Legal · Optiimus Prime Real Estate
Privacy Policy
Buying property means handing over some of the most sensitive information you own — what you earn, what you can borrow, where your family will live. This page sets out exactly what Optiimus Prime collects when you enquire about a property, who we pass it to, how long we keep it, and the control you retain over it at every stage.
Effective from
18 September 2026
Applies to
optiimusprime.com/real-estate
Governed by
DPDP Act, 2023 (India)
The short version
We never sell your data
Your number is not a product. We do not sell, rent or trade buyer databases to other agents, brokers or lead aggregators.
Developers hear from us only with your nod
We share your details with a builder or project sales team when you ask to visit, book or negotiate on that specific project.
Loan papers go to lenders, not to us
KYC and income documents are collected only for a loan you asked us to arrange, and are passed to the banks you name.
You can pull the plug anytime
Withdraw consent, ask for a copy, correct an error or have your file erased by writing to our Grievance Officer.
Contents
01
Who we are
Optiimus Prime (“Optiimus Prime”, “we”, “us”, “our”) is a real estate advisory and marketing firm based in Hyderabad, Telangana. We help buyers and investors find, evaluate and acquire apartments, villas, open plots and commercial space across West Hyderabad, and we run a separate interior design practice under the same name.
For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for the personal data described in this policy — that is, we decide why and how it is processed. You are the Data Principal.
- Registered office: 3rd Floor, A-BLOCK, Back side of Radisson, Plot No: 25, Sandil Buildings, near Pale Vindu Restaurant, Jayabheri Enclave, Hyderabad, Telangana 500032
- Email: info@optiimusprime.com
- Phone: +91 90711 71819
02
Scope of this policy
This policy covers the real estate side of our business: the pages under optiimusprime.com/real-estate, the enquiry and consultation forms on those pages, the EMI calculator, our blog, and every conversation that follows — over phone, WhatsApp, Telegram, email, at our office or at a project site.
Our interior design practice keeps a separate policy, because it collects very different information — photographs of the inside of your home, measurements, lifestyle notes and vendor details. If you are engaging us for interiors, read the Interiors Privacy Policy instead.
By submitting an enquiry form, requesting a callback or continuing to deal with our advisors after reading this page, you consent to the processing described here. Where the DPDP Act requires specific consent — for marketing, or for sharing your financial documents with a lender — we ask for it separately and you may refuse without losing access to our core advisory service.
03
Personal data we collect
We collect only what a property transaction actually requires. In practice that falls into six categories.
Identity & contact details
Name, mobile number, email address, city and locality, preferred language and preferred time to call.
Source: Enquiry forms, site-visit registers, phone, WhatsApp and Telegram.
Property requirement profile
Budget range, configuration (2BHK / 3BHK / villa / plot / commercial), preferred micro-market such as Kokapet, Financial District, Tellapur or Narsingi, carpet-area expectations, possession timeline, purchase intent (end-use or investment) and whether a home loan is required.
Source: Conversations with our advisors, enquiry forms and site visits.
Site-visit & transaction records
Projects shown, dates of visits, developer registration slips, expression-of-interest and booking forms, allotment and agreement references, payment-milestone status and registration details.
Source: Our advisors, developer sales offices and your own submissions.
Financial & KYC data
Income band, employment type, existing obligations, PAN, Aadhaar (or other identity proof), bank statements, salary slips and credit-report outcomes — collected only when you ask us to facilitate a home loan or when a developer or sub-registrar requires them to complete your booking.
Source: You, with your consent, and lending partners you authorise.
Communication records
Emails, WhatsApp and Telegram messages, call notes and, where we tell you in advance and you agree, call recordings kept for quality and dispute-resolution purposes.
Source: Direct communication between you and our team.
Technical & usage data
IP address, device and browser type, pages viewed, referring page and approximate city-level location, generated automatically when you browse optiimusprime.com.
Source: Our website and hosting infrastructure logs.
What we deliberately do not collect
- We do not ask for your caste, religion, political views, health records or biometric data. If a developer or authority requires a declaration of this kind for a government scheme or reservation, you deal with them directly.
- We do not store card numbers, UPI IDs, net-banking credentials or OTPs. Optiimus Prime does not accept booking amounts or token payments on this website — those are paid directly to the developer through their own banking channels.
