What we collect, and what runs here.

Who this notice is from

Sthãna is a residential rental practice working in nine neighbourhoods of east Bengaluru. We act for the person moving in. This notice covers sthana.co.in and the enquiry forms on it, and it is written under the Digital Personal Data Protection Act 2023, in which we are the data fiduciary and you are the data principal.

Sthãna is not a company. It is a working practice, and the details below say exactly what it is rather than borrowing the shape of a registered one. We incorporate shortly; this page changes on the day we do.

What each form collects, and why

We ask for the least that lets us reply and carry out a search. There is no account, no password and no field you did not fill in yourself. We do not buy data about you and we do not enrich what you give us from anywhere else.

The legal basis for all of it is your consent, given by sending the form. The purpose is stated per form below, and we do not use your details for a different purpose later without asking you again.

The Circle checkbox is a consent, not a setting

In the Circle form, "Show my first name to people I introduce" is a separate consent. Leave it unticked and the people you introduce see that someone referred them and not who. Tick it and they see your first name, and nothing else about you.

You can change that answer at any time by messaging us on WhatsApp, and it takes effect on every link you hold, not only on new ones. Changing it does not affect a reward you have already earned.

What runs on every page

Four third-party services are involved in serving this site. Each is named, with what it does and what it sets, because "we use cookies to improve your experience" tells a reader nothing they could act on.

Where an enquiry goes once it is sent

This is the one clause that is not settled, and it is stated plainly rather than covered with language wide enough to include anything. The forms on the site do not currently send your enquiry anywhere. Until the destination below is filled in, sending a form stores nothing and reaches nobody.

When it is wired, the destination decides who else holds your enquiry. If a form composes a WhatsApp message, your message and number pass through Meta and are held under Meta's terms as well as ours. If it posts to our own store, it sits with the processor named below and nowhere else. We will name it here before the first form is live.

Cookies, and the choice we give you

Two of the four services above set cookies, and one of them records what you do. So the site asks. Once you have read past the first screen, a notice appears in the bottom corner with two answers: allow, or not now. It waits until then on purpose, so it is never sitting on top of the thing you came to press. Nothing from Clarity loads until you allow it, and declining is one tap rather than a menu.

Google Analytics measures traffic in aggregate and runs from the first page view. It is named here, it sets cookies, and it does not record your session. If you would rather it did not run at all, your browser's own blocking settings are the reliable way to stop it, and this site will work normally without it.

Your answer is remembered in your browser, not on our side, so it is not tied to a name. Clearing your browser data clears the answer and the notice asks again. You can change it at any time in the block above.

The decline button says not now, and the code agrees with the button: a no is held for ninety days and the question may then be asked once more. Never twice in one visit, whatever the date.

Whether your data leaves India

Some of it does. Clarity is Microsoft, Analytics is Google, Sentry and Cloudflare are American companies, and all four process data on infrastructure outside India. The DPDP Act permits transfer except to a country the government has restricted, and we do not transfer to any restricted country.

Your enquiry itself, the name and number and what you wrote, is meant to stay with us and with the processor named in clause five. If that ever changes, this clause changes with it.

How long we keep it

An enquiry is kept while the search is live and for the period below afterwards, because a tenant who moved in through us often comes back at the end of a lease, and a search we abandoned is worth remembering so we do not send you the same wrong building twice.

After that it is deleted rather than archived. The DPDP Act requires us to stop keeping what we no longer need, and a note that says "retained indefinitely for business purposes" is how a practice ends up holding a stranger's phone number for nine years.

What you can ask us to do

These are your rights under the Act, and they are exercised by messaging us on WhatsApp or writing to the person named below. We do not ask you to fill in a form to get your data out of a form.

• Access. Ask what we hold about you and what we have done with it.
• Correction. Have anything wrong put right, or anything incomplete completed.
• Erasure. Have it deleted, unless we are required to keep it for tax or for a legal claim.
• Withdraw consent. Tell us to stop, at any time, as easily as you gave it. We stop processing and delete what we no longer need.
• Nominate. Name someone who may exercise these rights for you if you cannot.
• Grievance. Complain to us first. If we do not resolve it, you may complain to the Data Protection Board of India.

Children, advertising and what we will not do

This site is not for anyone under eighteen and we do not knowingly take an enquiry from a child. If you tell us we hold a child's details, we delete them.

We do not run advertising here, we do not sell or rent your details, and we do not build profiles for targeting. The Act forbids behavioural advertising to children; we do none to anyone.

When this notice changes

The date at the top is when a person last read this page against what the site actually does. When the enquiry forms are wired, or a tool is added or removed, this notice is updated before the change goes live rather than after it.

A material change is one that alters what we collect, why, who else sees it or how long we hold it. For those we will say so on the page and, if we hold your number, we will tell you directly.