Privacy Policy

Nest-Scout Advisory (also known as "Nest Scout", styled "Nest-Scout", "we", "us", or "our") is a luxury real estate advisory practice operated by Parvesh Gilhotra, registered in Haryana, India. We operate the website nest-scout.com and related digital services (collectively, the "Platform").

This Privacy Policy explains how we collect, use, store, share, and protect information about you when you access the Platform or engage with our advisory services. It is governed by the Information Technology Act, 2000 read with the IT (Amendment) Act, 2008 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By using the Platform, you consent to the practices described in this Policy. If you do not agree, please discontinue use of the Platform.

We collect the following categories of information:

a. Information You Provide Directly

• Name, phone number, and email address (via contact forms, OTP login, or enquiry submissions)
• Budget preferences, property requirements, and investment intent
• Communications you initiate via WhatsApp, email, or phone

b. Automatically Collected Information

• IP address, browser type, device identifiers, and operating system
• Pages visited, session duration, and clickstream data
• Referral URLs and search queries that directed you to the Platform

c. Sensitive Personal Data or Information (SPDI)

We do not knowingly collect SPDI (as defined under the IT Rules 2011) such as financial account details, biometric data, or medical records unless explicitly required and consented to in writing for a specific advisory transaction.

We use your information to:

• Respond to property enquiries and provide personalised advisory services
• Verify identity and manage access to gated/exclusive inventory
• Send market intelligence updates, new listings, and investment insights (with your consent)
• Improve the Platform through analytics and A/B testing
• Comply with applicable legal, regulatory, and RERA obligations
• Prevent fraud, unauthorised access, and abuse of the Platform

We will not use your data for purposes incompatible with the ones stated above without obtaining fresh consent.

We process your personal data on the following grounds:

• Consent: For marketing communications and optional profile features.
• Contractual necessity: To deliver advisory services you have requested.
• Legitimate interests: For fraud prevention, platform security, and service improvement.
• Legal obligation: To comply with RERA, income tax, and other applicable Indian statutes.

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

• Developers & Builders: To facilitate site visits, booking processes, or documentation — only with your explicit consent.
• Service Providers: Cloud hosting (e.g., Supabase/Vercel), analytics, and communication tools operating under data processing agreements.
• Legal Compliance: When required by a court order, government authority, or applicable law.
• Business Transfer: In the event of a merger, acquisition, or sale of the advisory practice, subject to equivalent privacy protections.

We retain your personal data for as long as your account is active or as necessary to provide services and comply with legal obligations. Lead and enquiry records are retained for a minimum of 3 years to satisfy RERA and GST audit requirements. You may request deletion of non-statutory data at any time (see Section 9).

The Platform uses cookies and similar technologies to enhance user experience, analyse traffic, and remember preferences. You can control cookie settings through your browser; however, disabling cookies may limit certain features.

We use the following types of cookies:

• Essential: Required for authentication and core functionality.
• Analytical: Aggregated data to understand usage patterns.
• Preference: To remember your filter and search settings.

We implement industry-standard security measures including TLS/HTTPS encryption in transit, row-level security at the database layer, environment-separated secret management, and access controls aligned with the ISO/IEC 27001 information security framework. While we take all reasonable precautions, no electronic transmission or storage is 100% secure; you share information at your own risk.

Under applicable Indian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for marketing communications at any time
• Request deletion of your account and associated non-statutory data
• Lodge a complaint with the relevant authority under the IT Act

To exercise any of these rights, please contact us at info@nest-scout.com with the subject line "Privacy Request". We will respond within 30 days.

The Platform may contain links to third-party websites (e.g., developer project pages, Google Maps). We are not responsible for the privacy practices of those sites. We encourage you to review their respective privacy policies.

The Platform is intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated via a prominent notice on the Platform or by email to registered users. Continued use of the Platform after the effective date of changes constitutes acceptance of the revised Policy.

If you have any questions, concerns, or complaints about this Policy, please reach out to us: