Privacy Policy

1. Privacy Policy

The website www.rentaroof.in and its mobile application (the “Portal”) are operated by Rent A Roof Private Limited (formerly known as Blue Reef Real Estate Private Limited) (“Rent A Roof”, “Company”, “we”, “us”, “our”). We are committed to protecting the data you share and respecting your privacy. This Privacy Policy is an integral part of, and must be read together with, our Terms & Conditions, and it is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 read with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. For the purposes of the DPDP Act, Rent A Roof is the Data Fiduciary that determines the purpose and means of processing your personal data. By accessing or using the Portal or our services in any manner — including simply browsing — you unequivocally accept this Privacy Policy and grant us a personal, non-exclusive, non-transferable, revocable, limited privilege to enter, access and use the Portal. We may update this policy from time to time; the current version applies whenever you use the Portal, so please review it each time. If you do not agree, please do not use the Portal or share your information.

2. Collection of personal and other information

We may collect and hold the following, as relevant to your use of the Portal: (a) personal details — your name, contact number, email address, and, where you transact with us, address, KYC documents, photographs and similar identity information; (b) property information — for owners and their listings, ownership, address, dimensions, valuation, availability and photographs; (c) account information — your login/verification details, saved shortlist and searches, and preferences; (d) technical and usage data — device and browser type, IP address, the pages and listings you view, the searches you run, and approximate location, collected through cookies and similar technologies; (e) marketing preferences; (f) communication records — chats, messages, emails and call records with our desk; (g) feedback and reviews; and (h) advertising signals such as the ad click identifier and advertising cookies described below. You expressly agree that we may collect, store and process this information for the purposes set out in this policy. We do not ask for your card, bank passwords or financial credentials to browse or enquire.

3. Use of information

We use the information we collect to: (a) identify you and contact you about the enquiry or service you started; (b) enable your account, shortlist and property searches; (c) provide, personalise and improve our services and analyse how the Portal is used; (d) keep the Portal secure and prevent fraud and misuse; (e) work with trusted partners, agents and property owners to fulfil your request and help them understand what you are looking for; (f) train our team and resolve disputes and troubleshoot issues; (g) publish feedback and testimonials (with your consent); (h) send you service notifications and, where you have opted in, offers and updates; (i) measure and run our advertising, including through Meta as described below; and (j) comply with law and share information with authorities where legally required. Under the DPDP Act we rely on your consent, on the legitimate uses permitted by the Act (including responding to a request you voluntarily made to us), and on compliance with law, as applicable to each purpose.

4. Advertising and measurement — Meta Pixel and Conversions API

We use the Meta Pixel and the Meta Conversions API (services of Meta Platforms, Inc., which operates Facebook and Instagram) to measure how our advertising performs and to show relevant properties to people who have shown interest. We may share event data — for example that a page was viewed, an enquiry was made or an account was created — together with identifiers. Where your mobile number or email is used for this purpose it is irreversibly hashed on our servers before it is sent, so Meta does not receive your number or email in readable form. We may also use analytics and advertising tools such as Google Analytics and Google Ads. You can manage or opt out of personalised advertising through your Meta and Google account ad settings and your device settings. The data these partners receive is governed by their own privacy policies.

5. Cookies

A cookie is a small file placed on your device so the Portal can remember something about you or your visit. We use essential cookies to keep you signed in and hold your session; functional cookies to remember choices such as your saved shortlist; and analytics and advertising cookies to understand usage and measure advertising. You can consent to, or block, cookies through the tools we provide, your browser settings, or private/incognito mode — though blocking some cookies may restrict parts of the Portal. Third-party websites and advertisements linked from the Portal may set their own cookies; we do not control these and are not responsible for them, and you should review their cookie policies. A privacy preference panel, where signed-in users can turn specific tracking on or off, is being added to your dashboard.

