Privacy Policy

Draft, requires legal review. This page is a structured draft prepared for review by a qualified Indian lawyer. Items marked [FOUNDER TO PROVIDE] are intentionally blank and must be completed before public launch.

Structure aligned to the Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules. Last updated: [FOUNDER TO PROVIDE: effective date].

1. Who we are (Data Fiduciary)

Investica Realtors Pvt Ltd, registered office [FOUNDER TO PROVIDE: registered office address], CIN [FOUNDER TO PROVIDE: CIN].

2. Personal data we collect

• Enquiry details you give us: name, phone/WhatsApp number, optional email, market of interest, budget band, timeline, purpose and message.
• Partner (agent/builder) account details provided during onboarding.
• Technical data needed for security: a salted hash of your IP address for rate limiting, and session cookies for signed-in users.

3. Purpose and legal basis

We process enquiry data on the basis of your consent to respond to your property enquiry and connect you with relevant verified projects. Consent text shown on the form (version enquiry-v1-2026-10-19):

I consent to Investica Realtors Pvt Ltd storing the details I have entered and contacting me by phone, WhatsApp or email about my property enquiry. I understand I can withdraw consent at any time by contacting the Grievance Officer named in the Privacy Policy.

We record the consent version and time with your enquiry.

4. Sharing

We may share your enquiry with an Investica-verified partner agent or builder only to respond to your enquiry. We do not sell personal data. Processors (hosting, email/WhatsApp providers): [FOUNDER TO PROVIDE: list of processors and locations].

5. Retention

[FOUNDER TO PROVIDE: retention period for enquiries and partner data, approved by legal counsel]. Data is erased when the purpose is served or consent is withdrawn, unless law requires retention.

6. Your rights

• Access a summary of your personal data and processing.
• Correction, completion, updating and erasure.
• Withdraw consent at any time, as easily as it was given.
• Grievance redressal, and nominating another person to exercise your rights.
• Complaint to the Data Protection Board of India after using our grievance process.

7. Security

Encrypted connections (HTTPS), access restricted to authorised staff with multi-factor authentication, audit trails, and encrypted backups.

8. Grievance Officer

Name: [FOUNDER TO PROVIDE: Grievance Officer name]. Email: [FOUNDER TO PROVIDE: Grievance Officer email].

9. Children

Our services are not directed at persons under 18, and we do not knowingly process their data.

10. Changes

We will post changes here and, where required, seek fresh consent.