- The EMI calculator on our site runs entirely inside your browser. The loan amount, interest rate and tenure you enter are not transmitted to us, logged, or stored anywhere.
04
How we collect it
- Directly from you — enquiry and consultation forms on this website, callback requests, WhatsApp and Telegram messages, emails, phone calls, walk-ins to our office, and registration slips you sign at a project site visit.
- Automatically — standard server and hosting logs generated when your browser requests a page, which include IP address, device and browser details, and the pages you visited.
- From our channel partners — where a developer, a referral partner or a listing portal forwards your enquiry to us because you submitted it on their platform and asked to be contacted about a project we represent.
- From our own interiors division — if you are already an interiors client and have asked us to also help you find a property. We do not move your file across divisions without you asking us to.
05
Why we use your data
Under the DPDP Act, personal data must be processed for a lawful purpose you have consented to, or for a “legitimate use” the Act recognises. Ours are:
- To answer your enquiry — understand your requirement, shortlist matching projects, share price sheets, floor plans and payment schedules, and arrange site visits.
- To carry out the transaction — introduce you to the developer, coordinate negotiation, booking, allotment, agreement drafting and registration, and follow up on construction and payment milestones.
- To facilitate financing — where you ask us to, submit your loan application and supporting documents to banks and NBFCs, and track sanction and disbursement.
- To verify and protect — confirm RERA registration, title and approval status of a project, and comply with due-diligence and record-keeping obligations that apply to property transactions.
- To improve what we do — analyse which localities, configurations and price bands people ask about, so our advice and our market reports stay accurate. This analysis is aggregated; it does not single you out.
- To market, with your permission — send you new launches, price revisions and market updates. See section 08.
- To meet legal obligations — respond to a lawful demand from a court, the Real Estate Regulatory Authority, a tax authority or the police, and to establish or defend a legal claim.
We will not repurpose your data. If we ever want to use what you gave us for something outside this list, we will ask you first.
07
Home loans & KYC documents
Financing paperwork is the most sensitive data we ever touch, so it is worth stating our handling separately.
- We collect KYC and income documents only after you expressly ask us to facilitate a home loan, and only the documents that lender actually requires.
- We share them only with the specific banks or NBFCs you agree to approach. We will name them before we submit anything.
- We do not run a credit check on you ourselves. Any credit-bureau enquiry is made by the lender, under the authorisation you sign with them.
- Once a loan is sanctioned or you decide not to proceed, we destroy the physical copies we hold and delete our digital copies, unless a law requires us to keep a record.
- Aadhaar, where collected, is handled as required under the Aadhaar Act and the rules made under it. You may always offer an alternative identity document where the lender or authority permits one.
- We never ask for OTPs, net-banking passwords, card PINs or UPI PINs. No one from Optiimus Prime will ever request these. If someone claiming to be from Optiimus Prime does, treat it as fraud and report it to us immediately.
08
Calls, WhatsApp & marketing
Real estate is a follow-up business, and we would rather be useful than relentless.
- Service communication — calls and messages about the specific enquiry you raised, a site visit you scheduled, or a booking in progress. These continue for as long as your enquiry is live.
- Marketing communication — new launches, price revisions, offers and market reports. We send these only where you have consented, and every message carries a way to stop.
- Stopping it — reply STOP to any WhatsApp or SMS from us, use the unsubscribe link in any email, tell any advisor on a call, or write to our Grievance Officer. We action opt-outs within 7 working days and confirm when it is done.
- TRAI preferences — our commercial communication follows the Telecom Commercial Communications Customer Preference Regulations. If your number is registered under the DND / Do Not Disturb registry, we will not send you promotional messages, though we may still contact you about a transaction already underway.
Withdrawing marketing consent never affects the advisory service you receive from us.
10
How long we keep data
We keep personal data only as long as the purpose it was collected for survives, and then we erase it.
- Enquiries that did not proceed — retained for up to 24 months from your last interaction, because property searches in Hyderabad routinely restart after a year. Ask us earlier and we delete earlier.
- Completed transactions — the transaction file, including booking, agreement and registration references, is retained for 8 years from the date of registration, to meet tax, accounting and limitation-period requirements and to support you in any later dispute with the developer.
- Loan facilitation documents — destroyed once the loan is sanctioned or the application is dropped, unless we are required to retain a record.
