1. Introduction

Stoneoak Strategy LLP ('Stoneoak', 'we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, disclose and safeguard personal information collected through www.stoneoak.in and related services.

2. Scope

This Privacy Policy applies to visitors, investors, prospective investors, real estate developers, commercial partners, and all users of our platform and advisory services.

3. Information We Collect

We collect personal data necessary to provide our mandate advisory, capital funding, and real estate strategy services. This includes:

• Identity Data: Full name, organizational title, and corporate registration details.
• Contact Data: Phone number, WhatsApp contact, email address, and physical business location.
• Financial & KYC Records: Identity proof, PAN/Aadhaar details, accreditation credentials, and bank account details required for AML/KYC compliance.
• Project & Investment Preferences: Developer project parameters, inventory scale, funding requirements, and investment criteria.
• Technical & Device Data: IP address, browser type, device identifier, cookies, and usage analytics.
• Communication Records: Any information, feedback, or inquiry voluntarily submitted through our website forms or strategy desks.

4. Lawful Basis for Processing

We process personal information with your explicit consent, to perform contractual obligations, comply with statutory legal mandates, and fulfill legitimate business interests in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian privacy regulations.

5. Use of Information

We collect and process your personal data for the following specific purposes:

• Account creation, investor onboarding, and identity verification.
• Executing Mandatory Anti-Money Laundering (AML) and Know Your Customer (KYC) checks.
• Processing real estate strategy consultation requests and capital funding inquiries.
• Providing continuous customer support, project reporting, and operational updates.
• Platform improvement, security monitoring, and fraud prevention.
• Direct marketing communications and service announcements (where consented).
• Complying with statutory regulatory mandates and statutory obligations.

6. Cookies & Tracking Technologies

We use cookies, web beacons, and analytics tools to enhance site navigation, analyze usage trends, and improve user experience. You may configure your browser settings to decline cookies, though certain interactive features of our website may not function optimally as a result.

7. Sharing & Disclosure of Data

Information may be shared strictly on a need-to-know basis with trusted partners including:

• Scheduled banks, payment gateways, and escrow account trustees.
• Independent auditors, legal counsel, RERA authorities, and statutory regulatory bodies.
• Technology hosting providers, CRM infrastructure partners, and accredited KYC agencies.
• Vetted real estate builders and project developers directly relevant to your inquiry.

We do not sell, rent, or trade your personal information to third parties for commercial gain.

8. Data Security Practices

We maintain rigorous administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. Safeguards include role-based access controls, encrypted data transmission protocols (SSL/TLS), and periodic security audits. While we implement industry-standard protections, no internet transmission is 100% immune from security risks.

9. Data Retention

Personal information is retained strictly for the duration required to fulfill the operational purposes outlined in this policy, or as mandated by applicable Indian tax, legal, RERA, and regulatory retention statutes.

10. Your Privacy Rights

Subject to applicable laws under the Digital Personal Data Protection Act, 2023, you hold rights to:

• Request access to and summary of your personal data processed by us.
• Request correction or updating of inaccurate or incomplete personal records.
• Request erasure or deletion of personal data where processing is no longer required.
• Withdraw previously provided consent for marketing or processing activities.
• Nominate a representative or seek grievance redressal regarding data handling.

11. Cross-Border Transfers

Where personal data is transferred or processed by cloud infrastructure servers outside India, appropriate contractual and security safeguards will be executed in full compliance with Indian data localization laws.

12. Children's Privacy

Our services are intended exclusively for adult individuals, corporate developers, and qualified investors aged 18 and above. We do not knowingly collect personal data from children.

13. Third-Party Links

Our website may include links to external platforms (e.g. FracInvest). External sites operate under independent privacy policies. We accept no liability or responsibility for third-party privacy practices.

14. Marketing & Opt-Out

You may opt out of receiving promotional communications at any time by utilizing the "Unsubscribe" link in our emails or by contacting our desk at support@stoneoak.in.

15. Policy Changes

We reserve the right to modify this Privacy Policy periodically. Updated versions will be published on our website with a revised effective date. Continued use of our services constitutes acceptance of the revised policy.

16. Contact & Grievance Redressal

For questions, privacy inquiries, or grievance redressal regarding this policy, please contact our Data Protection Desk:

Stoneoak Strategy LLP
Website: www.stoneoak.in
Email: support@stoneoak.in
Headquarters: Bangalore, Karnataka, India