before publishing.

• c) If your HubSpot configuration changes (for example, you add marketing emails or advanced tracking), update the relevant sections to match actual practice.

• d) Before final publication, have a local CA/lawyer familiar with Indian data protection (including DPDP 2023) review this for compliance.

Let’s Build Something That Lasts