- Marketing lists — removed within 7 working days of you opting out.
- Server and access logs — retained for a short technical window and then overwritten.
Where a legal obligation, an ongoing dispute or a regulatory proceeding requires us to hold data longer, we retain only what that obligation covers and delete the rest.
11
How we protect it
We apply reasonable security safeguards appropriate to the sensitivity of what we hold:
- Access to enquiry and transaction records is limited to the advisors and support staff working on your file.
- Our website is served over HTTPS, so what you submit through a form is encrypted in transit.
- Physical documents are held in locked storage at our office and shredded when their retention period ends.
- Staff and channel partners who handle client data are bound by confidentiality obligations, and access is revoked when someone leaves.
- Devices used to access client records are password-protected, and we review access periodically.
No system is perfect. If a personal data breach occurs that affects you, we will notify you and the Data Protection Board of India in the manner and within the timelines the DPDP Act and its rules require, and tell you what happened, what data was involved and what you should do.
12
Your rights
As a Data Principal under the DPDP Act, 2023, you have the following rights over the data we hold about you. All of them are exercised by writing to our Grievance Officer.
- Right to access — obtain a summary of the personal data we hold about you, how we are processing it, and the identities of the other Data Fiduciaries and processors we have shared it with.
- Right to correction and completion — have inaccurate or misleading data corrected, incomplete data completed and outdated data updated.
- Right to erasure — have your data deleted once the purpose it was collected for is over, unless a law requires us to keep it.
- Right to withdraw consent — withdraw consent at any time, as easily as you gave it. Withdrawal is not retrospective: it does not undo processing already carried out lawfully.
- Right to grievance redressal — raise a complaint with us and receive a response. We acknowledge within 7 working days and aim to resolve within 30 days.
- Right to nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
We may ask you to verify your identity before acting on a request — usually by confirming details from the enquiry you originally raised — so that we do not disclose your information to someone else. There is no charge for exercising these rights.
If you are not satisfied with our response, you may escalate to the Data Protection Board of India in accordance with the DPDP Act.
13
Children's data
Our services are directed at adults who are legally competent to contract. We do not knowingly collect personal data from anyone under 18 years of age, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children.
Where a property is being purchased in the name of, or jointly with, a minor, we process the minor’s details only to the extent the transaction and registration require, and only with verifiable consent from a parent or lawful guardian. If you believe a child has given us data without that consent, write to our Grievance Officer and we will delete it.
14
Third-party sites & listings
Our website links out to developer websites and project microsites, RERA and government portals, listing platforms, bank and NBFC pages, and social media including WhatsApp, Telegram, Instagram, LinkedIn, YouTube and X. Some pages also display imagery served from third-party image libraries.
Once you leave optiimusprime.com, you are on someone else’s terms. We do not control those sites and are not responsible for their content or their privacy practices. Read their policies before submitting anything.
Property information on this website — pricing, availability, layouts, approvals and possession timelines — is indicative and sourced from developers. It is not an offer or a warranty, and it may change. Always verify project details against the relevant RERA registration and the developer’s own documentation before you commit.
15
Changes to this policy
We review this policy periodically and whenever our practices, our technology or the law changes — including as the rules under the DPDP Act are notified and come into force.
The version in force is always the one published on this page, with its effective date at the top. Where a change materially affects how we use data you have already given us, we will tell you directly — by email or message to the contact details we hold — before it takes effect, and where the law requires it, ask for fresh consent.
16 — Grievance Officer
A question about your data? One person is accountable for it.
In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, we have designated a Grievance Officer to address questions about this policy and to handle requests to access, correct, erase or stop processing your personal data. Please mark your message “Data Request — Real Estate” so it reaches the right desk.
Write to
info@optiimusprime.comCall
+91 90711 71819Post
The Grievance Officer, Optiimus Prime
3rd Floor, A-BLOCK, Back side of Radisson, Plot No: 25, Sandil Buildings, near Pale Vindu Restaurant, Jayabheri Enclave, Hyderabad, Telangana 500032
We acknowledge every request within 7 working days and aim to resolve it within 30 days. If you remain dissatisfied, you may escalate the matter to the Data Protection Board of India.
This policy is governed by the laws of India. Any dispute arising out of it is subject to the exclusive jurisdiction of the competent courts at Hyderabad, Telangana. Effective from 18 September 2026.