Privacy Policy

Last updated: To be confirmed: [DD Month YYYY]

This policy explains how Norvane Capital Partners ("NCP", "we", "us") collects, uses, shares and protects personal data when you use ncp.global, fill in our forms, or contact us by WhatsApp, email or phone.
It is written to meet the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 and the rules made under it.
Where the law requires your consent, we ask for it separately and clearly. You can withdraw it at any time.

1. Who we are

Data Fiduciary: Norvane Capital Partners, Building No. 10, Raheja Mindspace, HITEC City, Hyderabad, Telangana 500081.
Privacy contact: [email protected].

Contact details: name, work email, phone number, company and designation.
Requirement details: team size, preferred locations, budget, move-in timeline, asset class and capital range.
Account details: login credentials, saved buildings, comparisons, proposals and space alerts.
Communications: enquiries, WhatsApp messages, emails, call and meeting notes.
Investor details (deal room only): identity details needed to sign an NDA and your investment mandate.
Technical data: IP address, device and browser type, pages viewed, referring site and cookie identifiers.
From other sources: referrals, public professional profiles and company websites, and landlords or operators you have dealt with.
We do not ask for sensitive data such as health information, bank or card numbers, or government ID numbers through the website. Please do not send them.

To respond to your enquiry and arrange a call with an NCP advisor.
To create and manage your account, including verifying your work email.
To prepare shortlists, comparisons and proposals, and to schedule site visits.
To share your requirement with landlords, developers or operators, only when you ask us to.
To run the investor deal room and manage NDAs.
To send market reports, newsletters and updates, with your consent. You can unsubscribe at any time.
To improve the website and measure how our advertising performs (see the Cookie Policy).
To prevent fraud, scraping and misuse, enforce our Terms and Conditions, and meet legal obligations.

Consent: free, specific, informed and given by a clear action, such as ticking a box or submitting a form.
Legitimate uses allowed by the DPDP Act: for example, data you share voluntarily for a stated purpose, or processing needed to comply with law.
Withdrawing consent stops future processing for that purpose. It does not affect processing already done.

We do not sell personal data.
Landlords, developers and flex operators: only the details needed to arrange a visit or proposal, and only with your consent.
Service providers acting for us (Data Processors): hosting, CRM, email, analytics, WhatsApp Business and document-signing tools, bound by contract to protect your data.
Professional advisers such as lawyers and auditors, and our group or affiliated entities, where needed.
Government, regulators, courts or law enforcement, when required by law.
A buyer or successor, if NCP is involved in a merger, acquisition or sale of assets.

Some service providers may store data outside India.
Any transfer follows the DPDP Act, including any restrictions the Government of India notifies on specific countries.

Only as long as needed for the purpose it was collected for, or as required by law.
Accounts: while active, and erased after To be confirmed: [3] years of inactivity.
Enquiries that do not lead to an engagement: To be confirmed: [2] years from the last contact.
Contracts, invoices and tax records: for the period required by law.
Security and access logs: at least one year, as required by the DPDP Rules.

Access: a summary of your personal data and how we process it.
Correction: correct, complete or update inaccurate data.
Erasure: ask us to delete your data, unless we must keep it by law.
Withdraw consent: at any time, as easily as you gave it.
Grievance redressal: raise a complaint with our Grievance Officer (Section 12).
Nominate: name another person to exercise your rights if you die or become unable to act.
To use these rights, email [email protected] or use your account settings. We may verify your identity first.
We respond within To be confirmed: [30] days and always within the period set by law.
If you are not satisfied, you can complain to the Data Protection Board of India.

Reasonable safeguards, including encryption in transit, access controls, logging, backups and contracts with service providers.
If a personal data breach occurs, we inform affected users and the Data Protection Board without delay, and send the Board a detailed report within 72 hours.
No system is completely secure, but we work to protect your data.

We use cookies and similar tools as explained in our Cookie Policy.
Links to other websites, and services such as WhatsApp, are covered by those providers' own privacy policies.

Name: Sridhar
Designation: Co-Founder & Director
Email: [email protected]
Address: Building No. 10, Raheja Mindspace, HITEC City, Hyderabad, Telangana 500081
We acknowledge complaints within To be confirmed: [48 hours] and resolve them within the period set by law.