Privacy Policy

1. PRIVACY POLICY

1.1 Purpose of this Privacy Policy: This Privacy Policy ("Policy") is issued by Kolahal Homes Private Limited, a company incorporated under the Companies Act, 2013 and having its registered office at Lucknow, Uttar Pradesh, India, and operating the digital accommodation and property management platform under the brand name "Rented Ghar". The purpose of this Policy is to explain the manner in which Rented Ghar collects, receives, records, stores, organises, uses, processes, shares, transfers, discloses, retains, protects, and otherwise handles personal data and related information of guests, property owners, visitors, users of the website, mobile application users, service providers, interns, students, medical tourists, event tourists, and other individuals who interact with the Rented Ghar platform or services.

1.2 Scope and Applicability: This Policy applies to all personal data collected through: the official Rented Ghar website; mobile applications; online booking portals; payment interfaces; customer support communications; email, telephone, WhatsApp, SMS, and other digital communications; property registration forms; KYC verification processes; police verification processes; marketing and promotional activities; physical interactions at properties managed or operated by Rented Ghar.

1.3 Acceptance of the Policy: By accessing the website, creating an account, making a booking, listing a property, submitting information, communicating with Rented Ghar, using any service, or otherwise interacting with the platform, the user acknowledges that he or she has read, understood, and agreed to the terms of this Privacy Policy.

2. DATA COLLECTION

Rented Ghar may collect personal data directly from users, automatically through digital systems, through authorised third parties, through property owners or managers, and through lawful governmental or regulatory processes. The categories of personal data that may be collected include, without limitation: Identity Information (full name, photograph, gender, date of birth, age, nationality, marital status, Aadhaar details where voluntarily provided, passport details, driving licence details, voter identity details, and other government-issued identification information); Contact Information; Booking Information; Financial Information; Property Owner Information; Technical Information; Communication Information; Verification Information; Usage Information.

3. COOKIES

Rented Ghar uses cookies and similar technologies on its website and digital platforms to provide, secure, personalise, analyse, and improve services. The platform may use Essential Cookies, Performance Cookies, Functional Cookies, Analytics Cookies, and Advertising or Marketing Cookies where applicable and permitted by law, to display relevant advertisements and measure campaign effectiveness.

4. PAYMENT INFORMATION

Payments for bookings and services are processed through authorised payment gateways, banking partners, UPI systems, card networks, wallets, or other regulated payment service providers. Rented Ghar may receive limited payment-related information such as transaction reference number, payment status, payment method, billing address, invoice details, refund details, and masked payment identifiers. Sensitive payment instrument information is processed through authorised payment service providers and not intentionally stored by Rented Ghar except as permitted by law.

5. LOCATION DATA

Rented Ghar may collect approximate or precise location data from users where such collection is enabled through device settings, browser permissions, application permissions, booking information, IP address analysis, GPS functionality, Wi-Fi data, or user-provided address information. Location data may be used for displaying nearby properties, improving search results, facilitating navigation, fraud prevention, confirming booking location, emergency assistance, and compliance with local regulatory requirements.

6. KYC DATA

Rented Ghar may collect Know Your Customer (KYC) information from guests, property owners, authorised representatives, vendors, service providers, and other users where such collection is necessary for identity verification, fraud prevention, police verification, contractual performance, security management, payment verification, anti-impersonation measures, regulatory compliance, taxation compliance, and lawful operational requirements.

7. AADHAAR POLICY

Rented Ghar recognises the sensitive nature of Aadhaar-related information. Aadhaar details shall be collected only where voluntarily provided by the user or where collection is permitted or required under applicable law. Aadhaar information, where provided, shall be used solely for lawful purposes such as identity verification, address verification, booking verification, police verification compliance, fraud prevention, and security verification.

8. RETENTION

Rented Ghar retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, to perform contractual obligations, to comply with legal and regulatory requirements, to maintain security records, to resolve disputes, and to enforce legal rights. The retention period may vary depending on the category of information, including booking records, payment records, invoices, KYC records, police verification records, communication records, complaint records, property owner records, and technical logs.

9. DELETION

Subject to applicable law, users may request deletion of their personal data where the data is no longer necessary for the purpose for which it was collected, consent has been withdrawn and no other lawful basis exists, processing is unlawful, or deletion is otherwise required under applicable law. Deletion requests may be submitted to the Grievance Officer or Privacy Officer. Rented Ghar may require identity verification before acting upon a deletion request.

10. CONSENT

Rented Ghar processes personal data on the basis of consent wherever such consent is required under the Digital Personal Data Protection Act, 2023 or other applicable laws. By accessing the platform, creating an account, submitting personal information, making a booking, listing a property, communicating with Rented Ghar, enabling location services, uploading documents, or otherwise using the services, the user provides informed consent for the collection and processing of personal data for the purposes described in this Privacy Policy.

11. USER RIGHTS

Subject to applicable law, users may exercise certain rights in relation to their personal data processed by Rented Ghar. Users may request confirmation as to whether their personal data is being processed and may request access to personal data, request correction of inaccurate personal data, request deletion of personal data, and withdraw consent where processing is based on consent.

12. CROSS BORDER TRANSFERS

Rented Ghar primarily processes personal data in India; however, certain technology service providers, cloud infrastructure providers, analytics providers, communication providers, payment service providers, or support service providers engaged by Rented Ghar may process or store data outside India. Cross-border transfers shall be undertaken only in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

13. SECURITY

Rented Ghar is committed to protecting personal data through reasonable technical, administrative, organisational, and physical security measures appropriate to the nature, sensitivity, volume, and processing activities associated with the data. Security measures may include: access control mechanisms; password protection; multi-factor authentication where available; encryption in transit and, where practicable, at rest; secure servers and hosting environments; firewalls and network security controls.

To the maximum extent permitted by law, Rented Ghar shall not be liable for unauthorised access, interception, loss, theft, corruption, disclosure, or misuse of personal data caused by factors beyond its reasonable control, including cyberattacks, internet failures, user negligence, third-party system compromise, force majeure events, or unlawful acts of external parties, except where liability is established under applicable law.