Privacy Policy - Lakush
Home / Legal / Privacy Policy

Your data, and what we actually do with it.

Most real estate sites collect your number, sell it sideways, and call it a privacy policy. Here's ours - every field we collect, every place it goes, how long we keep it, and how to make us delete it.

Effective 21 August 2026
Updated 21 August 2026
DPDP Act 2023 aligned

The short version

We collect your name, phone, email, and what you told us you're looking for. We use it to call you back about that enquiry and nothing else. We share it with the developer of the specific project you enquired about, and with the tools that run our business - our CRM, our email provider, our analytics.

We do not sell your data. We do not sell it to other brokers. We do not add you to bulk lists. One email to hello@lakush.in and we delete everything we hold on you.

Scope & who's responsible

This policy explains how Lakush Realty Advisory ("Lakush", "we", "us") handles personal data collected through lakush.in, our WhatsApp line, our phone lines, and our email.

For the purposes of the Digital Personal Data Protection Act, 2023, Lakush is the Data Fiduciary - we decide the purpose and means of processing your data. You are the Data Principal. We also comply with the Information Technology Act, 2000 and the Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011.

This policy does not cover developer websites, RERA portals, or any other third-party site you reach through a link on our Platform. Read their policies separately.

What we collect

Everything below is either given by you or generated automatically as you use the site. Nothing else.

Information you give us

DataWhenRequired?
Full nameEnquiry form, clarity call booking, WhatsAppYes
Phone numberEnquiry form, callback request, WhatsAppYes
Email addressEnquiry form, contact formYes
Budget rangeEnquiry formOptional
Purchase timelineEnquiry formOptional
Project preferences, message, shortlistEnquiry form, compare tool, conversationsOptional
Notes from our calls and site visitsDuring advisoryOptional

Information collected automatically

  • Attribution data - the page you enquired from, and UTM parameters (utm_source, utm_medium, utm_campaign) plus ad click identifiers (gclid, fbclid) if you arrived from an ad.
  • Technical data - IP address, browser type and version, device type, operating system, screen size, and referring URL.
  • Usage data - pages viewed, properties opened, filters applied, time on page, and comparison sets created.
  • Server logs - request timestamps and error records generated by our hosting provider.
We do not collect sensitive personal data. We never ask for and do not want your PAN, Aadhaar, bank account details, card numbers, passwords, salary slips, credit reports, health data, or biometric information. If you send any of it to us unsolicited, we will delete it. No genuine Lakush representative will ever ask you for these over phone, WhatsApp, or email.

Why we collect it

PurposeWhat it uses
Responding to your enquiryName, phone, email, message
Scheduling clarity calls and site visitsName, phone, email, timeline
Shortlisting projects that actually fitBudget, timeline, preferences
Introducing you to a developer you asked aboutName, phone, email, project of interest
Maintaining our internal CRM recordsAll enquiry fields, call notes
Understanding which pages and campaigns workUsage data, attribution data
Preventing spam, fraud, and abuseIP address, server logs
Meeting legal, tax, and regulatory obligationsTransaction and communication records

We do not use your personal data for automated decision-making that produces legal effects, and we do not profile you for purposes unrelated to your property search.

Who we share it with

We share personal data only in these situations:

1. Developers you enquired about

If you enquire about a specific project, we pass your name, phone, email, and requirement to that developer or their authorised sales channel so they can respond to you. We share this only for the project you asked about - not your whole search history, and not with developers you never enquired about. Once shared, the developer processes your data under their own privacy policy.

2. Service providers who run our systems

  • CRM - Buildesk, for enquiry management, follow-up tracking, and attribution.
  • Hosting - our web host, which stores the site and its database on servers in India.
  • Email - Google Workspace, for correspondence and notification emails.
  • Messaging - WhatsApp / Meta, if you choose to contact us there.
  • Analytics & advertising - Google Analytics and Meta, for aggregate traffic measurement and campaign performance.

These providers are contractually or by their own terms restricted to processing data on our instructions, for the purpose of providing their service.

3. Legal and compliance

Where required by law, court order, or a lawful request from a government or regulatory authority, or where necessary to establish, exercise, or defend a legal claim, or to protect the safety and rights of any person.

4. Business transfer

If Lakush is involved in a merger, acquisition, or transfer of business, your data may transfer as part of that transaction. The receiving entity will remain bound by this policy or a materially equivalent one, and we will notify you.

What we never do

This is the part most policies leave out, so we'll be specific.

