Zentri Axiom Pvt. Ltd.

Global Privacy & Data Protection Policy

Document Reference: ZA-POL-PRIV-2026-V1.0

Effective Date: January 1, 2026

Compliance Standards:

Digital Personal Data Protection Act, 2023 (India)
General Data Protection Regulation (EU GDPR)
California Consumer Privacy Act / CPRA (United States)
KSA Personal Data Protection Law (PDPL - Kingdom of Saudi Arabia)

---

1. Overview and Scope

Zentri Axiom Pvt. Ltd. ("Zentri Axiom", "we", "us", or "our") is an integrated architecture, interior design, Building Information Modeling (BIM), and virtual design & construction (VDC) consultancy headquartered at:

> Zentri Axiom Pvt. Ltd.

> No.43, 3rd Floor, 2nd Main, 2nd Phase,

> Chandra Layout, Vijayanagar, Bengaluru 560040, Karnataka, India

> Email: `info@zentriaxiom.com` / `privacy@zentriaxiom.com`

> Telephone: `+91 9008566556`

> Website: `https://www.zentriaxiom.com`

This Privacy and Data Protection Policy governs how we collect, process, manage, and safeguard information obtained through:

1. Our public web portal (`www.zentriaxiom.com`).

2. Client and partner engagement portals, common data environments (CDE), Autodesk Construction Cloud (ACC), BIM 360, and FTP/SFTP channels.

3. Communications, inquiries, RFPs, and formal contractual engagements.

---

2. Distinction Between Personal Data and Client Technical Project Data

Zentri Axiom maintains a strict institutional demarcation between:

1. Personal Identity Data: Names, corporate email addresses, phone numbers, corporate affiliations, and billing contacts.

2. Proprietary Project Data: Architectural CAD drawings (`.dwg`), Building Information Models (`.rvt`, `.ifc`, `.nwc`), 3D laser scan point-cloud files (`.rcp`, `.rcs`, `.e57`), structural engineering calculations, interior design concepts, project coordinates, and cost estimations.

Proprietary Project Data is strictly classified as Confidential Commercial Intellectual Property (IP) and is governed by our Information Security & IP Governance Policy and strict Non-Disclosure Agreements (NDAs).

---

3. Personal Data We Collect and Processing Grounds

Category	Specific Elements	Purpose of Collection	Legal Ground
Contact & Identification	Full name, corporate email, phone number, organization name, job title	Responding to RFPs, project inquiries, contract execution, communication	Contractual Necessity / Legitimate Interest
Project Requirement Data	Building sector, total square footage, required LOD level, timeline expectations	Scope estimation, feasibility assessment, technical proposals	Pre-contractual Steps
Technical Telemetry	IP address, browser type, device metadata, operating system, referrer URL	Website security, performance monitoring, anti-fraud, accessibility optimization	Legitimate Interest
Communication Records	Inquiries sent via contact forms, emails, and WhatsApp business communications	Customer relationship management, quality assurance, dispute resolution	Legitimate Interest

---

4. Technical and Cloud Data Security

We implement rigorous technical and administrative security measures:

Encryption at Rest & in Transit: TLS 1.3 encryption across all public web traffic. AES-256 encryption across all storage drives containing project models and databases.
Access Control (Least Privilege): Access to client project directories is restricted exclusively to authorized BIM modelers, project managers, and lead architects assigned to that project.
Common Data Environment (CDE) Security: All cloud collaboration occurs on enterprise-tier authenticated Autodesk Construction Cloud (ACC) or client-specified secure CDEs with role-based permissions and multi-factor authentication (MFA).

---

5. International Data Transfers

As Zentri Axiom services clients in India, the Kingdom of Saudi Arabia (e.g., Neom, Sindalah), the United States, and Europe, project information may be processed across global geographic zones. All international transfers of personal data are secured using:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Cross-border data transfer agreements compliant with the Indian DPDP Act 2023 and KSA PDPL.
Mandatory NDAs with zero-exfiltration penalties.

---

6. Data Retention Policy

Website Inquiries: Retained for 24 months after last active correspondence, after which records are purged.
Client Project Archives: In accordance with construction industry liability standards, project files, models, and correspondence are retained for statutory defect liability periods (typically 7 to 10 years following project commissioning), unless earlier purge is requested by the client in writing.
Laser Scan Raw Data: Raw point clouds (`.rcp`, `.e57`) may be securely archived or returned to the client upon GFC handover completion.

---

7. Individual Data Subject Rights

Under applicable privacy legislation (DPDP 2023, GDPR, CCPA, KSA PDPL), you have the right to:

1. Access: Request confirmation of whether your personal data is being processed and obtain a copy.

2. Rectification: Request correction of inaccurate or incomplete records.

3. Erasure ("Right to be Forgotten"): Request deletion of personal records where processing is no longer necessary.

4. Restriction & Objection: Object to processing or request restriction on specific grounds.

5. Data Portability: Receive your provided data in a structured, machine-readable format.

6. Withdrawal of Consent: Withdraw previously granted consent at any time without retroactive impact.

To exercise any of these rights, contact our Data Protection Officer at:

Email: `privacy@zentriaxiom.com`

Address: Zentri Axiom Pvt. Ltd., No.43, 3rd Floor, 2nd Main, 2nd Phase, Chandra Layout, Vijayanagar, Bengaluru 560040.

---

8. Cookies and Web Analytics

Our website uses minimal, strictly essential cookies required for session security, layout preferences, and anonymous performance analytics. We do not sell, rent, or trade user data or use cross-site tracking ad pixels.

---

9. Policy Amendments

Zentri Axiom reserves the right to amend this Privacy Policy periodically to reflect regulatory updates or technical evolutions. Significant modifications will be announced on our website home page.