Privacy Policy | 9 Property Wala

This Privacy Policy explains how 9 Property Wala ("9 Property Wala", "we", "us", or "our") collects, uses, stores, discloses and protects your personal data when you visit nine-property-wala.vercel.app (the "Site") or use our services.

We operate from Shop No. 9, Amrapali Village Apartments Market, Kala Pathar Road, Block AM, Indirapuram, Ghaziabad, Uttar Pradesh — 201014, India. This policy is written to be compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 (and the SPDI Rules, 2011).

If you do not agree with this policy, please do not use the Site or submit information to us.

1. What personal data we collect

We collect the minimum information needed to respond to your enquiry. Specifically:

Information you give us directlyvia the contact form or the "Enquire about this property" form on any property detail page: your full name, phone number, email address (optional), the service you're interested in, the specific property you're enquiring about (if applicable), and any message you choose to include.
Technical metadata captured automatically when you submit the form: your IP address (used to prevent abuse and for rate-limiting), the page the submission originated from, and a timestamp.
Browser storage: we use your browser's localStorage to remember your light/dark theme preference, and sessionStorageto remember whether you've already seen the welcome animation. No tracking cookies, no advertising cookies, no third-party analytics cookies.

We do not collect: your Aadhaar, PAN, bank details, income documents, or any sensitive personal data under the DPDP Act. If such documents are later needed for a specific transaction (e.g. property purchase paperwork), you will hand them over offline to a named team member — never via this website.

2. Why we collect it

Your data is used only for the following purposes:

To respond to your enquiry by phone, WhatsApp or email
To arrange property site visits, send property shortlists, or schedule consultations
To maintain an internal record of our client relationship
To prevent abuse of the contact form (rate-limiting by IP, honeypot detection)
To comply with applicable Indian laws where disclosure is legally required

We do not sell, rent or trade your personal data. We do not use it for targeted advertising. We do not share it with any data broker.

3. Who we share it with

We use a small number of carefully-chosen technology providers ("data processors") to store and deliver the information you submit. These providers process your data only on our instructions and solely to perform their service:

Neon Inc. (neon.tech) — hosts our PostgreSQL database where enquiry records are stored, encrypted at rest.
Vercel Inc. (vercel.com) — hosts the Site infrastructure and serves it over HTTPS.
Resend, Inc. (resend.com) — when enabled, delivers a notification email containing your enquiry to our team's inbox.
Telegram Messenger Inc. — when enabled, delivers a real-time notification of your enquiry to our internal team chat, so our advisor can respond quickly.

Beyond these processors, we disclose your data only if (a) you explicitly authorise us to (e.g. introducing you to a seller, home-loan officer, or lawyer at your request), or (b) we are legally required to do so by a competent Indian authority.

4. How long we keep it

Enquiries are retained for as long as our working relationship is active, plus a reasonable follow-up period — typically up to three years from your last interaction. After that, records are archived or deleted unless retention is required for a specific ongoing transaction or by law.

You can ask us to delete your data sooner — see Section 6.

5. How we protect it

All traffic to the Site is encrypted via HTTPS/TLS.
Our database is hosted on infrastructure with encryption at rest.
The admin dashboard that surfaces enquiry records is protected by HTTP Basic Authentication and is not indexed by search engines.
The contact form is protected by rate-limiting and a honeypot field against automated abuse.
Access to enquiry records is restricted to the founder and a small authorised team.

No system is perfectly secure. If we ever become aware of a data incident affecting your personal data, we will notify you and the relevant Indian authority in line with the DPDP Act's requirements.

6. Your rights under the DPDP Act, 2023

As a person whose data we hold, you have the following rights. To exercise any of them, email us at 9propertywala@gmail.com with the subject line "DPDP request":

Right to access: ask what data we hold about you and how it's been used
Right to correction: ask us to fix any inaccurate information
Right to erasure: ask us to delete your data from our systems
Right to withdraw consent: ask us to stop processing your data at any time
Right to grievance redressal: raise a grievance with our Data Protection Officer (see Section 9)
Right to nominate: nominate another individual to exercise your rights in case of incapacity

We will respond to verified requests within 30 days. If we're unable to fulfil a request (for example, due to a legal retention requirement), we will explain why.

7. Children's data

The Site is intended for adults interested in residential or commercial real estate. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has submitted data to us, please email us and we will delete it.

8. Third-party links

The Site contains links to third-party websites and tools — including Google Maps, WhatsApp, our social-media pages, and educational blog citations. We do not control those services, and their privacy practices are governed by their own policies.

9. Grievance Officer / Contact for privacy

If you have a privacy-related grievance or want to exercise any of the rights in Section 6, please contact:

Name: Sonu Malhotra
Designation: Grievance Officer & Founder, 9 Property Wala
Email: 9propertywala@gmail.com
Phone / WhatsApp: +91 93116 32755
Address: Shop No. 9, Amrapali Village Apartments Market, Kala Pathar Road, Block AM, Indirapuram, Ghaziabad — 201014

If we do not resolve your concern to your satisfaction, you may escalate to the Data Protection Board of India once it is formally constituted under the DPDP Act.

10. Changes to this policy

We may update this policy from time to time — for example, if we add a new data processor or change how we retain records. The "last updated" date at the top of the page reflects the most recent change. Continuing to use the Site after an update means you accept the revised policy.

Questions? Get in touch— we'd rather answer a straightforward question than argue about a subtlety.