1. Introduction

At Bengali Homes, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. We are committed to protecting your personal data in accordance with applicable Indian laws.

2. Compliance with Indian Law

This Privacy Policy is published in compliance with:

• Information Technology Act, 2000 and the rules framed thereunder (including IT Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011).
• Digital Personal Data Protection Act (DPDP), 2023. As a Data Fiduciary under the DPDP Act, we ensure lawful processing of your personal data based on explicit consent and legitimate uses.

3. Data We Collect

We may collect the following types of information:

• Personal Identification Data: Name, email address, phone number, and physical address when you register or submit inquiries.
• Financial Data: Transaction history and payment details (Note: actual payment processing is handled securely by Razorpay; we do not store full credit card or UPI PIN details).
• Technical Data: IP address, browser type, device information, and usage metrics for analytics and security (utilizing Arcjet Digital Guard).

4. How We Use Your Data

Your data is utilized strictly for the following purposes:

• To facilitate property viewing, bookings, and legal verification processes.
• To process payments and issue receipts securely.
• To communicate updates, administrative notices, and promotional offers (only with your explicit consent).
• To comply with legal obligations and resolve disputes.

5. Data Security & Storage

We employ industry-standard security measures, including End-to-End Encrypted (E2EE) Lead Tunnels and database encryption via Firebase, to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Your data is stored on secure servers located in compliance with Indian data localization preferences.

6. Your Rights (DPDP Act 2023)

As a Data Principal under Indian law, you have the right to:

• Access: Request a summary of your personal data being processed by us.
• Correction & Erasure: Request the correction of inaccurate data or the deletion of your data when it is no longer necessary for the purpose it was collected.
• Grievance Redressal: Register complaints regarding your data processing with our designated Data Protection Officer.
• Withdraw Consent: Withdraw your consent for data processing at any time, subject to legal and contractual constraints.

7. Contact Us / Grievance Officer

In accordance with the IT Act 2000 and the DPDP Act, if you have any questions, concerns, or grievances regarding this Privacy Policy or your data, please contact our Grievance Officer.

8. Governing Law & Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the courts located in Malda, West Bengal.