Privacy Policy

Who We Are

This Privacy Policy is issued by [LEGAL ENTITY NAME — e.g. Simnani Estate Pvt. Ltd.], having its registered office at Office No. 1080, First Floor, Currency Tower, VIP Chowk, Telibandha, Raipur (CIN: [CIN], GSTIN: [GSTIN]), operating Simnani Estate ("we", "us", "our"). We are the Data Fiduciary responsible for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

Information We Collect

We collect what you directly give us during registration, listing a property, enquiring about a rental/PG, submitting an enquiry, scheduling a visit, requesting a callback, raising a helpdesk ticket, or applying for a home loan. The exact fields captured depend on the account type or service — see the full breakdown below. We also collect analytics data (pages viewed, approximate location, device type) generated by your activity on the site, including actions you take while logged in, where you have consented via the cookie banner. We do not ourselves collect or store financial/payment card data — paid subscriptions and wallet top-ups are processed entirely on our payment partner Razorpay's checkout screen, and we only receive the resulting order amount and transaction reference. We do not collect government ID numbers beyond PAN (for brokers, for verification) or biometric data.

Exactly What We Store, By Account Type

How This Data Is Stored

Your personal data is stored on our servers in a secured database, not only in your browser. Browser storage (localStorage) is used only to keep you logged in and remember in-progress form drafts on your own device — the authoritative copy of your data is held by us. Verification documents (RERA certificate, identity proof, business proof, PAN) submitted by brokers and freelancers are stored on our servers and are accessible only to authorised personnel for verification purposes.

Purpose of Collection

We use the information you provide to: create and manage your account; match you with relevant properties, investment opportunities or leads; enable brokers/freelancers/staff to respond to your enquiries and site-visit requests; verify broker and freelancer credentials (RERA, PAN, identity and business proof); facilitate introductions to our bank, legal panel, valuer and tenant-verification partners where you request those services; and personalise what you see on the platform (such as saved properties and preferred locations).

Who We Share Your Data With

Depending on the service you use, we share relevant details of your enquiry with: the broker, builder, service provider, Channel Partner, or property owner handling that listing or lead (see "Channel Partner Network Sharing" below for how this works inside our CP network); our tied-up bank/lending partner, where you submit a home loan enquiry; and service providers who process data on our behalf, including our cloud hosting and file-storage provider, our SMS/OTP gateway, our payment processor Razorpay (for subscriptions and wallet top-ups), and (with your cookie-banner consent) Google Analytics. Links you generate to WhatsApp, Instagram, Facebook or YouTube to share a listing open those apps directly on your own device — we do not transmit your data through a WhatsApp Business API or similar backend integration. These service providers are contractually bound to use your data only to provide their service to us and for no other purpose. We do not sell your personal data to third parties or share it with advertisers for their own use.

Channel Partner Network Sharing

If your enquiry or listing is handled by our Channel Partner (CP) network, your name, mobile number, and details of your property interest are visible to the CP staff actually handling it, and pass through our internal routing hierarchy as follows: every lead first reaches our Head CP (admin) team, who forward it to a Company CP, who in turn delegates it to one Field CP or Digital CP. Each Field or Digital CP only ever sees the leads and properties explicitly delegated to them — not the full pipeline. This routing, along with any site-visit log or ad-campaign record tied to your lead, is stored in our database as part of normal CP operations and is covered by the retention and deletion terms elsewhere in this policy.

Payments

Paid features on Simnani Estate (subscriptions and wallet top-ups) are processed through our payment partner, Razorpay. When you make a payment, you are redirected to or interact with Razorpay's own secure checkout — your card, UPI, or bank details are entered there and are received and stored by Razorpay, not by us. We only receive and store the order amount, payment status, and a transaction reference to confirm and record your purchase.

Data Retention

Security Safeguards & Breach Notification

We use reasonable technical and organisational measures to protect your data, including encrypted transmission (HTTPS), access controls limiting who within our team can view verification documents, and restricted database access. In the event of a personal data breach, we will notify affected users and the Data Protection Board of India as required under Section 8(6) of the DPDP Act and the DPDP Rules, 2025.

Consent

Where we rely on consent, we ask for it through a clear affirmative action — a checkbox or button you actively select — separately for each distinct purpose (for example, account registration and being contacted about your enquiry are each consented to separately, and cookie/analytics consent is sought separately via the cookie banner). We do not treat merely using the platform, or submitting one form, as consent to an unrelated purpose. You may withdraw consent at any time by contacting our Grievance Officer (below) or, for analytics cookies, by choosing "Necessary Only" on the cookie banner — it is as easy to withdraw consent as it was to give it, and withdrawal does not affect processing already carried out.

Cookies & Local Storage

Simnani Estate uses browser local storage to keep you logged in, remember in-progress registration form drafts, and remember properties you've saved — this is necessary for the site to work, so it is not something we ask consent for. Separately, with your consent via the cookie banner, we use Google Analytics cookies to understand how visitors use the site (pages viewed, approximate location, device type). You can choose "Necessary Only" on the banner to opt out of analytics cookies at any time; clearing your browser storage resets that choice.

Cross-Border Data Transfer

Google Analytics, which we use for site analytics with your consent, may process data on servers located outside India. We only use analytics providers that meet the transfer conditions permitted under Section 16 of the DPDP Act.

Children's Data & Persons with Disability

Our platform is intended for users who are at least 18 years old. We do not knowingly collect personal data from children. Where a person with a disability who has a lawful guardian needs to register or transact on the platform, the guardian may act on their behalf and provide verifiable consent as required under Section 9 of the DPDP Act.

Legal Basis (DPDP Act, 2023 & IT Act, 2000)

Most of our processing is based on your consent, in line with the DPDP Act and DPDP Rules, 2025, and the IT Act, 2000 (Section 43A) read with the Sensitive Personal Data or Information (SPDI) Rules, 2011. Employee data is processed on the basis of legitimate use for the purposes of employment under Section 7(i) of the DPDP Act, not consent.

Your Rights

You have the right to: access a summary of your personal data and processing activities; request correction, completion, or erasure of your data; nominate another individual to exercise your rights in the event of your death or incapacity; withdraw consent at any time; and file a grievance with our Grievance Officer, and if unresolved, complain to the Data Protection Board of India. To exercise any of these rights, contact our Grievance Officer below.

Data Deletion

You can request permanent deletion of your account from your Account Settings page at any time. This removes your profile and registration data, along with associated leads, listings, CP network assignments/commissions, and site-visit records tied to your account, from our servers and your browser's local storage, and we instruct our service providers to delete or anonymise their copies, subject to any data we are legally required to retain (such as server logs, for the minimum period stated under Data Retention) and any copies remaining temporarily in routine backups until they are next overwritten. A minimal record of the deletion itself is kept to comply with our legal obligations.

Grievance Officer

For any questions about this policy, or to exercise your rights, contact our Grievance Officer: Asad Madni, Grievance Officer. Email: [email protected]. Phone: 8287395807. We aim to resolve grievances within 7 working days. If you are not satisfied with our resolution, you may approach the Data Protection Board of India.

Changes to This Policy

If we make a material change to this policy, we will update the "Last Updated" date below and, where the change affects how we use data we already hold about existing users, notify registered users via email or SMS before the change takes effect.