Key Privacy Commitments at a Glance
We never sell, rent, or trade your personal information or prospective buyer data to third-party brokers or advertisers.
Buyer inquiries generated for a specific real estate developer campaign are delivered solely to that developer's authorized sales desk.
All form transmissions, server communications, and database repositories utilize modern TLS encryption and restricted access controls.
You retain full statutory rights to access, rectify, review, or request complete deletion of your personal records at any time.
Introduction & Overview
At Rupam NXT (“we”, “our”, or “us”), trust and transparency are fundamental to how we operate. As a premier real estate digital marketing and presales agency based in Mumbai, India, we recognize the sensitivity of personal information shared by developer clients, business partners, website visitors, and prospective homebuyers.
This Privacy Policy explains how personal data is collected, utilized, disclosed, stored, and protected when you interact with our website (https://rupamnxt.com), submit inquiries through our digital interfaces, or engage with advertising funnels operated by Rupam NXT on behalf of real estate developer mandates.
Regulatory Scope & Applicable Laws
This policy has been designed in strict accordance with the prevailing information security and data protection regulations of the Republic of India, specifically:
- The Digital Personal Data Protection Act, 2023 (DPDPA);
- The Information Technology Act, 2000 (including Amendments);
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and
- Applicable guidelines framed by the Real Estate (Regulation and Development) Act, 2016 (RERA) and Maharashtra Real Estate Regulatory Authority (MahaRERA) governing truthful digital advertising.
Information We Collect
We may collect information across several categories depending on the nature of your interaction:
A. Information You Voluntarily Provide
- Contact Inquiries: Full name, corporate email address, contact telephone or WhatsApp number, company/real estate brand name, project location, and marketing requirement details submitted through our contact forms.
- Business Consultations: Notes, campaign briefs, sales targets, ad spend allocations, and feedback shared during strategy sessions or email exchanges.
- Customer Support: Information provided when communicating with our client servicing, technical, or accounts teams.
B. Information Collected Automatically
- Device & Connection Data: IP address, browser type and version, language settings, operating system, and network provider.
- Usage & Interaction Data: Pages viewed, time spent per section, referral URLs, button clicks, and scroll depth on our website.
Real Estate Campaign Leads & Processing Role
A core pillar of Rupam NXT's business is building and managing high-intent performance advertising funnels for real estate projects on behalf of developer clients and channel partners.
In this capacity:
- Strict Project Exclusivity: The lead information is transmitted exclusively to the designated developer client or its authorized sales desk for scheduling site visits, sending price sheets, and verifying homebuyer eligibility.
- No Cross-Selling or Database Leaks: We strictly do not sell, rent, or cross-promote leads collected for one developer to any competing real estate project or unrelated third party.
- Secure Synchronization: Leads are transferred to the developer's verified CRM or encrypted email systems via secure webhooks and API pipelines.
How We Use Your Personal Data
Rupam NXT processes collected information solely for legitimate commercial and operational purposes:
- To evaluate marketing briefs and formulate bespoke campaign proposals for real estate developers;
- To deliver, execute, monitor, and optimize contracted digital marketing, performance advertising, and presales workflows;
- To schedule strategy calls and communicate project milestones, monthly ROI reports, and lead summaries;
- To route prospective homebuyer inquiries directly to the authorized sales desk of the corresponding real estate development;
- To safeguard our digital infrastructure against fraudulent activity, spam submissions, and security vulnerabilities;
- To fulfill statutory invoicing, tax (GST), accounting, and regulatory compliance mandates under Indian law.
Legal Grounds for Processing
Under the Digital Personal Data Protection Act, 2023, we rely on the following lawful grounds for data processing:
- Explicit Consent: When you voluntarily submit your contact information via our website forms or campaign lead magnets, indicating your affirmative consent to be contacted.
- Performance of Contract: Processing necessary to fulfill our commitments under a signed Statement of Work, retainer contract, or service agreement.
- Legitimate Uses: Undertaking reasonable security precautions, preventing abuse of our web services, and complying with court orders or statutory government requests.
Cookies & Tracking Pixels
Our website and campaign landing pages utilize cookies, web beacons, and tracking pixels to ensure seamless functionality and analyze traffic patterns:
| Cookie Type | Purpose | Lifespan |
|---|---|---|
| Essential Cookies | Required for core website navigation, session integrity, and security protections. | Session / 1 Year |
| Analytics Cookies | Measure page views, dwell time, and user pathways (e.g., Google Analytics) to improve user experience. | Up to 2 Years |
| Marketing Pixels | Used by ad networks (Meta Pixel, Google Tag, LinkedIn Insight) to measure campaign conversion rates and deliver relevant ads to past visitors. | 90 to 180 Days |
You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect page functionality or form submissions.
