This Privacy Policy explains how EnrichDeals collects, uses, shares, and protects personal data, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).
1. Data we collect
- Identity & contact: name, email, phone, country/city.
- Property interest: budget, intent, preferred locations, shortlists, enquiry history.
- Verification (KYC): document type and a one-way hash of your government ID number. We never store the raw number; only a hash plus the last four digits for display.
- Usage & device: log data, IP address, and an essential session cookie.
2. How we use it
- To provide the Service: match listings, coordinate tours and deals, and support you.
- To verify identity where a feature requires KYC/AML.
- To communicate with you on channels you have consented to, subject to our consent rules.
- To keep the Service secure and to meet legal and regulatory obligations.
3. Consent & marketing
We send marketing communications only with the consent required for the relevant channel and jurisdiction. You can withdraw consent at any time — for example by replying STOP, using an unsubscribe link, or contacting us. Withdrawing consent does not affect the lawfulness of processing before withdrawal. A data-erasure request (below) also withdraws marketing consent.
4. Sharing
We share personal data only as needed to operate the Service: with the agent or developer handling your enquiry; with independent partners you choose to engage (such as lenders, banks, or licensed escrow agents); and with infrastructure providers under appropriate contracts. We do not sell your personal information. We do not buy, rent, or import scraped contact lists.
5. Retention
We keep personal data only as long as necessary for the purposes above or as required by law. Compliance and audit records (which contain no raw ID numbers) are retained for a minimum of four years to meet regulatory obligations.
6. Your rights
Depending on your jurisdiction, you have the right to access, correct, delete, and port your data, and to object to or restrict certain processing. EnrichDeals provides self-service tools:
- Access / portability: download a machine-readable copy of your data at /api/privacy/data-export (sign-in required).
- Erasure: request deletion via Settings or by POSTing to
/api/privacy/erasure-request. We anonymize your direct identifiers, retain only non-identifying aggregate analytics, and close your account.
We never include raw government ID numbers in an export because we never store them — only a one-way hash.
7. Security
We use technical and organizational measures appropriate to the risk, including hashing of sensitive identifiers, encrypted transport, role-based access control, and an append-only audit log of consequential actions.
8. International transfers
EnrichDeals operates across India, the USA, and the UAE. Where personal data is transferred across borders, we rely on appropriate safeguards consistent with applicable law.
9. Cookies
We use a single essential cookie to keep you signed in. Any non-essential cookies are used only with your consent, which we request via a banner for visitors in regions that require it. See the banner controls to accept or reject non-essential cookies.
10. Contact
For privacy questions or to exercise your rights, contact our Data Protection contact at privacy@enrichdeals.com.