Privacy policy

Last updated: 6 October 2026 (enquiry form delivery)

1. Who we are

This website, bunkersinindia.com, is operated by Qilyx Shelters ("we", "us", "our"). For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for personal data you share with us. You can contact us about privacy at help@bunkersinindia.com.

2. The short version

• This website uses no cookies, no analytics, no advertising and no third-party trackers. Our fonts are hosted on our own site.
• When you submit the enquiry form, your answers are sent over an encrypted connection to Web3Forms, a form delivery service, which forwards them to our inbox. This website does not store them.
• We never ask for your street address before a non-disclosure agreement is signed.
• We do not sell, rent or trade personal data. Ever.

3. What we collect

When you browse this website

Our hosting provider, Microsoft Azure, automatically processes technical information needed to deliver web pages securely, such as your IP address, browser type and the pages requested. This is used for security and reliability only. We do not use it to identify or profile visitors.

When you send us an enquiry

Only what you enter in the enquiry form, or include in an email to us:

• Your name or alias, and an email address or phone number
• The state where a shelter would be built
• How many people a shelter would protect, and what kind of shelter or service you are looking for
• Anything you choose to write in the message field

We ask you not to include your street address or details of a site. We ask for those only after a non-disclosure agreement is signed.

Dietary, religious observance and health information can be sensitive. We ask for it only because it changes how a shelter is designed and stocked, we ask for categories rather than details, and you can leave it out.

When you become a client

Under a signed agreement, we will also process your property address, site and survey data, drawings, access codes and the personal details needed to design, build and maintain your shelter. Project-specific terms are set out in your contract and NDA.

The family plan builder

The family emergency plan tool on our emergency protocol page runs entirely in your browser. Nothing you type there is stored or sent to us or anyone else.

4. Why we use it, and on what basis

We do not use your data for marketing unless you ask us to keep you informed, and we never use it for automated decisions about you.

5. Who we share it with

We share personal data only on a need-to-know basis, and only with:

• Members of our team assigned to your enquiry or project, bound by confidentiality obligations
• Engineers, consultants and subcontractors working on your project, under NDA, who receive only the information needed for their part of the work. Where possible they see a project code name, not your identity.
• Our service providers, who process data on our instructions: Web3Forms, which delivers enquiry form submissions to our inbox, and our providers for email and secure file storage
• Local authorities, to the minimum extent required for building approvals. We explain to you what is filed before we file it.
• Courts, regulators or law enforcement, where we are legally required to. Where the law allows, we will tell you first.

6. Where it is stored

Our website is hosted on Microsoft Azure. Web3Forms and our email and storage providers may process data outside India. Any transfer outside India is made in line with the DPDP Act and any restrictions notified by the Government of India.

7. How long we keep it

• Enquiries that do not become projects: deleted within 24 months of our last contact, or sooner if you ask.
• Client project files: kept for the life of your maintenance plan. Drawings and access information are returned to you or destroyed on request after handover or when maintenance ends.
• Financial records: kept for the periods required by Indian tax and company law, usually up to eight years.

8. How we protect it

We use encryption for stored files, access controls with logging, project code names, separation of client identity from site information, and confidentiality agreements for everyone who handles client data. Location information is never shared over unencrypted channels. No system is perfectly secure, but we design ours on the assumption that client locations are among the most sensitive information we hold.

If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as required by the DPDP Act.

9. Your rights

Under the DPDP Act, you have the right to:

• Get a summary of the personal data we hold about you and how we use it
• Ask us to correct, complete or update it
• Ask us to erase it, unless we must keep it by law
• Withdraw your consent at any time. This does not affect processing already done, but may mean we cannot continue your enquiry or project.
• Nominate someone to exercise your rights if you die or become incapacitated
• Raise a grievance with us, and if unresolved, complain to the Data Protection Board of India

To exercise any right, email help@bunkersinindia.com with the subject "Privacy request". We will respond within 30 days.

10. Grievances

Our grievance contact can be reached at help@bunkersinindia.com with the subject "Grievance". We acknowledge grievances within 72 hours and aim to resolve them within 30 days.

11. Children

This website and our services are for adults. We do not knowingly collect personal data directly from anyone under 18. When a parent or guardian tells us about children in their household, such as ages or dietary needs, we treat that information as provided by the parent or guardian, solely to plan the shelter.

12. Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change materially affects how we use data you have already given us, we will tell you directly.