Data Protection & Statutory Governance
Privacy Policy & Data Protection.
Our binding commitment to encrypted document security, zero-telemarketing buyer protection, and statutory regulatory compliance across India, the United States, Dubai, Canada, and Sri Lanka.
Overview, Scope & Operating Entities
Operational governance, regulatory remit, and territorial legal entities.
Estate Ulagam (“we”, “our”, “us”, or the “Platform”) operates a curated, verified real estate advertising and discovery service accessible at www.estateulagam.com and its dedicated regional portals in India, the United States, the United Arab Emirates, Canada, and Sri Lanka.
This statutory Privacy Policy governs the collection, recording, encrypted storage, verification auditing, and disclosure of personal and property data collected from advertisers (property owners, builders, certified real estate brokers) and prospective buyers, tenants, and investors.
Categories of Personal & Title Data Collected
Structured taxonomy of records collected from advertisers, licensed brokers, and verified buyers.
To maintain the integrity of our verified marketplace and comply with regional anti-fraud and real estate advertising regulations, we collect the following structured categories of data:
- • Full legal name, verified email, and phone number
- • National ID (Aadhaar/PAN, Emirates ID, Passport, NIC)
- • Broker license numbers (RERA / Real Estate Council credentials)
- • Power of Attorney / Authority to Represent mandates
- • Registered Title Deeds and parent conveyance documents
- • Revenue extracts (Patta, Chitta, Khata, DLD Oqood, Land PIN)
- • Approved building sanctions, survey plans & occupancy permits
- • Non-encumbrance certificates (EC) and tax receipts
- • OTP-verified mobile contact number
- • Expressed inquiry parameters and property bookmarks
- • Timestamped WhatsApp routing authorizations
- • Identity confirmation logs for site-visit requests
- • Approximate IP-derived regional territory (country/city)
- • Browser telemetry, session tokens & CSRF hashes
- • Currency and language preferences (localStorage)
- • Immutable consent audit timestamps
Anti-Spam & Zero-Telemarketing Policy
Zero syndication of phone numbers and zero unauthorized broker calling lists.
“Estate Ulagam NEVER sells, leases, rents, trades, or syndicates phone numbers, email addresses, or user inquiry registries to third-party telemarketers, loan aggregators, or call centers.”
Inquiries initiated through the platform are mediated via our official regional desks. When a buyer initiates an inquiry for a property:
- The buyer must complete a one-time OTP phone verification to ensure the request is genuine and not generated by automated scraping bots.
- Inquiry details are forwarded exclusively to the authorized listing seller or verified agent for that specific property asset.
- No mass broadcast or syndication to competing brokerage firms is permitted.
The Encrypted Document Vault & Public Masking
AES-256 storage protocols ensuring submitted deeds and identity instruments are never exposed publicly.
To maintain the highest level of seller confidentiality, Estate Ulagam enforces strict architectural separation between public listing media (photographs, plans) and internal legal verification documents (deeds, identity cards).
AES-256 Cryptographic Vault at Rest
All legal title deeds, revenue extracts, and national IDs are stored in isolated encrypted buckets under strict role-based access controls.
Zero Public Document Exposure Guarantee
Raw title deeds and seller national IDs are strictly never visible to the public on listing pages. Public visitors see only our verified mark and audited property attributes.
Address Privacy & Approximate Mapping
Sellers can choose to conceal exact building numbers on public maps. The platform renders an approximate locality circle to safeguard property privacy.
Multi-Jurisdictional Regulatory Directives
Statutory compliance with DPDP Act (India), PDPL (Dubai), PIPEDA (Canada), and PDPA (Sri Lanka).
Estate Ulagam aligns its data processing governance with statutory requirements across our international operating jurisdictions. Explore the interactive compliance matrix below:
Applicable statute
Digital Personal Data Protection Act, 2023 (DPDP Act) & IT Act 2000
Supervisory authority
Data Protection Board of India (DPBI)
Statutory rights in India
- Right to access summary of personal data and processing activities
- Right to correction, completion, and updating of inaccurate listing information
- Right to erasure of personal data & document vault purging upon listing archival
- Right of grievance redressal with our designated India Grievance Officer
- Right to nominate a representative in the event of death or incapacity
Statutory basis
DPDP Act, 2023 (Sections 6, 11, 12 & 13)
Data retention
Duration of active campaign + 5 years for statutory tax records (GST Act).
Regional DPO desk
dpo.india@estateulagam.comData Retention, Archival & Disposal Schedules
Statutory storage windows for active advertising files and automated document purge rules.
Personal and property data is retained only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory accounting and tax regulations:
| Data Category | Active Retention Window | Statutory Disposal Action |
|---|---|---|
| Active Property Listings & Photos | Duration of paid advertising package (30d / 60d / 90d) | Unpublished upon expiry; archived after 30 days |
| Encrypted Title Deeds (Vault) | Duration of active listing verification | Permanently purged upon listing deletion request |
| Financial Invoices & Tax Receipts | 5–7 years (GST India, FTA Dubai, CRA Canada, IRD Sri Lanka) | Secure electronic archival under tax compliance |
| Buyer Inquiries & OTP Logs | 12 months from inquiry timestamp | Automated cryptographic pseudonymization |
Your Data Subject Rights & Privacy Desk
Submit official requests for data portability, document erasure, or marketing consent management.
You retain sovereign ownership over your personal data. You may lodge a Data Subject Access Request (DSAR) at any time through our interactive desk below:
Regional Data Protection Officer (DPO) Directory
Direct contact points for statutory escalations, DPBI filings, and compliance inquiries.
For grievances, statutory inquiries, or urgent compliance interventions, contact our designated Data Protection Officers directly:
Grievance Officer: Legal & Compliance Unit
Email: dpo.india@estateulagam.com
OMR IT Expressway, Chennai 600096, TN, India.
Compliance Officer: Data Governance Desk
Email: dpo.uae@estateulagam.com
Business Bay, Dubai, United Arab Emirates.
Privacy Officer: Regulatory & Compliance
Email: dpo.canada@estateulagam.com
Bay Street, Toronto, ON, Canada.
Compliance Lead: Legal Governance Unit
Email: dpo.srilanka@estateulagam.com
Colombo Commercial Center, Colombo 01, Sri Lanka.