Privacy Policy

Plain English summary

Brickplot collects only what is necessary to provide our service. We do not sell your data. We do not run ad-network retargeting. Builders never see your name. You can ask us to delete your data at any time and we will action it within 30 days. Our Data Protection Officer is reachable at grievance@brickplot.com.

1. What we collect — by data category

Lead form data: name, email, phone number, locality preference, budget band, intended purchase timeline. Submitted voluntarily when you request a brochure, watchlist update, or newsletter.

Paid /consult SKU data: in addition to lead form fields — project of interest, payment transaction ID (handled by our payment processor), uploaded documents you provide for verification (e.g. allotment letters, builder quotes). We do not store full card numbers; tokenisation is handled by the payment processor.

Buyer interview transcripts: recorded only with your explicit prior consent. Identifying details (your name, employer, specific unit number) are removed before any public publication.

Analytics: aggregated page-view counts, referrer source, device class. No third-party advertising cookies. No Facebook Pixel. No Google Ads retargeting.

We do not collect: your Aadhaar, PAN (except where mandated by a paid SKU for legal verification with explicit consent), biometric data, or location beyond city-level inference from your IP.

2. Purpose of processing

We process your data only for the specific purpose stated at collection: fulfilling your information request, delivering a paid consult, sending editorial updates you have opted into, or improving the accuracy of brickplot.com content.

We will not use your data for any new purpose without obtaining separate explicit consent. Consent given for one purpose does not extend to others (per the DPDP Act 2023 principle of purpose limitation).

3. Retention period

Lead form submissions: 24 months from collection, then automatic deletion.

Paid /consult SKU records: 7 years from delivery (retained for tax, audit, and dispute resolution). Personal identifiers may be deletion-requested earlier; transaction records will be anonymised rather than deleted to preserve audit trail.

Buyer interview transcripts: anonymised on publication. Raw recordings deleted within 90 days of transcription unless retained with your explicit consent.

Server access logs: 90 days (security and abuse detection only).

4. How we store and protect your data

All personal data is stored in our Supabase database hosted in Mumbai, India (AWS ap-south-1). Encrypted at rest (AES-256) and in transit (TLS 1.3). Access is restricted to authorised Brickplot personnel under role-based access control.

Backups are encrypted and rotated weekly. Backup retention does not extend the active retention period stated above — anonymisation propagates to backups within 30 days.

5. Your rights as a data principal

Per the DPDP Act 2023, you may at any time:

· Access — request a copy of all personal data we hold about you

· Correct — request correction of inaccurate or incomplete data

· Erase — request deletion of your personal data (subject to legal retention obligations)

· Withdraw consent — opt out of any future processing for which you had earlier consented

· Nominate — designate another person to exercise these rights in case of your death or incapacity

· Lodge a grievance — escalate any privacy concern via our Data Protection Officer

Send any of these requests to grievance@brickplot.com. We acknowledge within 24 hours and complete within 30 days as required by the DPDP Act 2023.

6. Breach notification

In the event of a personal-data breach that is likely to result in significant harm, we will notify affected data principals and the Data Protection Board of India without undue delay, ordinarily within 72 hours of becoming aware of the breach, in accordance with the DPDP Act 2023 and notified Rules.

7. Sharing with third parties

Brickplot does not sell or rent personal data to anyone, ever.

Builders, developers, and their agents never receive your name, phone, or email from us. (See our /coi declaration: Brickplot accepts ₹0 from builders.)

Limited sharing happens with:

· Our payment processor (Razorpay) — only the transaction details required to charge you

· Our email delivery vendor — only the email address required to send messages you opted into

· Government authorities — only on receipt of a lawful order under Section 79 of the IT Act 2000

8. Cookies and analytics

We use minimal first-party analytics to understand which pages are useful to readers. No third-party advertising cookies. No Facebook Pixel. No Google Ads or retargeting technology. We do not build individual visitor profiles.

9. Children

Brickplot services are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact our Data Protection Officer and we will delete it.

10. International transfer

Personal data is stored in India (AWS ap-south-1, Mumbai). We do not currently transfer personal data outside India. Any future cross-border transfer will be subject to DPDP Act 2023 conditions and notified to you.

11. Data Protection Officer / Grievance Officer

Name: Brickplot Data Protection Desk

Email: grievance@brickplot.com

Postal: Brickplot Editorial, Bengaluru, Karnataka, India

Acknowledgment within 24 hours. Resolution within 30 days. Escalation route: /grievance.

12. Changes to this policy

Substantive changes will be announced at least 14 days before they take effect, via the last-updated date on this page and a notice on the homepage. Trivial clarifications may be made without notice.