ALT DRX PRIVATE LIMITED
Privacy Policy
Last Updated: 24 June 2026
Alt DRX Private Limited ("Company", "We", "Us", or "Our"), a private limited company with registered office at 778, Chinnaswamy Chambers, 3rd floor, 12th cross, Double Road, Indiranagar (Bangalore), Bangalore North, Karnataka, India-560038, bearing CIN: U70200KA2022PTC166655), operates the website www.AltDRX.com and its mobile application (collectively, the "Platform"). The Platform is a real estate tokenisation platform that facilitates fractional ownership of real estate assets through Special Purpose Vehicles ("SPVs" - which are LLPs) and the issuance of digital units ("SQFTs").
We are committed to protecting Your privacy and the personal data You share with Us. This Privacy Policy ("Policy") sets out the manner in which Your personal data and other information is collected, received, stored, processed, disclosed, transferred, dealt with or otherwise handled by the Company in relation to the Services offered on the Platform.
This Policy is prepared in compliance with, and should be read in conjunction with, the following applicable laws:
This Policy is an Electronic Record under Section 2(1)(t) of the IT Act, 2000 read with the rules made thereunder, and is generated by a computer system. It does not require any physical, electronic, or digital signature.
By clicking the 'Continue / I Accept' button at sign-up, or by accessing or using the Platform, You acknowledge that You have read, understood, and agree to be bound by this Policy and our Terms of Use ("Terms"). This Policy is incorporated into and forms part of the Terms. Capitalised terms not defined herein shall have the meaning ascribed to them in the Terms.
This Policy does not apply to information collected by third parties through links accessible from the Platform.
We collect information about You in the following ways and for the following categories:
When You register, set up an account, submit forms, or interact with our customer support, You may provide us with:
As part of our KYC verification process, Users are required to provide Aadhaar information for identity verification purposes. Any Aadhaar information collected by us shall be collected, processed, stored, and protected strictly in accordance with applicable laws and regulatory requirements. Aadhaar numbers shall be masked and handled in accordance with the relevant prescribed security and privacy safeguards. All information disclosed by You shall be deemed to be disclosed willingly and without coercion. You are responsible for ensuring the accuracy and completeness of the information You provide. You acknowledge that furnishing false or unauthorised information is a violation of this Policy and any applicable law.
When You browse or use the Platform, we may automatically collect certain technical and usage information that does not identify You directly ("Non-Personal Information"), including but not limited to: IP address and approximate geolocation, Browser type, version, and language settings, Referring URLs and pages visited on the Platform, Session duration and clickstream data.
We use cookies and similar data collection mechanisms on certain pages of the Platform. We place both persistent and session cookies in Your device's storage. You may decline cookies via Your browser settings, however, some features or Services may not function correctly if cookies are disabled. We receive and store Non–Personal Information by the use of these cookies on certain pages of the Platform. We offer certain additional features on the Platform that are only available through the use of such cookies. We place both permanent and temporary cookies in Your computer/mobile device’s storage drive. We do not track the behaviour of Users who are minors in accordance with applicable law.
We may receive and process certain information about You, including Personal Information, from third parties and publicly available sources where such collection is necessary for providing, improving, or facilitating Our Services, complying with legal obligations, preventing fraud, or for other legitimate purposes permitted under applicable law. Such third parties may include Our affiliates, business partners, service providers, merchants, marketplaces, resellers, payment partners, payment aggregators, payment system providers, and other entities involved in the provision of the Services.
Any Personal Information obtained from third parties will be processed in accordance with this Privacy Policy and applicable laws, including the provisions of the Digital Personal Data Protection Act, 2023 and the rules framed thereunder, as amended from time to time.
By registering on the Platform, You provide informed consent for Us to obtain Your information from the above third parties, to the extent necessary for the purposes described in this Policy and subject to applicable law.
The Company may store certain information, including information applicable to Users, on a blockchain application of its choice ("Blockchain Access"). You may be provided with a personal "Blockchain Key" to access Your information through an independent digital application outside the Platform. Upon registration, You authorise Us to enable such Blockchain Access for Your account. Data stored on-chain is subject to the immutable and distributed nature of blockchain technology erasure requests may be limited by this technical constraint, and We will inform You accordingly.
By registering for, accessing, or using the Platform, You acknowledge and consent to the storage, processing, and authorised sharing of such information through blockchain-based systems in accordance with this Privacy Policy and applicable laws. We will implement reasonable technical and organisational safeguards to protect such information and ensure that access is restricted to authorised persons on a need-to-know basis.
