Privacy Policy DPDP-Act 2023 compliant.

Last updated: 14 July 2026 · Governed by the Digital Personal Data Protection Act, 2023 (India).

1. Who we are

This website (https://www.jplandandfarms.com) is owned and operated by Decipher Consultancy Services, trading as JP Land & Farms. Under the DPDP Act, 2023 we are the Data Fiduciary — meaning we decide how and why your personal data is processed.

• Registered contact: info@jplandandfarms.com
• Phone / WhatsApp: +91 99112-02099
• Offices: Block C, Sector 57, Gurugram — 122003  ·  66, Arya Nagar, Palwal — 121102

2. Data we collect

We only collect data you voluntarily provide when you use our services. We do not buy or scrape data from third-party lists.

• Contact enquiries — name, email, phone, message.
• Property enquiries / tour requests — name, email, phone, preferred date/time, the property you enquired about.
• Guide downloads — name, email, phone (optional).
• Wanted classifieds — name, email, phone, budget, size and location preferences, notes.
• Property submissions — owner name, contact details, property description, address and photos.
• Registered users — name, email, password (hashed), saved searches, favourites, referral code.
• Server logs — IP address, browser/device metadata (used solely for security & abuse prevention).
• Analytics cookies — anonymous usage statistics via Google Analytics 4; see our Cookie Policy.

3. Why we process your data (purposes)

1. To respond to enquiries and provide the services you requested.
2. To arrange property visits, share verification reports and complete transactions.
3. To send occasional educational content (guides, market notes) that you opted in for. You can unsubscribe with one click.
4. To publish wanted-listings so sellers can respond directly to you.
5. To operate and secure this website, prevent fraud, and comply with law.

We do not use your data for automated decision-making, credit scoring, profiling for advertising, or targeted advertising outside this site.

4. Legal basis — your consent (§ 5, DPDP Act)

We process your personal data only after obtaining your free, specific, informed and unambiguous consent at the point of collection, via an unticked checkbox next to a plain-language privacy notice. Registered users additionally agree to our Terms of Service at signup.

For limited "certain legitimate uses" (§ 7) — such as complying with a court order or preventing fraud — we may process data without fresh consent, only to the extent necessary.

5. How long we keep your data (retention)

• Enquiry & contact-form data: retained for 90 days from submission, then securely deleted, unless a professional engagement has been established (in which case retained for the duration of the engagement + 3 years for tax and audit purposes as required by Indian law).
• Guide downloads: 12 months, unless you unsubscribe earlier.
• Wanted-listings: 45 days from posting, then archived (visible only to admin) for 12 months, then deleted.
• Registered accounts: retained while the account is active. Deleted within 30 days of account closure request, except where retention is required by law.
• Consent records: retained for 3 years after consent is withdrawn or the underlying data is deleted — required as evidence of lawful processing under DPDP § 5(1).
• Server & security logs: 90 days.

6. Your rights as a Data Principal (§ 11–14)

Under the DPDP Act you have the following rights, exercisable at any time by contacting our Grievance Officer:

• Right to access a summary of your personal data and the parties it has been shared with (§ 11).
• Right to correction & erasure — request that inaccurate data be corrected or that data no longer needed be deleted (§ 12).
• Right to grievance redressal — raise a concern about how your data is being handled (§ 13). We will respond within 30 days.
• Right to nominate another person to exercise your rights in the event of your death or incapacity (§ 14).
• Right to withdraw consent — as easy as giving it (§ 6(4)). We stop processing on receipt.

Use the form at /grievance/ or email info@jplandandfarms.com.

7. Grievance Officer

8. Who we share your data with

We share personal data only with:

• Our own sales & verification agents — assigned to respond to your enquiry. Bound by written confidentiality obligations.
• Legal partners (title verification firms) — only when you have engaged us for a transaction that requires their input; only the specific data needed.
• Government authorities — only where required by valid legal process (court order, tax audit, statutory request).
• Data processors (§ 8(7)): our email provider, cloud hosting provider, and analytics provider (Google Analytics 4). All bound by written agreements meeting DPDP standards.

We do not sell, rent, or trade your personal data with any party for advertising or marketing purposes.

9. International transfers (§ 16)

Some processors (e.g. Google Analytics, our email delivery service) may store data on servers outside India. We only use processors located in jurisdictions notified as permissible by the Central Government under DPDP § 16, or that provide contractual protections equivalent to DPDP standards.

10. Security (§ 8(5))

We use reasonable security safeguards to protect your data, including HTTPS transport encryption, hashed passwords, restricted admin access, database backups, and audit logging of admin actions. In the event of a personal-data breach, we will notify affected individuals and the Data Protection Board within the timelines mandated by the Act.

11. Children's data (§ 9)

Our services are not directed at children under 18. We do not knowingly collect personal data of children. Wherever we do process such data, we will obtain verifiable parental consent as required by § 9.

12. Cookies & tracking

See our separate Cookie Policy for details on what we set and why.

13. Complaints to the Data Protection Board

If you are not satisfied with our response to a grievance, you may lodge a complaint with the Data Protection Board of India (constituted under DPDP § 18). See meity.gov.in for current contact channels.

14. Changes to this policy

We may update this policy from time to time (e.g. when new statutory rules are notified). Material changes will be flagged on this page and, where practicable, notified by email to registered users. Last updated date is at the top of this page.

This policy is provided in good faith based on the DPDP Act, 2023 as passed by Parliament and the Rules notified up to the date above. It does not constitute legal advice for you or for us.