Our Commitment to Data Privacy
At PGfy, the privacy and security of our Tenants, Property Owners, and Managers are our highest priority. We strictly adhere to the Digital Personal Data Protection (DPDP) Act, 2023 of the Government of India. This page outlines exactly how we collect, secure, manage, and delete your personal data while ensuring full regulatory compliance and pursuing top-tier certifications like STQC and ISO.
1. Understanding the DPDP Act, 2023
The Digital Personal Data Protection (DPDP) Act is a landmark legislation in India designed to protect the digital personal data of individuals. It mandates that organizations processing personal data (Data Fiduciaries) must do so lawfully, fairly, and transparently.
PGfy fully aligns with the seven core principles of the DPDP Act:
- Lawful and Transparent Processing: We collect data only for valid business purposes related to your PG/hostel requirements, with clear transparency.
- Purpose Limitation: Your data is used exclusively to provide PGfy services. We do not repurpose or sell your data to unauthorized third parties.
- Data Minimisation: We collect only the data that is strictly necessary (e.g., location preferences, contact details for bookings).
- Accuracy: We ensure your data is kept accurate and provide you with tools to update your information.
- Storage Limitation: We do not hold onto your data indefinitely. Once the purpose is served or upon your request, data is securely erased.
- Reasonable Security Safeguards: We employ advanced encryption and access controls to prevent data breaches.
- Accountability: We take full responsibility for how your data is handled across our platform and by our service partners.
2. What Data We Collect & Why
Depending on whether you are a Tenant or a Property Manager/Owner, PGfy collects specific data points required to facilitate your experience:
- From Tenants: Basic contact details (Name, Phone, Email), location preferences, budget, and move-in dates. This data is strictly used to match you with suitable properties and coordinate visits or bookings.
- From Property Owners & Managers: Property details, business contact information, pricing, and availability. This is used to list your property and connect you with potential tenants or leasing opportunities.
We do not collect highly sensitive biometric data or financial credentials directly on our servers without explicit, secure compliance frameworks.
3. How We Protect & Secure Your Data
PGfy employs a multi-layered security approach to ensure that your personal information is safeguarded against unauthorized access, alteration, or destruction:
- Encryption: All data transmitted between your device and our servers is encrypted using industry-standard protocols (HTTPS/TLS). Sensitive data stored in our databases is encrypted at rest.
- Strict Access Controls: Internal access to user data is restricted on a strict "need-to-know" basis. Our support and operational teams only access the specific information required to assist you.
- Secure Infrastructure: Our backend architecture is built on reliable, world-class cloud infrastructure that continuously monitors for vulnerabilities and cyber threats.
- Third-Party Partner Management: While we connect you with service partners (e.g., Packers & Movers), we only share the exact data necessary to fulfill your request, and only after you initiate the enquiry.
4. Data Management & Your Rights (Data Deletion)
Under the DPDP Act, you are the master of your data (the Data Principal). You have the right to access, correct, and erase your personal data at any time.
How to Request Data Deletion
If you wish to delete your account, remove your property listing, or completely erase your personal data from PGfy's systems, simply follow this process:
- Send an email to support@pgfy.in from your registered email address.
- Use the subject line: "Data Deletion Request".
- Include your registered Phone Number and Name in the email body for verification.
Our team will process your request within the legally mandated timeframe, ensuring all your personal data is permanently deleted or anonymized, provided there are no pending legal or transactional obligations.
5. Certifications & Ongoing Compliance
To further reinforce trust and security, PGfy is actively working towards aligning our platform with the highest data security standards in India and globally.
We are in the process of auditing our systems and applying for recognized certifications, including:
- STQC (Standardisation Testing and Quality Certification): Aligning our e-services with the quality and security testing standards established by the Ministry of Electronics and Information Technology (MeitY), Government of India.
- ISO/IEC 27001 / 27701: Implementing international best practices for Information Security Management Systems (ISMS) and Privacy Information Management.
Our commitment to data protection is continuous. We regularly review our policies, update our security infrastructure, and train our personnel to ensure your data remains completely secure.
6. Grievance Redressal
If you have any questions, concerns, or grievances regarding how your data is handled under the DPDP Act, please reach out to us immediately:
Email: support@pgfy.in
We take all privacy-related inquiries seriously and will address your concerns promptly.