Al momento questa pagina è disponibile solo in inglese.
Privacy and data protection
Privacy Policy & Data Protection.
What personal information Estate Ulagam collects, why we need it, who sees it, how long we keep it, and how to ask us to copy, correct or delete it.
- Updated 20 October 2026
- About 10 minutes to read
- Applies in 18 markets
The short version
We collect only what we need
Your phone number and email to confirm you are real, your enquiries, and, if you advertise, your ID and property documents.
We do not sell your data
Not to telemarketers, loan agents, call centres or advertising networks. Enquiries never become a call list.
Documents stay private
Ownership and ID documents sit in private storage, never on a public page, and open only through links that expire after 10 minutes.
Enquiries reach the right person
Your enquiry goes to our desk and, once we introduce you, to the advertiser of that one property.
No advertising trackers
We store a few things in your browser so the site works. We run no advertising trackers and no analytics.
You are in control
Ask for a copy, a correction or deletion, or withdraw a consent, with the form on this page.
Who we are and what this covers
Estate Ulagam (“we”, “us”) publishes reviewed property advertisements at www.estateulagam.com, on its country pages and in its mobile app. This policy covers the personal information of everyone who uses them: visitors, buyers, tenants and advertisers (owners, brokers and builders).
We decide why and how that information is used, so we are responsible for it. In data protection law that makes us the “controller” (in India, the “data fiduciary”).
We update the date at the top of this page whenever we change the policy. If your country’s law gives you extra rights, Section 8 tells you where to find them.
What we collect
| When you | What we collect | Why |
|---|---|---|
| Browse the site | Standard technical logs kept by our hosting provider: your IP address, browser type, the pages you request and the time. We also count how often each advertisement banner is shown and clicked, with the country and the type of device, but nothing that identifies you. | To run and secure the site, and to report to advertisers |
| Sign in or enquire | Your phone number (confirmed with a one-time code), your name and email address, the properties you save, and the messages you send to the desk. | To confirm you are a real person, route your enquiry and reply to you |
| Advertise | Your name, email, phone number, company and role. A copy of your identity document, the ownership or authority documents for each property, and your licence or company registration if you are a broker or builder. Photographs and listing details. A payment reference and any proof of payment you send us. | To review, publish and bill your advertisement |
| Accept our terms | That you accepted the Terms and this policy, which version, when, and whether you agreed to marketing messages. | To show what you agreed to |
Currency and your IP address
The first time you visit, if you have not already chosen a currency, we use the approximate country that our hosting provider (Vercel) reads from your IP address to show prices in a suitable currency. Nothing is sent to any other company, and we do not store it. Choosing a currency yourself stops it.
We do not store card numbers. Payments are matched to your order by our team.
How documents are protected
- Private storage. Documents are kept in a private file store with no public access, and are encrypted at rest by our storage provider.
- Short-lived links. A document opens only through a link that expires after 10 minutes. Our review staff open documents when they check your advertisement.
- Never shown publicly. A listing page shows photographs, the property details and the Verified mark. It never shows title deeds or ID documents.
- Address privacy. An owner can choose to hide the exact address, so the map shows only an approximate area.
If something goes wrong
If a security breach puts your information at risk, we tell you and the data protection regulator, as your country’s law requires. We keep a record of every breach, however small.
How long we keep it
| Information | How long we keep it | What happens next |
|---|---|---|
| Live advertisements and photographs | The term of your package (30, 60 or 90 days) | Taken down when the term ends, and archived after 30 days |
| Identity and ownership documents | While your advertisement is under review or live | Permanently deleted when you ask us to delete your listing |
| Invoices and tax records | 5 to 10 years, depending on the tax law of your market | Held in secure archive for that period, then deleted |
| Enquiries and sign-in code logs | 12 months from the enquiry | Made anonymous or deleted |
Your rights and how to use them
You can ask us to:
- give you a copy of the personal information we hold about you;
- correct information that is wrong or out of date;
- delete your account, your listing or your documents;
- stop marketing messages, or withdraw another consent you gave.
The exact rights you have depend on the law where you live (see Section 8). We handle every request in the same way: we confirm it is you, then act on it within the time your local law sets.
Make a request
Your country's law and regulator
| Market | Law | Regulator you can complain to |
|---|---|---|
| India | Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 | Data Protection Board of India |
| United States | California Consumer Privacy Act (CCPA/CPRA) and other state privacy laws | California Privacy Protection Agency, and your state's consumer protection office |
| Dubai | Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) | Federal Authority for Artificial Intelligence and Data, which took over the UAE Data Office in June 2026 |
| Canada | Personal Information Protection and Electronic Documents Act (PIPEDA), and provincial laws such as Quebec's Law 25 | Office of the Privacy Commissioner of Canada, or in Quebec the Commission d'accès à l'information |
| Sri Lanka | Personal Data Protection Act, No. 9 of 2022, as amended by Act No. 22 of 2025 | Data Protection Authority of Sri Lanka |
| United Kingdom | UK GDPR and the Data Protection Act 2018 | Information Commissioner's Office (ICO) |
| France | GDPR and the Loi Informatique et Libertés | Commission Nationale de l'Informatique et des Libertés (CNIL) |
| Germany | GDPR and the Bundesdatenschutzgesetz (BDSG) | The data protection authority of your German state |
| Spain | GDPR and Ley Orgánica 3/2018 (LOPDGDD) | Agencia Española de Protección de Datos (AEPD) |
| Portugal | GDPR and Lei n.º 58/2019 | Comissão Nacional de Proteção de Dados (CNPD) |
| Italy | GDPR and the Codice Privacy (D.Lgs. 196/2003) | Garante per la protezione dei dati personali |
| Greece | GDPR and Law 4624/2019 | Hellenic Data Protection Authority (HDPA) |
| Japan | Act on the Protection of Personal Information (APPI) | Personal Information Protection Commission |
| Turkey | Law No. 6698 on the Protection of Personal Data (KVKK) | Personal Data Protection Authority (KVKK) |
| Brazil | Lei Geral de Proteção de Dados (LGPD), Lei nº 13.709/2018 | Autoridade Nacional de Proteção de Dados (ANPD) |
| Mexico | Ley Federal de Protección de Datos Personales en Posesión de los Particulares | Secretaría Anticorrupción y Buen Gobierno |
| Singapore | Personal Data Protection Act 2012 | Personal Data Protection Commission (PDPC) |
| Malaysia | Personal Data Protection Act 2010 | Personal Data Protection Commissioner (JPDP) |
If you are unhappy with how we have handled your information, we would like the chance to put it right first. You can still complain to the regulator for your country at any time.
Contact and complaints
Privacy questions and complaints go to the Legal and Grievance Officer at legal@estateulagam.com. You can also use the Contact page, or message the desk on WhatsApp. We acknowledge a complaint within 24 hours and resolve it within 7 days.
Questions about your privacy?
Ask the desk, or send a request about your own data with the form in Section 7. We will confirm it is you before we share, change or delete anything.

