Privacy Policy

1. Introduction and Scope

EcLand ("We", "Us", or "Our") operates www.ecland.co.in, a property information intermediary platform.

This Policy applies to:

• All Users who access or register on the Platform.
• Asset Owners and Data Submitters who upload Property Data.
• Buyers and Searchers who use the search services.
• Representatives of institutions such as courts, government departments, and banks who interact with the Platform.

This Policy does not apply to third-party websites linked from the Platform.

2. Data We Collect

2.1 Personal Data Collected from Users

From all registered users:

• Full name, address, email address, and mobile number.
• Identity verification documents, such as PAN, masked Aadhaar number, Passport, or Voter ID, where collected for KYC purposes.
• Authentication identifiers, verified contact channels, and OTP verification metadata required to secure access to the Platform.
• Payment information processed through third-party gateways; We do not store full card details.
• IP address, device information, browser type, and usage logs.

From Asset Owners / Data Submitters:

• Property identification details such as survey numbers, CTS numbers, plot numbers, and municipal numbers.
• Title document details, including Sale Deed, Gift Deed, Will, Partition Deed, and related records.
• Encumbrance details including mortgages, charges, liens, court orders, and notices.
• Legal dispute information such as case numbers, court names, and status.
• Bank or NBFC charge details, including loan account references and charge registration details.
• Government notifications and orders relating to the property.

From Buyers / Searchers:

• Search queries and property identifiers searched.
• Reports accessed and downloaded.

2.2 Data Collected from Institutional Sources

We may receive data from courts, government departments, revenue authorities, banks, and financial institutions, which may include property-related information and encumbrance records. Such data is collected under lawful authority or data-sharing arrangements.

2.3 Automatically Collected Data

We automatically collect technical data including IP addresses, browser type, operating system, pages visited, time spent on the Platform, and clickstream data. This is used for security, analytics, and improving Platform performance.

2.4 Cookies

The Platform uses cookies and similar tracking technologies for session management, security, analytics, and personalisation. You may configure your browser to refuse cookies, but this may limit Platform functionality.

3. Legal Basis for Processing

We process personal data on the following legal bases under the Digital Personal Data Protection Act, 2023:

• Consent: Freely given, specific, informed, and unambiguous consent provided at the time of registration or data submission.
• Contractual Necessity: Processing required to provide the services you have requested and to fulfil Our contractual obligations under these Terms.
• Legal Obligation: Processing required to comply with applicable Indian law, court orders, or regulatory requirements.
• Legitimate Interest: Processing necessary for fraud prevention, security, abuse detection, and improvement of Platform services.

4. Purpose of Processing

We process personal data for the following purposes:

• Enabling User registration, login, and account management.
• Facilitating Asset Owners to submit and manage their Property Data listings.
• Enabling Buyers / Searchers to search, view, and obtain property information reports.
• KYC verification and fraud prevention.
• Processing payments and issuing receipts.
• Communicating with Users regarding their account, service updates, and alerts.
• Improving the Platform's features, performance, and user experience.
• Complying with applicable legal and regulatory obligations.
• Responding to Grievance Officer complaints and dispute resolution.
• Aggregate, anonymised analytics and research where no individual identification is made.

5. Sharing and Disclosure of Data

5.1 Property Data - Public Display

Property Data submitted to the Platform - including ownership claims, encumbrance details, and dispute information - is displayed to registered Buyers / Searchers as part of the core service of the Platform. By submitting data, Asset Owners consent to this display. Asset Owners should not submit any information they do not wish to be accessible through the Platform workflows.

5.2 Sharing with Third Parties

We do not sell, rent, or license personal data to any third party for commercial or marketing purposes as of the effective date of this Policy. We may share data with:

• Service Providers: Third-party vendors who assist in operating the Platform, such as hosting, payment processing, KYC verification, and analytics providers, and who are bound by confidentiality obligations.
• Legal / Regulatory Authorities: Courts, government agencies, law enforcement, or regulatory bodies, where required by court order, law, or lawful direction, including under Section 69 of the IT Act, 2000.
• Successor Entity: In the event of a merger, acquisition, or sale of the Platform, with appropriate notice to Users.

