Privacy Policy

1. Who we are. CREART SOLUTIONS PVT LTD ("AMDProperties") is the Data Fiduciary for personal data processed through the Platform, under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025. Until the DPDP Act fully replaces it, we also follow the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. This notice is available in English and, on request, in Gujarati or Hindi or any language in the Eighth Schedule to the Constitution.

2. Personal data we collect.

We do not ask for Aadhaar, PAN, bank, card or health details through the Platform or WhatsApp. Never share these with us in chat.

3. Why we use it. We process your personal data only for these purposes:

1. Showing listings and recommendations that match your requirements.
2. Responding to your enquiry, including calls and WhatsApp messages from our team.
3. Sharing your enquiry with the specific builder, broker or owner of a property you show interest in, so they can contact you.
4. Arranging site visits and following up on your search.
5. Sending property alerts and offers, only where you have opted in.
6. Improving the Platform, preventing fraud and spam, and keeping it secure.
7. Complying with law, court orders and requests from authorised government agencies.

4. Legal basis and consent. We rely on your consent, given by a clear affirmative action such as ticking an unticked box, tapping "Submit" after reading this notice, or sending us a WhatsApp opt-in message. Each purpose that is not needed to answer your enquiry (for example marketing alerts) has a separate choice. Where Section 7 of the DPDP Act allows, we may also process data for legitimate uses, such as data you voluntarily provide for a specific purpose, legal compliance, or responding to a medical emergency or disaster.

5. Withdrawing consent. You can withdraw consent at any time, as easily as you gave it: reply STOP on WhatsApp, use the unsubscribe link in emails, tell our telecaller, or write to [email protected]. We will stop processing for that purpose within a reasonable time and ask our partners and processors to do the same. Withdrawal does not affect processing already done, and we may be unable to continue serving an enquiry without basic contact details.

6. Who we share it with.

• Property providers (builders, brokers, owners) for the specific listings you enquire about. Once shared, they handle your data under their own responsibility; we contractually require them to use it only to respond to your enquiry.
• Data Processors acting for us under written contracts: hosting and cloud providers, CRM and telephony providers, Meta Platforms (WhatsApp Business), email and SMS providers, analytics providers.
• Authorities where required by law, court order or a lawful request.
• A successor in a merger, acquisition or sale of business, subject to this policy.

We do not sell your personal data.

7. Transfers outside India. Some processors store data on servers outside India. We transfer data only to countries not restricted by the Central Government under Section 16 of the DPDP Act, and with contractual safeguards.

8. How long we keep it. We keep personal data only while needed for the purpose it was collected or as required by law. As a default: active enquiries and chat history for 24 months after your last interaction; call recordings for 6 months; marketing preferences until you withdraw; logs needed for security and legal compliance for at least 1 year as required under the DPDP Rules and IT Rules. After that we delete or anonymise it. Where the DPDP Rules require, we will notify you at least 48 hours before erasure for inactivity.

9. Your rights. As a Data Principal you may:

• get a summary of the personal data we hold about you and the processing done;
• learn which Data Fiduciaries and Processors we have shared it with;
• correct, complete, update or erase your data;
• withdraw consent;
• nominate another person to exercise your rights in case of death or incapacity;
• raise a grievance with us, and if not resolved, complain to the Data Protection Board of India.

To exercise any right, write to [email protected] or WhatsApp +91 99981 19596 with the subject "Data Request". We may verify your identity first. We aim to respond within 30 days, and in any case within the period set by law.

10. Your duties. Under Section 15 of the DPDP Act you must not give false particulars, impersonate another person or file frivolous grievances.

11. Children. The Platform is not meant for anyone under 18. We do not knowingly collect children's data. If we learn we have, we will delete it unless verifiable parental consent has been obtained as required by law.

12. Security. We use reasonable security safeguards, including encryption in transit, access controls limited to staff who need the data, role-based CRM permissions for telecallers, logging and monitoring, and periodic review. No system is fully secure. If a personal data breach occurs, we will inform affected users and the Data Protection Board and CERT-In as required by law.

13. Calls and recordings. Our telecallers may call you after you submit an enquiry. Calls may be recorded for quality, training and dispute resolution; you will be told at the start of the call. We respect the TRAI DND registry for promotional calls and messages.

14. Changes. We will post any update here with a new Effective Date and, for material changes, notify you by email, SMS or WhatsApp where we have your consent to do so.

15. Contact. Privacy questions and requests: [email protected]. Grievance Officer details are on the Grievance Redressal page.