Legal
What this site collects, where it goes, how long it stays and how to have it deleted — written as a description of what actually happens, not as a template.
In one line
Your enquiry stays purposeful.
There is no login, no account, no cart and no advertising pixel on this site. Reading a page here does not create a record with your name on it. Personal information includes what you deliberately send — a brief through the form, a WhatsApp message, an email or a phone call — plus the ordinary technical logs any web host keeps for any web request.
The rest of this page sets out the detail, because a practice that asks you to check its evidence should be checkable on this too.
Data controller
One person is responsible, and it is me.
Eishaan Bharadwaj, sole proprietor, trading as The EB Realty and as Acrementum. MahaRERA registration A52100037314. Based in Pune, Maharashtra, India.
For anything on this page — access, correction, deletion, a complaint — write to eishaanbharadwaj@gmail.com or call +91 91585 40650. There is no separate privacy department; these enquiries reach me directly.
What is collected
Each one listed with what it contains, why it exists, and where it is stored.
The form requires your name and email. Phone or WhatsApp number, purpose, notes, city, budget and timeline are optional. A submitted enquiry also contains the page path and, where present, a shortened campaign source code. Full referring URLs are not copied into your enquiry.
Only your name and email are required. If a budget band feels premature, leave it blank — the brief still sends.
WhatsApp, email and phone are direct channels. Their content sits in my WhatsApp account, my mailbox and my phone respectively, under those providers’ own terms. WhatsApp messages are end-to-end encrypted in transit by Meta; that is Meta’s doing, not mine, and I do not control it.
Any web host records the IP address, timestamp, page requested, browser and referring page for each request, for security and error diagnosis. These are held by the hosting provider, not by me, and are not linked to a name.
Third parties
The full list. Where a service is not currently switched on, that is stated rather than left as a hedge.
| Service | What it receives | Status |
|---|---|---|
| Netlify hosting | Your IP address and request details, as any host does | Always |
| Netlify Forms | The enquiry fields you submit, plus technical submission information handled by Netlify | Netlify Forms |
| WhatsAppMeta | Your phone number and message, if you choose that route | Only if you use it |
| Website fonts | Font files are delivered by the website’s host | Self-hosted; no Google Fonts request |
| Analytics | Page views and, where configured, aggregate interaction counts | Not currently enabled |
| Instagram, LinkedIn | Nothing until you click through — these are plain links, not embeds | On click only |
There are no Meta pixels, no Google Ads remarketing tags, no chat widgets, no session recorders, no embedded videos and no third-party comment systems on this site. If any of those is ever added, this table changes on the same day. The analytics status above reflects the configured provider. The notice must be reviewed when that setup changes.
Cookies
This site sets no cookies of its own.
No optional analytics provider is currently enabled. The rental yield calculator keeps your inputs inside your own browser for the length of the visit and sends them nowhere; close the tab and they are gone.
If analytics is enabled in future, this page will name the product and say whether it sets a cookie, and a banner will appear where the law requires one.
Purpose, basis, retention
Nothing here is kept indefinitely by default.
Purpose. A brief is used to answer you, to assess whether the requirement is one I can serve competently, and — if we proceed — to carry out the advisory engagement. It is not used for anything else.
Basis. Under India’s Digital Personal Data Protection Act, 2023, the processing rests on the consent you give by submitting the form, for the purpose stated on the form itself. Where an engagement follows, processing continues because it is necessary to perform that engagement.
Retention. An enquiry that does not become an engagement is deleted within 24 months. Records connected to a completed transaction are kept for eight years from completion, because tax and transaction record-keeping obligations require it.
What is never done. Your details are not sold, rented, bartered or shared with developers, banks, brokers or lead aggregators. That matters in Indian property specifically: passing enquiry lists to builders is ordinary practice in this industry, and it is not practice here. Where an introduction to a developer, lawyer or lender would help you, you are asked first and told who receives what.
Your rights
Under the DPDP Act 2023 you hold these rights. There is no form to fill in — an email is enough.
Ask what is held about you and you receive the actual rows and messages, not a summary. Answered within 30 days, usually the same week.
Anything inaccurate is corrected on request. If a budget or a timeline changed, say so and the record changes.
Ask for deletion and the website enquiry, the email thread and the WhatsApp history go — except where a completed transaction leaves a statutory record-keeping duty, in which case you are told exactly what is being retained and why.
Withdraw at any time, through any channel, with no reason required. Withdrawal stops further processing; it does not undo what was lawfully done before it.
Complaints come to me first, at the address above. If the answer does not satisfy you, the Act gives you a route to the Data Protection Board of India.
You may nominate someone to exercise these rights on your behalf in the event of death or incapacity. Tell me in writing and it is recorded against your file.
Security — stated plainly
Proportionate, described honestly, and not a guarantee.
The site is served over HTTPS. Website enquiries are handled by Netlify Forms and accessed through the hosting account. Replies and any direct messages are handled through the chosen email or messaging service. Enquiry information is used for the purpose described above.
That is a sole practitioner’s security posture, described as it is. It is appropriate to what is held — names, budget bands and requirements — and it is not equivalent to an enterprise information-security programme. No system connected to the internet can be promised impenetrable, and this page will not promise it. If a breach affecting your data occurs, you will be told, and so will the Data Protection Board, as the Act requires.
Please do not send passport scans, PAN cards, bank statements or draft agreements through the enquiry form or over WhatsApp. When a transaction reaches the stage where documents are genuinely needed, a secure route is agreed at that point.
Two more things
This site is aimed at adults transacting in property. Data is not knowingly collected from anyone under 18. If you believe a child has submitted a brief, tell me and it will be deleted.
Netlify, email and messaging providers may process information on infrastructure outside India. Their services are used to deliver this website, handle enquiries and respond to you.
Maintenance
The review date moves when the substance does.
Not on a schedule, and not to look freshly maintained. If a new third-party service is added, the table above changes the same day it goes live. Material changes affecting people whose briefs are already held are notified directly rather than left for you to find.
This notice describes practice accurately as of the review date. It has been drafted by the practice rather than by counsel, and it is not legal advice to you. If you are relying on it in an institutional capacity — a family office, a fund, a corporate mandate — say so and it will be reviewed by a lawyer against your requirements before you engage.
Ask directly. No ticket, no portal, no automated reply — it reaches one person.