5.3 Future Data Commercialisation

The Platform may, in the future, consider licensing anonymised or aggregated Property Data or User data to third parties for research, analytics, or commercial purposes. Before doing so, the Platform shall amend this Privacy Policy with clear notice, obtain explicit consent where required under the DPDP Act, 2023, and provide Users the right to opt out. Personal data shall not be sold without explicit consent.

5.4 No Cross-Border Transfer Without Safeguards

Personal data shall not be transferred outside India except in compliance with the Digital Personal Data Protection Act, 2023 and any regulations issued thereunder by the Central Government.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy or as required by law:

• Account data: For the duration of account activity, plus 5 years after account closure for audit and legal purposes.
• Property Data: Retained for the duration of the listing, and for such further period as required by the Registration Act, 1908 or other applicable law.
• Transaction / Payment records: Minimum 8 years as required under financial and tax laws.
• KYC documents: As required by applicable KYC and AML regulations.
• Logs and security data: Up to 3 years.

Data may be retained for longer periods where required by court order, regulatory direction, or ongoing legal proceedings.

7. Data Principal Rights (User Rights)

Under the Digital Personal Data Protection Act, 2023, you have the following rights in respect of your personal data:

(a) Right to Access

You have the right to obtain a summary of personal data processed by Us and information about the processing activities.

(b) Right to Correction and Erasure

You have the right to request correction of inaccurate or incomplete personal data. You also have the right to request erasure of personal data where processing is no longer necessary or where consent is withdrawn. Property Data submitted as public records may still be retained where required for legal reasons.

(c) Right to Grievance Redressal

You have the right to lodge a complaint with our Grievance Officer. If unsatisfied, you have the right to approach the Data Protection Board of India, once constituted under the DPDP Act.

(d) Right to Nominate

You may nominate an individual to exercise your rights in the event of your death or incapacity.

(e) Right to Withdraw Consent

You may withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing before withdrawal. Withdrawal may result in inability to use certain Platform services. To exercise any of these rights, please contact legal@ecland.co.in.

8. Data Security

We implement reasonable security practices and procedures as required under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including:

• Encryption of data in transit (TLS / SSL) and at rest.
• Access controls and authentication for internal systems.
• Periodic security audits and vulnerability assessments.
• Employee confidentiality training and access restrictions.
• Incident response and breach notification procedures.

In the event of a personal data breach likely to cause high risk to Users, We shall notify affected Users and the Data Protection Board of India in accordance with the DPDP Act, 2023 and the IT Act, 2000.

9. Children's Privacy

The Platform is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If We become aware that personal data of a minor has been collected without parental consent, We shall delete it promptly.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the IT Rules, 2021, the Platform has designated a Grievance Officer.

The Grievance Officer shall acknowledge a privacy complaint within 24 hours and resolve it within 15 days.

11. Sensitive Personal Data or Information (SPDI)

To the extent We collect Sensitive Personal Data or Information as defined under the IT (SPDI) Rules, 2011, such as financial information, identity document numbers, and passwords or equivalent access secrets, We shall:

• Collect such information only with explicit, informed, written consent.
• Use such information only for the specific purpose for which it was collected.
• Not share SPDI with third parties without consent, except as required by law.
• Allow Data Principals to review and correct their SPDI on request.

12. Third-Party Links and Services

The Platform may contain links to third-party websites, such as government portals or court websites. We are not responsible for the privacy practices of such third parties and encourage Users to review their privacy policies separately.

13. Amendments to This Policy

We may update this Privacy Policy from time to time. Material changes shall be notified to registered Users via email or Platform notification at least 30 days prior to the change taking effect, or such shorter period as permitted by law. The current version shall always be available on www.ecland.co.in. Continued use of the Platform after the effective date of changes constitutes acceptance.

14. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes relating to this Policy shall be resolved in accordance with the dispute resolution provisions of the Terms and Conditions.