Home Privacy Policy

Privacy Policy

1. Who we are and what this policy covers

Credmitra Innovations Private Limited (“Credmitra”, “we”, “us”) is a company incorporated in India with its corporate office at 101-103 Sai Chambers, Sector 11, CBD Belapur, Navi Mumbai 400713. We act as the sole-selling partner for real estate projects in the Mumbai Metropolitan Region. This policy explains what personal data we collect through credmitra.com, our platforms (Fractix, CREDspaces and DHAN-O) and our sales process, why we collect it, who we share it with, how long we keep it, and the rights you have.

This policy applies to home buyers, commercial buyers, investors, developers, channel partners and anyone else who contacts us. It does not cover third-party websites we link to, including the MahaRERA website, social media platforms and the websites of banks and lenders; those are governed by their own policies.

2. What we collect and where it comes from

We collect only what we need to respond to you and to run the sale of a project. Depending on how you deal with us, this includes:

Enquiry and site-visit forms on this website: your name, email address, contact number, the project you are interested in, the configuration or use you are looking for (for example 2 BHK, business or pre-leased), a budget band, and any message you type. The “Send us your project” form for developers also asks for the project name, location, RERA status, total sale value and unsold inventory.
Enquiries that reach us from elsewhere: if you respond to one of our advertisements on Meta (Facebook or Instagram), Google or a property portal, or are introduced by a channel partner, we receive the details you gave on that platform, usually your name, contact number, email address and the project or configuration you chose.
Our conversations with you: notes of calls, WhatsApp messages and emails with our sales team, site-visit records, and the preferences you tell us about. If you call us, we may keep a record of the call.
Booking and KYC information: if you book a unit, the developer is required under the Real Estate (Regulation and Development) Act 2016 and anti-money-laundering rules to collect identity and address proof, PAN and payment details. Where we collect these on the developer’s behalf, we handle them only for that booking and pass them to the developer.
Loan eligibility (DHAN-O): if you use DHAN-O to check home-loan eligibility, you may give us income, employment and existing-loan details. We use them only to estimate eligibility and, with your consent, to introduce you to lending partners.
Website usage: pages visited, time on page, referring site, approximate location, device and browser type, collected through Google Analytics as described in section 6. We do not collect your date of birth, gender or other demographic data through this website.

3. Why we use it

To respond to your enquiry, arrange a site visit, share project information, brochures, price lists and availability, and follow up on your interest in the project you asked about.
To process a booking and the payments, documentation and updates that follow it, together with the developer.
To evaluate a project a developer sends us and to respond to the developer.
To estimate home-loan eligibility and introduce lending partners, where you ask us to.
To keep you informed about the project you enquired about, including construction progress, possession and offers on the same project. We send marketing about other projects only if you have agreed to receive it, and you can stop it at any time.
To run, secure and improve this website and our platforms, and to understand which pages and campaigns bring enquiries.
To meet legal obligations, including under RERA, tax and company law, and to respond to lawful requests from authorities.

We process your personal data on the basis of the consent you give when you submit a form, respond to an advertisement or speak to our team, and, where a booking is made, to perform the booking and meet the legal obligations that come with it. You may withdraw consent at any time as described in section 8; this does not affect processing already carried out or processing we are required by law to continue.

4. Who we share it with

We do not sell personal data. We share it only as follows:

The developer of the project you enquire about. Credmitra sells on behalf of developers. When you enquire about or book a unit in a project, your enquiry and booking details are shared with that project’s developer entity (for example Patkar Realty LLP for Ram Empire, or the entity named on the project page), which is itself responsible for the project and for your booking under RERA. We do not share your details with developers of projects you have not enquired about.
Channel partners. If a registered channel partner introduced you to us, we confirm the enquiry to that partner for the purpose of the introduction, and nothing more.
Lending partners. Through DHAN-O, and only with your consent, we introduce you to banks, housing finance companies or NBFCs so that they can process a home loan. Their use of your data is governed by their own policies.
Service providers that work for us. Website hosting, Google Workspace (email and the spreadsheets our sales team uses to track enquiries), Google Tag Manager and Google Analytics, our form plugin, advertising platforms where you responded to an advertisement, and telephony and messaging services. They process data on our instructions and are not permitted to use it for their own purposes.
Professional advisers and authorities. Our auditors, lawyers and consultants under confidentiality obligations; and regulators, courts or law-enforcement agencies where the law requires it.
A buyer of our business. If Credmitra or its business is merged with or acquired by another entity, your personal data may be transferred to that entity, which must continue to honour this policy.

5. Where it is stored

Our records are kept on servers and cloud services that may be located outside India, including those of Google. We transfer personal data outside India only where the law permits and with protections in place. Booking and KYC records are kept in India by the developer as required by law.

6. Cookies and analytics

This website uses Google Tag Manager and Google Analytics to understand how visitors use it and which pages and campaigns bring enquiries. Google Analytics sets cookies that record a visitor identifier, the pages visited and the referring source; the data is aggregated and we do not use it to identify you by name. You can prevent this by blocking cookies in your browser or by installing the Google Analytics opt-out add-on; the site will still work. We do not currently use advertising pixels on this website; if we add one, this section will be updated before it is switched on. Our form plugin sets a short-lived cookie to protect forms from spam.

7. How long we keep it

Enquiries and site visits: 24 months from your last interaction with us, after which the record is deleted or anonymised, unless you book a unit or ask us to delete it earlier.
Bookings and KYC: for the period required by RERA, tax and company law, which is generally eight years from the end of the financial year of the transaction, and for as long as a dispute or legal requirement makes it necessary.
Developer project submissions: 24 months, or for the life of the mandate if we take the project on.
Analytics data: 14 months in Google Analytics.
Calls, messages and emails: for the same period as the enquiry or booking they relate to.

8. Your rights

You may, at any time:

ask what personal data we hold about you and receive a copy;
ask us to correct or update it;
ask us to delete it, which we will do unless we are required by law to keep it (for example booking records under RERA);
withdraw your consent to marketing or to any processing that is based on consent;
nominate a person to exercise these rights on your behalf in the event of your death or incapacity, as provided under Indian data protection law;
raise a grievance about how we have handled your data.

To do any of these, write to privacy@credmitra.com from the email address you gave us, or to the postal address in section 1. We respond within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India once it is operational, or any other forum available under applicable law.

9. Security

We protect personal data with access controls, encrypted connections (HTTPS), password-protected accounts for our team, and contractual obligations on service providers. Only the team members who need your data to handle your enquiry or booking can see it. No internet transmission is completely secure, so we cannot guarantee security absolutely; if we become aware of a breach that is likely to affect you, we will inform you and the authorities as the law requires.

10. Children

Our services are for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, write to privacy@credmitra.com and we will delete it.

11. Grievance Officer

Under the Information Technology Act 2000 and the rules made under it, and under the Digital Personal Data Protection Act 2023, the following person is responsible for addressing questions, requests and grievances about personal data:

Name: Samved Bharadwaj
Designation: Founder and CEO, Credmitra Innovations Private Limited
Email: privacy@credmitra.com
Address: 101-103 Sai Chambers, Sector 11, CBD Belapur, Navi Mumbai 400713

12. Applicable law and changes to this policy

This policy is governed by the laws of India, including the Information Technology Act 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, and the Digital Personal Data Protection Act 2023 and the rules made under it as and when they come into force. We may update this policy when our services, suppliers or the law change. The date at the top shows the current version. If a change materially affects how we use your data, we will tell you through this website or by email before it takes effect.