Privacy Policy

1. Introduction

Nilay 360 Real Estate Technologies Private Limited (“Nilay 360”, “we”, “our”, “us”) is a premium real estate discovery platform headquartered in Hyderabad, Telangana, India. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website (www.nilay360.com), mobile applications, and related services (collectively, the “Platform”). We are committed to protecting your privacy in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and applicable rules thereunder. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect the following categories of personal data:

• Identity & Contact Information: name, email address, phone number, date of birth (for age verification), and PAN/Aadhaar details where required for KYC.
• Property Preferences: search history, saved properties, budget range, preferred locations, and property type preferences.
• Device & Technical Information: IP address, browser type, operating system, device identifiers, and pages visited.
• Location Data: approximate location derived from IP, and precise GPS location only if you explicitly grant permission.
• Communications: messages sent through our platform to agents or developers, support enquiries, and feedback.
• Financial Information: we do not store payment card details; transactions are processed through PCI-DSS compliant third-party gateways.

3. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: matching you with relevant properties, connecting you with verified agents and developers.
• Account Management: creating and maintaining your account, authenticating your identity.
• Communications: sending property alerts, enquiry responses, transaction updates, and service announcements.
• Analytics & Improvement: understanding how users interact with the Platform to improve features, fix bugs, and personalise experiences.
• Legal Compliance: fulfilling obligations under RERA, PMLA, income tax laws, and court orders.
• Marketing (with consent): sending promotional emails about new listings, market insights, and Nilay 360 services — you may opt out at any time.

4. Sharing Your Information

We do not sell your personal data. We share your information only in the following circumstances:

• Verified Agents & Developers: your contact details are shared with a property agent or developer only when you initiate an enquiry or explicitly consent.
• Service Providers: trusted vendors (cloud hosting, email delivery, analytics, customer support) who process data on our behalf under strict data processing agreements and non-disclosure obligations.
• Legal Requirements: when required by law, court order, government directive, or to protect the rights, property, or safety of Nilay 360, our users, or the public.
• Business Transfers: in connection with a merger, acquisition, or sale of assets, subject to the acquirer maintaining equivalent privacy protections.

5. Your Rights Under DPDP Act 2023

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to Access: request a summary of the personal data we hold about you and the purposes for which it is processed.
• Right to Correction: request correction of inaccurate or incomplete personal data.
• Right to Erasure: request deletion of your personal data when it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to Withdraw Consent: withdraw consent at any time for processing activities based on consent — withdrawal does not affect the lawfulness of prior processing.
• Right to Grievance Redressal: raise a complaint with our Data Protection Officer (details in Section 8) within 30 days of the relevant event.
• Right to Nominate: nominate another individual to exercise rights on your behalf in the event of death or incapacity.

To exercise any of these rights, email privacy@nilay360.com with the subject line “DPDP Rights Request” and your registered email address. We will respond within 30 days.

6. Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse traffic, and personalise content. Essential cookies are necessary for the Platform to function. Analytics and marketing cookies are used only with your consent. For detailed information on the types of cookies we use and how to manage your preferences, please read our Cookie Policy at www.nilay360.com/cookies.

7. Data Security

We implement industry-standard security measures including:

• AES-256 encryption for data at rest.
• TLS 1.3 encryption for data in transit.
• Role-based access controls limiting employee access to personal data.
• Regular security audits and penetration testing.
• Multi-factor authentication for internal systems.

In the event of a personal data breach that is likely to result in harm to Data Principals, we will notify the Data Protection Board of India and affected users within 72 hours of becoming aware of the breach, as required under the DPDP Act, 2023.

8. Contact Our Data Protection Officer

For privacy-related queries, requests, or complaints, please contact our Data Protection Officer:

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India at www.dataprotection.gov.in.