Disclosure of Information to Third Parties
Rupam NXT does not sell personal data. We disclose personal information strictly to trusted third-party partners who adhere to rigorous data protection standards:
- Authorized Developer Clients: Contact inquiries submitted for a specific residential or commercial property are shared solely with the promoter or marketing mandate of that project.
- Cloud Infrastructure & Hosting: Verified enterprise cloud hosting providers and database servers that maintain encrypted environments.
- CRM & Messaging Platforms: Industry-standard CRM suites (e.g., Salesforce, LeadSquared, Sell.Do) and certified WhatsApp Business Service Providers utilized for lead routing.
- Legal & Regulatory Authorities: Where mandated by law, summons, court decree, or governmental inquiry under Indian jurisdiction.
Data Security & Storage Protocols
We employ comprehensive technical and administrative security controls to safeguard personal data against unauthorized access, alteration, disclosure, or accidental destruction:
- Transport Layer Security (TLS/HTTPS): All web communication between your browser and our servers is secured with industry-standard cryptographic protocols.
- Role-Based Access Control: Access to campaign leads and client data is restricted strictly to vetted agency personnel on a need-to-know basis.
- Regular Infrastructure Audits: Periodic reviews of database endpoints, webhook authentication tokens, and server firewalls.
Data Retention Policy
We retain personal information only for the duration necessary to accomplish the legitimate objectives outlined in this policy or to satisfy statutory legal, accounting, and tax requirements:
- General Inquiries: Contact form submissions from prospective agency clients are retained for up to twenty-four (24) months to facilitate ongoing business dialogue.
- Campaign Leads: Prospective buyer records collected for developer campaigns are retained in transit and synchronized pipelines only as long as required to ensure verified delivery to the client's CRM, after which historical records are safely archived or purged in accordance with client contract guidelines.
- Statutory Records: Financial invoices and contractual agreements are maintained for eight (8) years to comply with Indian tax and corporate regulatory statutes.
Your Data Protection Rights under DPDPA
Under the Digital Personal Data Protection Act, 2023, you enjoy statutory rights regarding your personal information:
- Right of Access & Summary: You may request a summary of the personal data we hold about you and the processing activities undertaken.
- Right to Correction & Erasure: You can request correction of inaccurate or incomplete personal records, or the deletion of data no longer required for its original purpose.
- Right to Withdraw Consent: Where processing is predicated on consent, you may withdraw your consent at any time without retroactive invalidation.
- Right to Grievance Redressal: You have the right to register a formal grievance regarding the handling of your data with our designated Grievance Officer.
To exercise any of these rights, please email us at Info@rupamnxt.com with the subject line “DPDPA Data Rights Request”. We will process and respond to verified requests within thirty (30) business days.
Marketing Communications & Opt-Out
If you have previously consented to receive project brochures, marketing newsletters, or promotional WhatsApp communications from us or our developer partners, you may revoke your consent at any time:
- Email Communications: Click the “Unsubscribe” link located in the footer of any marketing email.
- WhatsApp / SMS Communications: Reply with “STOP” or contact us directly to request immediate removal from broadcast lists.
Third-Party Websites & External Portals
Our website and campaign collateral may contain hyperlinks to external portals, such as official developer portals, MahaRERA verification portals, banking partners, or social media platforms. Rupam NXT does not control and cannot be held responsible for the privacy practices, content, or policies of external sites. We encourage you to review the privacy notices of any third-party website you visit.
Children's Privacy Protection
Our services, real estate marketing solutions, and website are directed exclusively at business enterprises, developers, and adult individuals legally qualified to contract (age 18 and older). We do not knowingly collect or solicit personal data from minors. If we discover that personal information of a minor has been mistakenly collected, we will take immediate steps to delete such data from our records.
Updates to this Privacy Policy
Rupam NXT may modify or revise this Privacy Policy periodically to align with legislative updates, technological improvements, or modifications in our marketing services. Any updates will be posted to this URL with an updated effective date. We encourage visitors and clients to review this page periodically to remain informed about how we safeguard personal data.
Grievance Redressal Officer & Contact Details
In compliance with Rule 5(9) of the Information Technology Rules, 2011, and Section 12 of the Digital Personal Data Protection Act, 2023, the details of the designated Grievance Officer for Rupam NXT are provided below:
Grievance Redressal Desk — Rupam NXT
Submit any concerns, data correction queries, or regulatory notices to our dedicated grievance team.
Grievance Officer, Privacy & Data Compliance
16th Floor, Primo by CR Realty,
Bhandup LBS Marg, behind Kalpataru Crest,
Bhandup West, Mumbai, Maharashtra 400078