  • We never sell your personal data to anyone, for any amount.
  • We never trade or barter your contact details with other brokers, agents, or lead aggregators.
  • We never add you to bulk marketing databases, purchased lists, or blast campaigns you didn't ask for.
  • We never share your budget, salary discussion, or personal circumstances with a developer as negotiating leverage against you.
  • We never run drip campaigns or fake-urgency messaging. After a clarity call we follow up once. If you don't reply, we stop.
If you get spam claiming to be from us - or a call from a broker who somehow knows you enquired with Lakush - forward it to hello@lakush.in. We will investigate it properly and tell you what we find.

Cookies & tracking

We use a small number of cookies and similar technologies:

  • Essential - session cookies that keep the site working, hold your comparison shortlist, and protect forms against abuse. These cannot be switched off.
  • Analytics - Google Analytics cookies that tell us, in aggregate, which pages and projects get attention.
  • Advertising - Meta and Google cookies and pixels that measure whether an ad led to an enquiry, and may be used for remarketing.

You can block or delete cookies through your browser settings, and you can opt out of Google Analytics using Google's browser opt-out add-on. Blocking essential cookies may break parts of the site.

We do not currently respond to browser "Do Not Track" signals, as there is no consistent industry standard for interpreting them.

How long we keep it

DataRetention
Enquiry & CRM records (active search)Until your search concludes, then 24 months
Enquiry records (no response from you)12 months from last contact
Transaction & commission records8 years, as required under tax and company law
Email correspondence36 months
Server & access logs90 days
Analytics data (aggregated)Per Google's retention settings, up to 26 months

After these periods we delete or irreversibly anonymise the data, unless a longer period is required by law or to defend a live legal claim. If you ask us to delete earlier, we will - see below.

How we protect it

We apply reasonable security practices proportionate to the data we hold:

  • HTTPS / TLS encryption across the entire site, including all form submissions.
  • Parameterised database queries and server-side input validation to prevent injection attacks.
  • Rate limiting, spam filtering, and abuse controls on public forms.
  • Access to the CRM and admin panel restricted to authorised team members, with individual credentials.
  • Regular patching of the platform and its dependencies.

No system is perfectly secure, and we can't guarantee absolute security. If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required under the DPDP Act.

Your rights

Under the DPDP Act, 2023, you have the following rights over the data we hold about you:

Right to access

Ask for a summary of the personal data we hold about you and how it's being processed.

Right to correction

Have inaccurate or incomplete data corrected, updated, or completed.

Right to erasure

Have your data deleted where it's no longer needed for the purpose you gave it.

Right to withdraw

Withdraw your consent at any time, as easily as you gave it.

Right to grievance

Raise a complaint with our Grievance Officer and get a response within 15 days.

Right to nominate

Nominate another person to exercise these rights if you die or become incapacitated.

To exercise any of these, email hello@lakush.in from the address you gave us, or from any address along with the phone number you used. We may ask a verification question to confirm it's really you before acting - we won't hand your data to someone impersonating you.

Opting out & deletion

Three ways to stop hearing from us, all of which work:

  1. Tell whoever calls you. Say "please remove me" on any call or WhatsApp message and we will mark the record as opted out immediately.
  2. Email us. Send "STOP" or "DELETE MY DATA" to hello@lakush.in.
  3. Unsubscribe. Use the unsubscribe link at the bottom of any email we send.

Opt-out requests are actioned within 7 working days. Deletion requests are completed within 30 days, except for records we are legally required to retain (tax, statutory, or an ongoing dispute), which we will identify to you specifically rather than using it as a blanket excuse.

Note: If your details were already passed to a developer for a project you enquired about, we will delete our copy, but you will also need to ask that developer to delete theirs. We'll tell you exactly who received your data and when, so you know where to write.

Children's data

The Platform is intended for adults evaluating a property purchase. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, write to hello@lakush.in and we will delete it promptly.

We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, as prohibited under the DPDP Act.

Where data is stored

Our website database and CRM records are hosted on servers located in India. Some of our service providers - notably email, analytics, and messaging platforms - process data on infrastructure located outside India.

Where such transfer occurs, it is limited to what the service requires, is subject to that provider's contractual and security commitments, and is restricted to countries not barred by the Central Government under the DPDP Act.

Changes to this policy

We may update this policy as our services, tools, or legal obligations change. The current version always lives on this page, with the "Updated" date at the top.

If a change materially affects how we use data you've already given us, we will notify you by email before it takes effect, and where the law requires it, ask for fresh consent.

Grievance officer

In accordance with the DPDP Act, 2023 and the Information Technology Act, 2000, our Grievance Officer can be reached below. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

Officer
Jagan Cherukuri
Designation
Grievance Officer, Lakush Realty Advisory
Address
Munivenkatppa Layout, BTM Layout 2nd Stage, Bilekahalli, Bengaluru, Karnataka 560076
Hours
Mon - Sat, 10:30 AM - 7:30 PM IST

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.