Your data, in confidence.
Effective as of 1 May 2025. We take a private-banker’s approach to your data. This is a plain-English summary of how.
1. Introduction
Whytehall Estates ("we", "our", "us") is committed to protecting the privacy of individuals who visit our website, engage our advisory services, or otherwise share personal information with us. This policy explains what we collect, how we use it, with whom we share it, and the rights available to you.
2. Information We Collect
We collect information you voluntarily provide via enquiry forms (name, email, phone, message, property interest), through voice/WhatsApp conversations with our advisors, via engagement letters and diligence packs, and automatically through website analytics (IP, device, browser, referrer, pages viewed).
3. How We Use Information
We use personal information to (a) respond to enquiries, (b) provide our advisory, transactional and property-management services, (c) comply with legal, tax and RERA obligations, (d) send occasional newsletters where you have opted in, and (e) improve our website and services.
4. Legal Basis (India / GDPR-analogous)
We process personal data on the basis of consent, contractual necessity, legitimate interest (in the discreet operation of our practice) and legal obligation. Where you are a resident of the EU, UK or California, additional rights may apply and will be honoured on request.
5. Sharing of Information
We do not sell personal information. We share limited information only with (a) our panel of legal, tax and technical advisers under NDA, (b) developers and counterparties strictly to the extent needed for a specific mandate, (c) government / regulatory bodies where required by law, and (d) payment and cloud providers under data-processing agreements.
6. Data Retention
Enquiry data is retained for 3 years unless you request earlier deletion. Client engagement data is retained for the mandatory statutory period (typically 7 years) plus 3 years thereafter for archival and dispute-resolution purposes.
7. Data Security
We maintain administrative, technical and physical safeguards including access controls, encryption in transit (TLS 1.3), encryption at rest, penetration-tested cloud infrastructure and staff confidentiality agreements. No system is impenetrable, but we treat data as we treat our clients — with genuine care.
8. Your Rights
You have the right to (a) access personal data we hold about you, (b) correct or update it, (c) request deletion (subject to our legal-retention obligations), (d) withdraw consent to marketing, and (e) lodge a complaint with the relevant supervisory authority. Please write to privacy@whytehallestate.com to exercise any of these rights.
9. Cookies & Analytics
Our website uses first-party analytics cookies (Google Analytics 4) and, on marketing landing pages, conversion pixels (Meta, Google). You may disable cookies via your browser settings; some site features may consequently not function.
10. Cross-Border Transfers
Some of our cloud infrastructure and email services are hosted outside India. Where personal data is transferred internationally, we apply industry-standard safeguards including EU Standard Contractual Clauses and equivalent Indian data-transfer instruments.
11. Children’s Data
Our services are not directed at persons under 18. We do not knowingly collect data from minors.
12. Changes to this Policy
We may update this policy from time to time; material changes will be flagged on our website and, where appropriate, notified to existing clients by email.
13. Contact
For any privacy-related question, please write to privacy@whytehallestate.com or by post to #226, 3rd Floor, Phase 5, Yelahanka New Town, Bengaluru — 560064.
Begin a conversation with Whytehall.
A private advisor, a discreet mandate, an outcome worthy of your name. Every enquiry answered within one business day.