As a matter of principle, We do not collect special categories of personal data such as data revealing racial or ethnic origin, religious or philosophical beliefs, political opinions, membership, health data (except to the extent required for verifying the capacity of the User), unless required by law or with Your explicit consent.
We do not knowingly collect, process, use, or disclose personal data of children (persons under 18 years of age) or persons with disabilities without the verifiable prior consent of their parent, lawful guardian, or authorised representative. If We discover that We have inadvertently collected such data, We will delete it as soon as reasonably practicable. Use of the Platform is restricted to persons who are legally competent to enter into contracts under the Indian Contract Act, 1872.
We use Your information only for lawful purposes and only to the extent necessary for those purposes, in accordance with the principle of purpose limitation under the DPDP Act, 2023. The specific purposes are:
In accordance with the DPDP Act, 2023, We may process Your personal data without Your consent where:
We will not share Your personal data with third parties except as described in this Policy and in compliance with applicable law.
We share Your information with carefully selected third-party service providers who assist Us in delivering the Services, strictly on a need-to-know basis and under contractual obligations of confidentiality. These include:
All such third parties are bound by data processing agreements (DPAs) requiring them to use Your information solely for the purpose for which it was disclosed, maintain appropriate security standards, and comply with applicable data protection laws.
For example, We may share Your personal data with third-party service providers that assist Us in: (i) verifying Your identity and authenticating KYC documents; (ii) developing, maintaining, testing, securing, and improving the Platform; (iii) enabling the provision of Services through third-party software tools, integrations, and technology infrastructure; (iv) providing customer support, communication, payment processing, and related services; (v) validating bank account information and facilitating transactions; (vi) supporting Our marketing and promotional activities (subject to applicable consent requirements); (vii) conducting audits, analytics, risk assessments, and business operations; and (viii) preventing, detecting, investigating, and mitigating fraud, money laundering, cybersecurity incidents, and other unlawful activities.
Such service providers shall have access to Your personal data only to the extent necessary to perform services on Our behalf and shall be contractually obligated to maintain appropriate confidentiality, security, and data protection standards and to process such data only in accordance with Our instructions and this Privacy Policy.
You acknowledge and consent to the collection, transfer, storage, and processing of Your personal data by such service providers solely for the purposes of providing, facilitating, improving, and supporting the Services. Subject to applicable law, You may request a summary of the categories of third parties and information regarding data sharing by contacting Us.
We may disclose Your information to regulators, law enforcement agencies, courts, tribunals, and government authorities where required by applicable law, including:
In such cases, We are not required to obtain Your prior consent or inform You of such disclosure, except to the extent required by law.
In the event of a merger, acquisition, restructuring, sale, joint venture, amalgamation, or transfer of all or a substantial part of the Company's business, Your information may be transferred to the acquiring or resulting entity, subject to comparable data protection obligations and in compliance with applicable law. We will notify You of any such transfer to the extent required by law.
To facilitate the operation of SPV LLPs and Investment Opportunities, We may share relevant information with co-investors, administrators, property managers, and other partners, strictly to the extent necessary for the administration of Your investment.
We may share Your personal data with other third parties where You have provided explicit, informed consent for such sharing. You may withdraw this consent at any time in the manner described in this Policy.
We do not disclose Your personal data to third parties for their own independent marketing or advertising purposes without Your explicit consent.
We implement and maintain reasonable technical, organisational, and administrative security measures designed to protect Your personal data from unauthorised access, loss, misuse, disclosure, alteration, or destruction, in accordance with Section 43A of the IT Act, 2000, and the DPDP Act, 2023.
These security practices constitute 'reasonable security practices and procedures' as required under the IT Act, 2000.
Notwithstanding the foregoing, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of Your data. You are responsible for maintaining the confidentiality of Your login credentials and for all activities that occur under Your account. You must immediately notify Us at Compliance@Altdrx.com of any unauthorised use of Your account or any security breach.
