Privacy Policy

Last updated: 8 August 2026

This policy explains what personal information Grihobazar collects when you use grihobazar.in or the Grihobazar Android app, why we collect it, who we share it with, and what you can ask us to do about it. The app shows the same website, so this policy covers both.

We have tried to describe exactly what the site does rather than list every possibility. If something here does not match your experience, please tell us.

Who we are

Grihobazar is a RERA-registered real-estate agent operating in Kolkata and West Bengal. RERA Registration No. WBRERA/A/KOL/2026/000918.

Registered business name and address: [add your registered entity name and full postal address here]
Phone: +91 91630 26496
Email for privacy questions: info@grihobazar.in

For the purposes of India's Digital Personal Data Protection Act, 2023, Grihobazar is the Data Fiduciary for the information described below.

What we collect, and when

We only collect information you actively give us, plus basic analytics. We do not ask for your location, your contacts, your photos library, or any device permission.

When	What we collect	Why
You book a free site visit	Name, phone number, preferred area, preferred visit date, and optionally budget, BHK and timeline. Which property you were viewing, if any.	To call you back and arrange the visit.
You tap "View Contact Number" on a listing	Your name and phone number, and which listing you asked about.	To give you the seller's number, and so the seller knows who asked. This is the exchange: you get their number, they get yours.
You list a property for free	Your name, phone number, the property details you enter, and any photos you upload.	To review the listing and publish it, and to contact you about it.
You create an account	Name, email address, phone number, and a password. Also the date you joined and when you last logged in.	So you can post and track your own listings, and keep your shortlist across devices.
You shortlist a property while logged in	Which listings you saved, and when.	So your shortlist follows you to another device.
You enquire about advertising, or fill in a sponsored banner's form	Name, phone number, email if you give it, and your message.	To respond, and — for sponsored banner enquiries — to pass to that advertiser (see below).
You pay for a Boost or an ad	We do not see or store your card, UPI or bank details. Payment is handled entirely by Razorpay; we only receive confirmation that a payment succeeded.	To activate what you paid for.
Any form above	How you reached us — the referring website, the page you landed on, and campaign tags in the link you clicked (utm_source, utm_medium, utm_campaign, utm_content, utm_term, gclid, fbclid).	To know which of our adverts work.
Simply browsing	Standard analytics through Google Tag Manager and Google Analytics: pages viewed, searches, approximate location by IP, device and browser type.	To understand what people look for and improve the site.
Simply browsing (if we are running Facebook/Instagram ads)	The Meta Pixel records pages and properties viewed, searches and shortlist saves, and sets an advertising cookie in your browser.	To measure whether our Facebook/Instagram ads led to a genuine enquiry, and to show our ads again to people who showed interest (retargeting).

The lucky draw

If a prize draw is running, everyone who submits an enquiry is entered automatically using the name and phone number they gave. Names shown publicly on the draw page are masked (for example "Rahul S." and "••••23"). If you would rather not be entered, email us and we will remove you.

Stored in your own browser

The site keeps some things on your device, not on our servers: your shortlist and compare picks, recently viewed properties, and your login token if you have an account. Clearing your browser data removes them. In the Android app, uninstalling does the same.

Who we share it with

We do not sell your personal information, and we do not share it for anyone else's advertising. We share it only in these situations:

Property sellers and owners. When you ask for a listing's contact number, or book a visit for a specific property, the person or agent behind that listing is told your name and phone number so they can respond.
Advertisers. If you submit the form on a sponsored banner, that enquiry is emailed to the advertiser who booked the banner. We tell you this on the form before you submit.
Google. The website's data is stored in Google Sheets and uploaded photos in Google Drive, in an account controlled by Grihobazar. Google Analytics and Google Tag Manager provide our traffic statistics.
Meta (Facebook/Instagram), if we are running ads there. The Meta Pixel tells us which browsing activity followed one of our ads, and lets us show our own ads again to people who already looked at a property here. Meta's privacy policy governs what they do with that data; you can control ads you see from us through your Facebook Ad Preferences.
Razorpay. Processes payments for Boosts and adverts. Their privacy policy applies to the payment details you enter with them.
Our own CRM. Enquiries are copied into a customer-relationship system used by our sales team.
If the law requires it, or to establish or defend a legal claim.

The site also loads fonts and icons from Google Fonts and Cloudflare's CDN, and property images may be served from Google's image servers. These providers can see your IP address as part of serving those files.

How long we keep it

Enquiries and leads: up to 3 years from your last contact with us, since property searches often restart after a long gap.
Accounts: until you ask us to delete yours.
Published listings: until they are removed or sold, plus a reasonable period for our records.
Login sessions: 30 days, then they expire automatically.

How we protect it

The site is served over HTTPS, so what you send is encrypted in transit.
Passwords are never stored. We keep only a salted, peppered, repeatedly hashed value that cannot be turned back into your password. We cannot see it, and we can never email it to you.
Login tokens are stored only as a hash, so access to our records cannot be turned into access to your account.
Sellers' phone numbers are not published. They are removed from the public listing data and released only after someone identifies themselves through the contact form.
Our records are held in a Google account restricted to authorised staff.

No system is perfectly secure, and we cannot guarantee absolute security — but if a breach affects you, we will tell you and the authorities as the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

Show you what we hold about you and who we have shared it with.
Correct anything wrong, incomplete or out of date.
Delete your information, where we are not required to keep it.
Withdraw consent — including stopping calls about your enquiry, or leaving the prize draw.
Complain, to us first and then to the Data Protection Board of India.

Email info@grihobazar.in and we will respond within 30 days. We may ask you to confirm your identity first, so that nobody else can make a request about you.

Children

This site is for adults buying, selling or renting property. We do not knowingly collect information about anyone under 18. If you believe a child has given us their details, email us and we will delete them.

Cookies and similar technologies

Google Analytics sets its own cookies to count visits. If we are running Facebook or Instagram ads, the Meta Pixel sets an advertising cookie used to measure those ads and to show them again to people who already visited the site (retargeting) — it does not track you on websites unrelated to Grihobazar. You can block any of these cookies in your browser or with a browser extension without losing any functionality of this site, and you can turn off ad personalisation for Meta specifically through your Facebook Ad Preferences. The rest of what we store on your device is described under "Stored in your own browser" above.

The Android app

The Grihobazar app displays this website inside a secure browser window. It collects nothing beyond what is described here, and it asks for no device permissions — no location, camera, contacts or storage access. It does not send push notifications.

Changes to this policy

If we change how we handle your information we will update this page and change the "Last updated" date at the top. If a change is significant, we will make it obvious on the site.

Contact us

Questions, corrections, deletions or complaints:

Back to Grihobazar