Privacy policy

Who we are

FlatsFloors is a specialist marketplace for independent builder floors across Delhi NCR, operated as a distinct platform alongside SocietyFlats. In the language of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here — we decide why and how it is processed.

If you would rather not read all of this: we collect a phone number so we can reply to you, we never publish it, and we do not sell it.

What we collect

We collect only what a property enquiry or listing genuinely needs. Browsing is anonymous — nothing below is required to look at inventory.

• Contact details you type into an enquiry, callback or visit request: name, mobile number, and email if you give one.
• What you told us you are looking for — budget, locality, configuration, and any requirements you wrote in free text.
• For owners and agents listing a floor: the property record itself, plus photographs and any documents you upload.
• Verification-related identity details, where you ask us to verify a listing you control.
• Technical data every website receives: IP address, browser, and the pages you opened, used to keep the service working and to detect abuse.
• How you reached us — the referring site and any campaign parameters in the link you followed.

Why we process it

Each purpose below is separate. Consent to one is not consent to another, and you can withdraw any of them.

• To respond to your enquiry and arrange a viewing — the reason you contacted us.
• To verify a listing before it is published, which is the core promise of the platform.
• To send you updates you asked for, such as matches against a saved search or a price change on a floor you saved.
• To detect duplicate listings, fraudulent inventory and abuse of the enquiry forms.
• To measure, in aggregate, which localities and journeys people actually use, so we build the right things.

Who sees your data

Your mobile number is never published on a property page. Enquiries route through FlatsFloors so that response times can be measured and attribution preserved.

Where you ask us to arrange a viewing, we share the minimum needed with the owner, builder or agent responsible for that floor — usually your first name and the fact that a visit has been requested. Your number is shared only when a visit is confirmed, or when you tell us to.

We use processors for hosting, messaging and analytics. They act on our instructions and cannot use your data for their own purposes.

We do not sell personal data, and we do not share it with a third party for their own marketing.

SocietyFlats and cross-platform sharing

FlatsFloors and SocietyFlats are separate platforms with separate databases. There is no shared login, no shared table and no background synchronisation of personal data between them.

We intend to offer a cross-discovery journey in future — comparing an independent floor against society apartments in the same locality. If and when your details are ever passed between the two platforms, it will be because you asked for it, with a consent record stored against that specific act of sharing, and an explicit list of the fields shared.

Documents you upload

Title deeds, sanctioned plans, tax receipts and similar documents are stored privately. They are never published, never shown to buyers, and are not served from the public web.

Only members of our verification team can open them, and every access is recorded with who opened the file and when. Photographs are treated differently — they are public by design, so we strip location metadata from every image before it is stored.

How long we keep it

Enquiries and the associated preferences are retained for three years from your last interaction, so that we can pick up a conversation you may return to and so we can honour opt-outs.

Listing records and their verification history are retained while the listing is live and for three years after it closes — verification is only meaningful if it can be audited later.

Documents are deleted once verification is complete and the listing has closed, unless you ask us to keep them for a future sale.

Consent records are retained as long as the underlying data, because they are the evidence of your choice.

Your rights

Under the DPDP Act you can ask us for the following, and we will respond within thirty days.

• A summary of the personal data we hold about you and what we have done with it.
• Correction of anything inaccurate, and completion of anything incomplete.
• Erasure of your data, unless we are required to retain it.
• Withdrawal of consent for any purpose, as easily as you gave it — messaging opt-outs are one tap and take effect immediately.
• Nomination of another person to exercise these rights on your behalf.
• To raise a grievance with us first, and thereafter with the Data Protection Board of India.

Security

Traffic is encrypted in transit. Staff access is granted by specific permission rather than by job title, and every administrative action is written to an audit log with the previous and new values.

No system is perfectly secure. If a breach affects your data we will notify you and the Data Protection Board as the Act requires, and we will tell you what actually happened rather than a sanitised version.

Contacting us

Privacy questions, data requests and grievances should go to our Grievance Officer. We will acknowledge within 72 hours and resolve within thirty days.