Privacy Policy

This Privacy Policy describes how Lank Hospitality Private Limited (operating as “Housy”, “we”, “us”) collects, uses, discloses, retains, and safeguards your personal data when you use the Housy mobile application, our website at housy.co.in, and related services (the “Platform”). It should be read together with our Terms of Service. By using the Platform, you acknowledge the practices described here.

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Lank Hospitality Private Limited is the “Data Fiduciary” responsible for your personal data. Our registered office is at Satara Road, Pune, Maharashtra 411037, India. You can reach our Grievance Officer using the details in Section 17.

Information you provide

• Identity & contact details — name, phone number, email address, and profile photo (optional).
• Service address(es) and location details needed to deliver a Service.
• Booking details — services selected, schedule, instructions, and preferences.
• Payment-related information — processed securely by our payment partners; we do not store full card numbers.
• Communications — messages, ratings, reviews, photos you upload, and support requests.

Information collected automatically

• Device & technical data — device type, operating system, app version, and unique identifiers.
• Usage data — pages and features used, interactions, and diagnostic logs.
• Approximate or precise location data — only where you grant permission (see Section 7).
• Cookies and similar technologies on the website (see Section 8).

We process your personal data on the basis of your consent and for the purposes of performing the services you request, complying with legal obligations, and our legitimate interests in operating a safe and reliable Platform. Where consent is the basis (for example, location or marketing), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal — though withdrawing certain consents may limit your ability to use parts of the Service.

We share your data only as necessary, and never sell it. Recipients may include:

• Partners (Data Processors): Your name, service address, contact number, and booking details are shared with the assigned Partner solely to deliver the Service.
• Payment processors: Transaction details to process payments and refunds securely.
• Service providers: Cloud hosting, communications, mapping/location, and analytics providers acting on our instructions under confidentiality and data-protection obligations.
• Legal & safety: Authorities, regulators, or courts where required by law, or to protect the rights, safety, and property of users, Partners, or Housy.
• Corporate transactions: A successor entity in connection with a merger, acquisition, or asset sale, subject to this policy.

With your permission, we collect location data to show serviceable areas, enable accurate dispatch, and provide live ETA and tracking during an active booking. You can disable location permissions through your device settings at any time; doing so may affect tracking and serviceability features.

On our website we use cookies and similar technologies for essential functionality, to remember preferences, and to understand usage through privacy-respecting analytics. You can control cookies through your browser settings; disabling some cookies may affect certain features.

We retain personal data only for as long as necessary to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer required, we securely delete or anonymise it. Certain transaction records may be retained for the period mandated by Indian law.

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, row-level security, and regular reviews. However, no method of transmission or storage is completely secure; while we strive to protect your data, we cannot guarantee absolute security. Please keep your account credentials and OTPs confidential.

Subject to applicable law, including the DPDP Act, you have the right to:

• Access and obtain a summary of the personal data we process about you.
• Correct or update inaccurate or incomplete data.
• Request erasure of your personal data, subject to legal-retention requirements.
• Withdraw consent for processing based on consent.
• Opt out of marketing communications at any time.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Grieve and seek redressal through our Grievance Officer.

To exercise any of these rights, contact us at privacy@housy.co.in or use the account-deletion page. We may need to verify your identity before acting on a request.

You have the right to request deletion of your personal data held by Housy. This section explains how to make such a request, what data will be deleted, and what happens during the process.

How to Request Data Deletion

You can request deletion of your personal data through any of these methods:

• Email us at privacy@housy.co.in with “Data Deletion Request” in the subject line, providing your registered phone number for identity verification.
• Use the account-deletion feature available on our website at /delete-account, which guides you through the deletion process.
• Contact our Grievance Officer using the contact details in Section 17.

Processing Timeline

We aim to process all deletion requests within 30 days of receiving a complete and verifiable request. We will send you a confirmation email once your data has been deleted. If your request is complex or requires additional verification, we may extend this timeline by up to 30 additional days and will notify you of the reason for the delay.

What Gets Deleted

Upon approval and processing of your deletion request, we will delete:

• Profile information — name, email, contact details, profile photos.
• Address data — all saved service addresses and location history.
• Booking history — all past and scheduled bookings and associated details.
• Payment records — transaction records and payment method information (except where retention is legally required).
• Location data — real-time and historical location data collected during service delivery.
• Communications — messages, ratings, reviews, support tickets, and uploaded photos.
• All other personal data we hold associated with your account.

What May Be Retained

Some data may be retained after deletion in the following circumstances:

• Financial records — Transaction and billing records required for tax, accounting, or compliance purposes under Indian law (typically 7 years).
• Legal holds — Data retained to comply with court orders, legal proceedings, or regulatory requirements.
• Dispute resolution — Data retained for the duration of active disputes, refund claims, or investigations.
• Anonymised data — Data that has been irreversibly anonymised and aggregated for statistical or research purposes.

The Platform is intended for individuals aged 18 and above. We do not knowingly collect personal data of children. If we learn that we have collected such data without verifiable parental consent, we will delete it promptly. If you believe a child has provided us data, please contact our Grievance Officer.

Your data is primarily stored and processed in India. Some service providers may process data on servers located outside India. Where this occurs, we take reasonable steps to ensure your data is protected consistent with this policy and applicable law, and we do not transfer data to any territory restricted by the Government of India.

The Platform may contain links to third-party websites or integrate third-party services. This policy does not cover their practices, and we are not responsible for their content or privacy practices. Please review their policies before sharing data with them.

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or by email and take effect on the stated date. Your continued use after the effective date constitutes acceptance of the updated policy.

For any questions, requests, or complaints regarding your personal data or this policy, please contact our Grievance Officer. We will acknowledge complaints within 48 hours and endeavour to resolve them within the timelines prescribed by applicable law.