Privacy Notice
Effective date: 24 October 2026
Last updated: 24 October 2026
This notice is issued under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it. It explains what personal data we collect when you use nirmaanone.com (the "Site"), why we collect it, who we share it with, how long we keep it, and the rights you have.
1. Who we are
NirmaanOne is a product of Reasonable Brands Activewear Private Limited ("we", "us", "our"), a company incorporated in India with its registered office at D304 to D307 Titanium Business Park, Makarba, Ahmedabad, Gujarat 380051, India. For the purposes of the DPDP Act, we are the Data Fiduciary for personal data collected through the Site.
This notice covers only the Site, i.e. our marketing website. The NirmaanOne application used by our customers is governed by the agreement each customer signs with us and by the privacy terms inside the application.
2. What we collect, why, and on what basis
| What we collect | When | Why we use it | Basis under the DPDP Act |
|---|---|---|---|
| Name, work email, phone number, company name, city, and anything you write in a message | When you submit the demo request or contact form, or write to us by email or WhatsApp | To reply to you, schedule and run a demo, and follow up about NirmaanOne | You provide this data voluntarily for a purpose you have asked us to fulfil (Section 7(a)). We will not use it for an unrelated purpose without asking you |
| Site usage data: pages viewed, time on page, scrolling, clicks on outbound links, form interactions, approximate location (city level, derived from IP address), device and browser type, referring site and campaign parameters | While you browse, only if you accept analytics cookies | To understand how the Site is used and which pages and campaigns bring developers to us, so we can improve the Site | Your consent, given through the cookie banner (Section 6). You can withdraw it at any time via "Cookie settings" in the footer |
| Advertising identifiers set by Meta (Facebook, Instagram) | While you browse, only if you accept marketing cookies | To measure whether our Meta campaigns bring visitors to the Site and to show relevant NirmaanOne content on Meta platforms | Your consent, given through the cookie banner (Section 6). Withdrawable at any time |
| Technical logs: IP address, timestamp, requested URL, user agent, response status | Automatically on every request | To serve the Site, keep it secure, detect abuse, and diagnose faults | Processing necessary to provide the Site you have requested and to protect it. Logs are not used to profile you |
We do not collect sensitive personal data through the Site, and we do not sell personal data.
Fields on our forms are limited to what we need to respond to you. Where a field is optional, it is marked optional.
3. Cookies and similar technologies
The Site uses cookies and browser storage for analytics and, where enabled, for marketing measurement and embedded content. Nothing beyond strictly necessary storage is set until you make a choice in the cookie banner. The full list, with lifetimes and purposes, is in our Cookie Policy.
4. Who we share personal data with
We share personal data only with the following categories of recipients, and only to the extent needed for the purposes above:
- Analytics: Google Analytics (Google LLC and Google Ireland Limited), which processes usage data on our behalf when you accept analytics cookies. IP addresses are not stored by Google Analytics 4.
- Advertising measurement and embedded content: Meta Platforms, Inc. and Meta Platforms Ireland Limited (Facebook, Instagram), when you accept marketing cookies or interact with embedded Meta content; Google LLC (YouTube), when you play an embedded video. WhatsApp click-to-chat links open WhatsApp on your device; no data is sent to Meta until you choose to send a message.
- Hosting and infrastructure: The Site is hosted on IronClad, our own sovereign cloud infrastructure operated by us in India. No third-party hosting provider has access to Site data.
- Email and calendaring: Our business email and calendar provider, used to reply to you and to schedule demos.
- Professional advisers and authorities: Where required by law, a court order, or to establish or defend a legal claim.
We do not share personal data with data brokers, and we do not give third parties the right to use your data for their own purposes.
5. Transfers outside India
The Site itself and the personal data you submit through our forms are stored in India. Analytics and advertising-measurement data collected under your consent is processed by Google and Meta on servers that may be located outside India, including in the United States and the European Union. The DPDP Act permits such transfers except to countries the Central Government may restrict by notification; we do not transfer personal data to any restricted country.
6. How long we keep personal data
| Data | Retention |
|---|---|
| Enquiries and demo requests (form submissions, emails, WhatsApp messages) | 24 months from our last contact with you, after which they are deleted unless you have become a customer, in which case the customer agreement applies |
| Google Analytics event data | 14 months, as configured in our Google Analytics property. Aggregated reports that cannot identify you may be kept longer |
| Meta advertising identifiers | Governed by the cookie lifetimes in the Cookie Policy (up to 3 months) and Meta's own retention |
| Technical logs | 90 days, then deleted |
| Cookie consent record | 12 months, after which you are asked again |
When the purpose for which data was collected is served, or when you withdraw consent, we erase the data unless the law requires us to keep it.
7. Your rights
Under the DPDP Act you have the right to:
- Access: obtain a summary of the personal data we hold about you and the processing we have carried out, and the identities of the Data Fiduciaries and Data Processors we have shared it with.
- Correction and erasure: have inaccurate or incomplete data corrected, and have data erased when it is no longer needed for the purpose it was collected or when you withdraw consent.
- Withdraw consent: at any time, for processing based on consent. Withdrawal does not affect processing done before withdrawal. Use "Cookie settings" in the footer for cookies, or contact us for anything else.
- Grievance redressal: raise a complaint with our Grievance Officer (Section 10) and, if unresolved, with the Data Protection Board of India.
- Nominate: nominate a person who may exercise these rights on your behalf in the event of your death or incapacity.
To exercise a right, write to the Grievance Officer using the details in Section 10. We may ask you to verify your identity before acting. We respond within the timelines set out in our Grievance Redressal page.
8. Children
The Site is intended for real-estate developers and their teams. It is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact the Grievance Officer and we will delete it.
9. Security
We use access controls, encryption in transit (HTTPS), and logging on our own infrastructure to protect personal data against unauthorised access, loss, and misuse. In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by the DPDP Act and the rules.
10. Grievance Officer and contact
Grievance Officer: Rupesh Desai
Email: complaints@nirmaanone.com
Phone: +91 95126 17175
Address: Reasonable Brands Activewear Private Limited, D304 to D307 Titanium Business Park, Makarba, Ahmedabad, Gujarat 380051, India
Details of what to include in a complaint, our response timelines, and how to escalate are on the Grievance Redressal page.
11. Complaints to the Data Protection Board of India
If you are not satisfied with how we have handled a grievance, you may complain to the Data Protection Board of India in the manner prescribed under the DPDP Act and the rules. The Board expects you to have first raised the grievance with us and allowed us the prescribed time to respond.
12. Changes to this notice
We will update this notice when our practices change and show the date of the latest version at the top. Material changes to how we use data already collected will be notified to you where we have your contact details.