We retain Your information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The minimum retention periods are set out below:
| Type of Data | Retention Period |
|---|---|
| KYC & Identity Documents | 5 years after end of business relationship or account closure |
| Financial Transaction Records | 5 years from transaction date or longer if required by tax/accounting laws |
| Personal Information (General) | 5 years post relationship end |
| Non-Personal / Technical Data | As long as reasonably necessary for operational, security, or compliance purposes |
| User Communications | 3 years after closure of request or relationship |
| Investment & SPV LLP Documents | Period of SPV + 5 years |
| Blockchain-stored data | As required by law, where deletion is not technically feasible, data shall be restricted, anonymised, or otherwise handled in compliance with applicable law |
Notwithstanding the above table, We may retain Your information for longer periods where:
Upon expiry of the applicable retention period, We will securely delete or irreversibly anonymise Your personal data in accordance with our data deletion procedures. Anonymised data may be retained for analytical and research purposes without any restriction. You grant Us explicit consent to retain Your personal data to the extent required for compliance with PMLA, 2002, PML Rules, 2005, and any other applicable law or regulatory guidance.
Under the DPDP Act, 2023, the IT Act, 2000, and other applicable law, You have the following rights in relation to Your personal data processed by Us:
You have the right to request a summary of Your personal data being processed by Us and information about the processing activities, including the identities of all third parties with whom Your personal data has been shared (except where sharing is pursuant to a lawful request from an authority for prevention, detection, or investigation of offences). To exercise this right, write to Us at Compliance@Altdrx.com.
You have the right to request correction of inaccurate or incomplete personal data and updating of personal data that has changed. You may correct or update certain information directly through Your account settings on the Platform. For other corrections, write to Us at Compliance@Altdrx.com.
You have the right to request erasure of Your personal data provided there is no compelling reason for Us to continue processing it. Upon receiving a valid erasure request, We will delete Your personal data from our systems and ensure that any Data Processors processing Your personal data on Our behalf also delete it.
This right is subject to exceptions under applicable law, including where:
Where We rely on Your consent as the legal basis for processing, You may withdraw that consent at any time by writing to Us at Compliance@Altdrx.com. Withdrawal of consent is prospective in effect and does not affect the lawfulness of processing carried out prior to the withdrawal. Please note that withdrawal of consent may result in Our inability to continue providing You with some or all of the Services, and We reserve the right to terminate Your account in such event.
You have the right to a readily available means of grievance redressal in respect of any act or omission by Us concerning the performance of Our obligations under this Policy. Please refer to Section 16 of this Policy for details of Our Grievance Officer.
You have the right to nominate another individual who shall, in the event of Your death or incapacity, exercise Your rights in relation to Your personal data in accordance with the DPDP Act, 2023 and rules prescribed thereunder. To nominate an individual, write to Us at Compliance@Altdrx.com.
You may give, manage, review, or withdraw Your consent to Our processing of Your personal data through a consent manager registered with the Data Protection Board. The consent manager is accountable to You and acts on Your behalf in relation to Your consent.
To exercise any of the above rights, please submit a written request to Compliance@Altdrx.com with the subject line 'Data Rights Request'. We will acknowledge Your request within 3 business days and endeavour to fulfil it within 30 days, except where a longer period is permitted or required by law. We may require You to verify Your identity before processing a rights request.
Under the DPDP Act, 2023, You are required to:
Violation of these duties may attract liability under the DPDP Act, 2023, the IT Act, 2000, and other applicable laws.
We use cookies and similar tracking technologies on the Platform to:
You may control or decline cookies through Your browser settings. If You decline certain cookies, some features of the Platform may not function correctly.
The Platform may contain links to third-party websites, applications, or services ("Third-Party Sites"). This Policy does not apply to any information collected by Third-Party Sites. We are not responsible for the privacy practices, content, or security of Third-Party Sites. We strongly encourage You to review the privacy policy of each Third-Party Site You visit. Your interaction with Third-Party Sites is solely at Your own risk.
You may provide Your feedback, reviews, testimonials, etc. on the Platform on Your use of the Services provided by the Company ("Posts"). Any content or Personal Information and Posts that You share or upload on the publicly viewable portion of the Platform will be publicly available and can be viewed by other users. Your Posts shall have to comply with the conditions relating to use of Platform as mentioned in the Terms. The Company retains an unconditional right to remove and delete any Post or such part of the Post that, in the opinion of the Company, does not comply with the conditions in the Terms. The Company reserves the right to use, reproduce and share Your Posts for any purpose. If You delete Your Posts from the Platform, subject to compliance with the applicable laws, copies of such Posts may remain viewable in archived pages, or such Posts may have been copied or stored by other Users.
Your personal data is primarily stored and processed in India. To the extent any personal data is transferred outside India (for example, to internationally hosted cloud infrastructure or third-party service providers), such transfers shall be carried out only:
Where the Central Government notifies certain countries as restricted for cross-border data transfer, We will not transfer Your personal data to entities located in such countries.
As a Platform facilitating financial investments, We are subject to obligations under the Prevention of Money Laundering Act, 2002 (PMLA), the Prevention of Money Laundering (Maintenance of Records) Rules, 2005, and other applicable laws In furtherance of these obligations:
You acknowledge and consent to the foregoing processing as a mandatory pre-condition for the use of the Platform.
In the event of a personal data breach that is likely to adversely affect Your rights or interests, We will:
We have designated personnel responsible for managing data breach incidents in accordance with the DPDP Act, 2023, IT Act, 2000, and other applicable Acts and guidelines.
We reserve the right to modify, amend, add, or remove portions of this Policy at any time, without prior notice to You, except to the extent required by applicable law. Any changes will be effective immediately upon posting the revised Policy on the Platform. You can determine the date of the most recent revision by referring to the 'Last Updated' date at the top of this Policy.
Your continued use of the Platform following the posting of changes constitutes Your acceptance of the revised Policy. We encourage You to review this Policy periodically.
In the event of material changes that require Your explicit consent under the DPDP Act, 2023, We will seek Your fresh consent before processing Your data for any new purpose.
By registering on the Platform, You expressly agree to receive communications by way of calls, SMS, WhatsApp, email, and push notifications from the Company and third parties duly authorised by the Company, for the purposes of the Services and for promotional purposes (subject to Your consent).
You may opt out of promotional communications at any time by writing to Compliance@Altdrx.com or by using the 'unsubscribe' link in any promotional email. If You opt out, We will continue to send You communications strictly required for the provision of the Services and for compliance purposes.
In accordance with the DPDP Act, 2023 and the IT Act, 2000, if you have any questions, concerns, grievances, or requests relating to your personal data or this Privacy Policy, you may contact our Grievance Officer / Data Protection Officer at:
You may submit any grievance related to the processing of Your personal data, or any act or omission of the Company in connection with this Policy, to the Grievance Officer at the above contact details. We will acknowledge Your grievance within 3 business days and endeavour to resolve it within 30 days.
If Your grievance is not resolved to Your satisfaction after exhausting Our internal grievance redressal mechanism, You may approach the Data Protection Board of India established under the DPDP Act, 2023, in the manner prescribed by the Central Government.
This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka, India.
If You have any questions, concerns, requests, grievances, or complaints relating to this Privacy Policy or the processing of Your personal data, You may contact Us through any of the following channels:
By signing in to, accessing, or using the Platform, You acknowledge that You have read and understood this Privacy Policy and consent to the collection, use, processing, storage, and disclosure of Your personal data in accordance with this Privacy Policy and the Terms of Use. This electronic record of consent is maintained by the Company in compliance with the DPDP Act, 2023 and the IT Act, 2000.
Your consent covers the following processing activities:
You may withdraw this consent at any time as described in this Policy, subject to the limitations set out therein.
DRX is a platform facilitating access to real estate investment opportunities. We are not a registered broker-dealer or investment advisor. We do not provide personalised investment advice, endorsements, analyses, or recommendations regarding specific investments or securities. Investment decisions are ultimately your responsibility. We encourage you to conduct thorough due diligence, not rely solely on the information presented on this platform, and consider seeking professional advice from a financial advisor, attorney, or other qualified professional to understand and assess the risks associated with any investment opportunity. Alt DRX does not guarantee any specific investment performance, outcome, liquidity or return of capital for any investment opportunity listed on this platform.
CIN: U70200KA2022PTC166655. Website: www.AltDRX.com Email ID: Compliance@Altdrx.com
Registered Office: 778, Chinnaswamy Chambers, 3rd floor, 12th cross, Double Road, Indiranagar (Bangalore), Bangalore North, Karnataka, India-560038
© 2026, Alt DRX Private Limited. All Rights Reserved.
FEEDBACK
Still having second thoughts?
Request a call from our team.
Disclaimer - *Alt DRX is a platform facilitating access to real estate investment opportunities. We are not a registered broker-dealer or investment advisor. We do not provide personalized investment advice, endorsements, analyses, or recommendations regarding specific investments or securities. Investment decisions are ultimately your responsibility. We encourage you to conduct thorough due diligence, not rely solely on the information presented on this platform, and consider seeking professional advice from a financial advisor, attorney, or other qualified professional to understand and assess the risks associated with any investment opportunity. Alt DRX does not guarantee any specific investment performance, outcome, liquidity or return of capital for any investment opportunity listed on this platform.