6. Changes to the information you provide

You can rectify, complete, update or erase your information, or ask us to restrict its processing, by contacting our Grievance Officer below or updating your account. You may opt out of non-essential data collection and disable cookies, though this may limit your access to some services. You may withdraw a consent you have given at any time — for example by unsubscribing from marketing or emailing us — which will not affect processing already carried out. We reserve the right to pursue available legal remedies where false or unlawful information causes loss or damage.

7. Information disclosure

We may disclose your information to: (a) trusted third-party service providers who process it under contract and appropriate security terms, only on our instructions (for hosting, messaging, analytics and advertising); (b) property owners and agents, to the extent needed to arrange a viewing or service you have asked for; and (c) authorities, courts or other bodies where we are required to by law or where we in good faith believe disclosure is reasonably necessary to respond to legal process. We may share information with our group companies and affiliates, and, if we are involved in a merger, acquisition or business restructuring, your data may be transferred as part of that transaction, with the recipient remaining bound by this policy. We do not sell your personal data, and we do not share your number with other brokers or unrelated organisations. You may withdraw a disclosure consent by contacting us.

8. Third-party advertisements and links

The Portal may contain links to, and advertisements for, third-party websites and services that are beyond the scope of this policy and outside our control. Please review the privacy policies of those third parties before sharing your data with them. You agree to indemnify us against any claim arising from your dealings with such third parties.

9. Security and compliance of your data

We maintain reasonable security practices and procedures as required under the IT Act and the SPDI Rules — including access controls, encryption of sensitive fields, and hashing of any identifiers shared for advertising. Transactions on the Portal are secured and encrypted to protect against unintentional disclosure. We do not receive, store or retain your card or bank credentials — where you make a payment, those details are shared by you directly with your bank or the payment service. In the event of a personal data breach, we will notify the Data Protection Board and affected users as required by law. No method of transmission or storage is completely secure, and you acknowledge the inherent risks.

10. Storage and retention of information

We process your personal data in India and may use third-party facilities that maintain appropriate security. We keep your data for as long as needed for the purpose it was collected, for as long as your account is active, and for a reasonable period afterwards. Even after you withdraw consent, we may retain basic information where required for legal, statutory, tax, regulatory or dispute-resolution purposes. When data is no longer required for these purposes, we delete or anonymise it. We exercise due diligence to prevent loss, misuse, theft or unauthorised alteration of the data we hold.

11. Your rights under the DPDP Act

Subject to the DPDP Act you have the right to: (a) access a summary of the personal data we hold about you and how we process it; (b) have it corrected, completed or updated; (c) have it erased when it is no longer required; (d) nominate another person to exercise your rights in the event of your death or incapacity; (e) withdraw a consent you have given; and (f) have a grievance redressed. To exercise any of these rights, contact our Grievance Officer below; we may ask you to verify your identity before we act. If your concern is not resolved to your satisfaction, you may lodge a complaint with the Data Protection Board of India.

12. Children

Our services are intended for adults. We do not knowingly collect the personal data of anyone under 18, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a minor has provided us data, contact us and we will delete it.

13. Grievance Officer

If you have a question or complaint about how your personal data is handled, you can reach our Grievance Officer, Divya Prajapati, at divya.prajapati@rentaroof.in or +91-8448877187, Monday to Saturday, 10am–7pm IST. We aim to acknowledge grievances promptly and to resolve them within the timelines prescribed under applicable law — ordinarily within 30 days. General queries can be sent to support@rentaroof.in or +91-8448877187, Monday to Saturday, 10am–7pm IST.

14. Applicability of laws and jurisdiction

This policy is governed by the laws of India, including the DPDP Act, 2023 and the Information Technology Act, 2000. Any dispute will first be attempted to be resolved amicably; failing which it shall be subject to the laws of India and the exclusive jurisdiction of the courts at Delhi. This is a computer-generated document and does not require a physical or digital signature. Your use of the Portal or our services signifies your unequivocal acceptance of this Privacy Policy and our Terms & Conditions.