Privacy Policy

1. Introduction & Scope

This Privacy Policy governs the processing of personal data that we collect through the Platform, our forms, communications and related services. It applies to Users, Buyers, Builders, Developers, Brokers and Channel Partners, and to any visitor who interacts with the Platform. By accessing or using the Platform, submitting an inquiry, or otherwise providing personal data to us, you acknowledge that you have read and understood this Policy. This Policy does not apply to the independent processing of personal data by Builders, Brokers or any other third party, whose own privacy practices are outside our control and responsibility.

2. Who We Are - Data Fiduciary & Grievance Officer

For the purposes of the DPDP Act, Schemes24 (operated by [●], having its registered office at [●] and bearing CIN [●] and GST [●]) is the Data Fiduciary that determines the purpose and means of processing your personal data in connection with the Platform. We may engage third-party service providers to process personal data on our behalf as Data Processors under written contract. For any questions, requests or complaints regarding this Policy or the processing of your personal data, you may contact our Grievance Officer, [●], by email at grievance@schemes24.com. Full contact details and the grievance process are set out in Section 18 below.

3. Personal Data We Collect

We collect only such personal data as is necessary for the specified purposes described in this Policy. The categories of personal data we may collect from Users, Buyers, Builders and Brokers are set out below. We do not knowingly collect sensitive personal data beyond what is reasonably required, and we do not require you to disclose more than is necessary to service your request.

• Name
• Mobile number
• Email address
• Inquiry details - budget, preferred configuration, timeline, and free-text message
• Property or land-listing details submitted (for Builders, Brokers and land owners)
• Device, usage and technical data - including IP address, browser type, cookies and similar identifiers, and log/usage information
• Communications and correspondence with our internal team

4. How We Collect It

We collect personal data directly from you when you fill in an inquiry form, submit a listing, create or access an account, or otherwise communicate with us. We also collect certain technical data automatically when you use the Platform, through cookies, server logs and similar technologies, as described in Section 8. In limited cases we may receive data about you from Builders or Brokers in connection with a listing or a lead, or from service providers that support our operations. Where consent is the lawful basis, we collect your personal data only after obtaining your consent through a clear affirmative action, such as submitting an inquiry after being presented with this Policy.

5. Purposes of Processing & Lawful Basis

The primary lawful basis on which we process your personal data is your consent under Section 6 of the DPDP Act, and, where applicable, the legitimate uses recognised under Section 7 of the DPDP Act. We process your personal data to qualify inquiries and connect Users and Buyers with relevant Builders and Brokers, to service and respond to your request, to operate, maintain and improve the Platform, to carry out analytics and measure usage, to ensure safety, prevent fraud and abuse, and to comply with applicable law and enforce our Terms. We process the data only for the purpose for which it was collected or a purpose reasonably connected to it, and we will not use your personal data for materially different purposes without obtaining fresh consent where required. You may withdraw your consent at any time as described in Section 12.

6. How & With Whom We Share Personal Data

A defining feature of our Platform is that no direct contact occurs between a Buyer and a Builder or Broker at the inquiry stage. A Buyer's contact details and inquiry information are shared with a Builder or Broker only after our internal sales team has reviewed and qualified the inquiry. We may also share personal data with service providers and processors who perform functions on our behalf (such as hosting, communications, email delivery and analytics) under contracts that require them to protect the data and use it only for our specified purposes. We may disclose personal data where required by law, regulation, court order or a lawful request by a public authority, or to protect our rights, safety and property or those of others, and we may transfer personal data as part of a merger, acquisition, financing, reorganisation or sale of assets, subject to this Policy. Builders and Brokers who receive personal data from us act as independent Data Fiduciaries in respect of that data, and Schemes24 is not responsible or liable for their subsequent processing.

7. We Do Not Sell Personal Data

Schemes24 does not sell, rent or trade your personal data to third parties for their independent marketing or monetary consideration. Sharing of your data occurs only for the purposes described in this Policy, including qualifying and routing your inquiry to relevant Builders and Brokers and operating the Platform. Any disclosure to service providers is limited to what is necessary to deliver our services and is governed by contractual confidentiality and data-protection obligations. We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without a lawful basis.

8. Cookies & Analytics

We use cookies and similar technologies to enable core Platform functionality, remember your preferences, maintain sessions, secure the Platform, and understand how the Platform is used. Some cookies are strictly necessary for the Platform to function, while others support analytics and performance measurement. You can control or disable cookies through your browser settings, although disabling certain cookies may affect the availability or functionality of parts of the Platform. We may use analytics tools to collect aggregated and de-identified usage information that helps us improve our services.

9. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, to service your inquiry and any resulting engagement, and to comply with our legal, regulatory, accounting, tax and dispute-resolution obligations. Where retention is required by applicable law, we retain the relevant data for the period prescribed by such law. Once the personal data is no longer required for these purposes, we will delete, destroy or irreversibly anonymise it in accordance with the DPDP Act and our internal retention practices. Retention periods may vary depending on the nature of the data and the applicable legal requirements.

10. Security Safeguards

We implement reasonable technical and organisational security measures designed to protect personal data against unauthorised access, use, alteration, disclosure, loss or destruction, consistent with the DPDP Act and the SPDI Rules. These measures include access controls, encryption in transit where appropriate, session security, and restrictions on internal access on a need-to-know basis. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. To the maximum extent permitted by applicable law, we are not liable for any unauthorised access, disclosure or breach that occurs despite our implementation of reasonable safeguards, save where such liability cannot be excluded under applicable law.

11. Your Rights as a Data Principal

Subject to and in accordance with the DPDP Act, you have the right to obtain a summary of the personal data we process about you and the processing activities undertaken, and to obtain the identities of other Data Fiduciaries and Processors with whom your data has been shared. You have the right to correction, completion, updating and erasure of your personal data where the data is inaccurate, incomplete or no longer necessary for the purpose for which it was processed. You have the right to grievance redressal in respect of any act or omission regarding your data, and the right to nominate another individual to exercise your rights in the event of your death or incapacity. You may exercise these rights, and withdraw your consent, by contacting our Grievance Officer at grievance@schemes24.com, and we may require you to verify your identity before acting on any request.

12. Withdrawal of Consent & Consequences

Where our processing is based on your consent, you may withdraw that consent at any time by writing to our Grievance Officer at grievance@schemes24.com. The withdrawal of consent will be as easy as the giving of consent, and upon withdrawal we will cease processing your personal data for the relevant purpose within a reasonable time, unless another lawful basis or legal obligation requires or permits continued processing. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Please note that if you withdraw consent necessary to qualify or route your inquiry, we may be unable to service your request or connect you with relevant Builders or Brokers, and certain Platform features may become unavailable to you.

13. Children's Data

The Platform is intended for use by individuals who are eighteen (18) years of age or older, and we do not knowingly process the personal data of a child (a person below eighteen years of age) without the verifiable consent of a parent or lawful guardian. In accordance with the DPDP Act, we do not undertake any processing of a child's personal data that is likely to cause detrimental effect on the well-being of the child, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If we become aware that we have collected personal data from a child without the required verifiable parental or guardian consent, we will take reasonable steps to delete such data. If you believe a child has provided us personal data without such consent, please contact our Grievance Officer.

14. Third-Party Sites & Links

The Platform may contain links to, or references to, websites, applications or services operated by Builders, Brokers or other third parties. This Privacy Policy does not apply to those third-party sites and services, and we do not control and are not responsible for their content, security or privacy practices. Any personal data you provide to such third parties is governed by their own privacy policies, and we encourage you to review those policies before providing your data. The inclusion of any link does not imply endorsement by Schemes24.

15. Cross-Border Transfer

Your personal data is primarily stored and processed on infrastructure operated for us in accordance with applicable law. We may, in the course of using cloud hosting and service providers, process or store personal data in, or transfer it to, locations outside India, subject to the DPDP Act and any restrictions notified by the Central Government. Where such transfers occur, we take reasonable steps to ensure that the data continues to be protected in a manner consistent with this Policy and applicable law. By using the Platform and providing your personal data, you consent to such processing and transfer where lawful.

16. Data Breach Handling

We maintain procedures designed to detect, assess, contain and respond to personal data breaches. In the event of a personal data breach that affects your personal data, we will act in accordance with our obligations under the DPDP Act and applicable law, including notifying the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed. We will take reasonable measures to mitigate the impact of any breach and to prevent recurrence. Our notification of, or response to, a breach is not an acknowledgement of fault or liability, and our liability in respect of any breach is limited to the maximum extent permitted by applicable law.

17. Changes to this Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or the Platform. The revised Policy will be posted on the Platform with an updated effective date, and the changes will take effect from the effective date stated. Where required by applicable law, we will provide you with additional notice or obtain fresh consent for material changes. Your continued use of the Platform after the effective date of a revised Policy constitutes your acknowledgement of the updated Policy.

18. Grievance Officer & Contact

In accordance with the DPDP Act, the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer to address your questions, requests and complaints regarding the processing of your personal data and this Policy. You may contact the Grievance Officer, [●], by email at grievance@schemes24.com. We will acknowledge your grievance within twenty-four (24) hours of receipt and will endeavour to resolve it within fifteen (15) days, or such other period as may be prescribed under applicable law. This Policy is governed by the laws of India, and any disputes arising out of or in connection with it are subject to the exclusive jurisdiction of the courts and, where applicable, arbitration seated at Surat, Gujarat.