Privacy Policy
How NDR Smart Spaces Pvt. Ltd. collects, uses, shares and protects personal data shared with us through this website, and the rights you have over it.
Last updated 20 October 2026 · Applies to ndrsmart.com
Who we are and scope
This website, ndrsmart.com, is operated by NDR Smart Spaces Pvt. Ltd. ("NDR Smart Spaces", "we", "us"), a company with its corporate office at Bazulla Road, T. Nagar, Chennai, Tamil Nadu 600017, India. For the personal data described in this policy, we decide why and how the data is processed and are the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023.
This policy applies to visitors to this website and to anyone who contacts us through it. It does not apply to other websites we link to, including those of NDR InvIT and Ave Acres, which have their own policies. This policy is published in line with the Digital Personal Data Protection Act, 2023 (and the rules made under it), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Information we collect
We collect personal data in two ways: what you give us, and what is collected automatically when you use the site.
- Details you submit through the business enquiry form: your name, company, work email address, telephone number (optional), the message you write, and the confirmation that you agree to this policy. Please do not include sensitive information, such as financial account details, government identifiers or health information, in your message.
- Correspondence you send to the email addresses published on this site, including your email address and anything you choose to tell us.
- Technical data that your browser sends when it loads a page: your IP address, browser and device type, the pages requested and the date and time. This is held in server logs and is used to run, secure and troubleshoot the site.
- A bot-check token, if the human-verification step is shown on the form (see Cookies and similar technologies).
Why we use your data
We use personal data only for the purposes below, and for no other purpose without telling you or, where the law requires it, asking for your consent again.
- To read your enquiry, route it to the right business desk and reply to you. The basis is your consent, given when you tick the box on the form.
- To keep the website and our systems secure, to detect and prevent spam, abuse and fraud, and to find and fix faults.
- To keep records of our dealings and to meet our legal, regulatory, tax and audit obligations, and to establish, exercise or defend legal claims.
- To produce aggregate statistics about how the site is used, in a form that does not identify you.
What we do not do
We do not sell your personal data. We do not use it to make decisions that affect you by automated means, and we do not build advertising profiles. We do not send marketing messages to the details you give us in an enquiry unless you have separately agreed to receive them.
Sharing and disclosure
We share personal data only where needed for the purposes above, and only with:
- Our group and affiliated companies, and the NDR business desk that deals with your enquiry, where this is needed to answer you.
- Service providers that help us run the site and receive enquiries. These include our hosting provider, the form-handling service that delivers your enquiry to us by email, and the bot-check provider (Cloudflare Turnstile). They may process your data only on our instructions and under confidentiality and security obligations.
- Our professional advisers, such as auditors and lawyers, under a duty of confidentiality.
- Courts, regulators, law-enforcement or other government authorities, where we are required to by law or by a lawful order, or where this is needed to protect our rights, property or safety or those of others.
- A purchaser or successor, if all or part of our business is reorganised, merged or sold, subject to the same protections for your data.
Transfers outside India
Some of our service providers, including the form-handling and bot-check services, may store or process data on servers outside India. Where that happens, we transfer data only to the extent the Digital Personal Data Protection Act, 2023 and the rules made under it allow, and we expect the provider to protect it to a standard that is comparable to this policy.
Cookies and similar technologies
This website does not use advertising or cross-site tracking cookies, and we do not run third-party analytics or advertising trackers on it. Your browser may store limited technical data that the site or its providers need to work. In particular, if the human-verification step is shown, Cloudflare Turnstile may use a short-lived token and similar technology to tell people from automated programs. You can block or delete cookies in your browser settings; the site will still work, although the verification step may not.
If we later add analytics or any other non-essential cookies, we will update this policy and ask for your consent first where the law requires it.
How long we keep data
We keep personal data only for as long as it is needed for the purposes in this policy. As a guide, enquiry details are kept for as long as it takes to deal with your request and for a further reasonable period afterwards, so that we can follow up and keep proper records. Server logs are kept for the period needed for security and as required by law, including directions issued by the Indian Computer Emergency Response Team (CERT-In). We keep data for longer where a law or a legal claim requires it. When data is no longer needed, we delete it or make it anonymous.
How we protect your data
We use reasonable security safeguards to protect personal data against loss, misuse and unauthorised access, disclosure, alteration or destruction. These include encrypted (HTTPS) connections to the site, restricting access to the people who need it, spam and bot filtering on forms, and confidentiality obligations on staff and providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires. If you think your data has been put at risk, please write to compliance@ndrsmart.com straight away.
Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Ask for a summary of the personal data we hold about you, the processing we carry out, and the other parties we have shared it with.
- Ask us to correct inaccurate or misleading data, complete incomplete data, or update it.
- Ask us to erase your personal data, unless we need to keep it for a legal reason or the purpose it was collected for.
- Withdraw your consent at any time. This is as easy to do as giving it, and does not affect anything we did lawfully before you withdrew. If you withdraw consent, we will stop processing your data for that purpose, unless the law lets or requires us to keep it.
- Have your grievances dealt with, and nominate another person to exercise these rights for you if you die or become unable to do so.
How to use your rights, and grievance redressal
To exercise any of these rights, withdraw consent, or raise a concern about how your data is handled, write to the Grievance Officer, NDR Smart Spaces Pvt. Ltd., at compliance@ndrsmart.com, or by post to Bazulla Road, T. Nagar, Chennai, Tamil Nadu 600017, India. Please tell us what you want us to do and give enough detail for us to find your data and check who you are. We acknowledge requests promptly and aim to resolve them within one month, or sooner where the law sets a shorter period.
If you are not satisfied with our response, you may complain to the Data Protection Board of India, once the Board is operational and after you have first used our grievance process.
Children
This website is meant for businesses, investors and other adult visitors. It is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, please write to us and we will delete it.
Links to other websites
This site links to other websites, including NDR InvIT (ndrinvit.com) and Ave Acres (aveacres.com), and to map services such as Google Maps. When you follow one of those links, the other site's own privacy policy applies, and we are not responsible for it.
Changes to this policy
We may update this policy from time to time, for example when our practices or the law change. The date at the top of this page shows when it was last updated. If we make a significant change, we will make it clear on this site. Please check back from time to time.
Contact
NDR Smart Spaces Pvt. Ltd., Bazulla Road, T. Nagar, Chennai, Tamil Nadu 600017, India. Email: compliance@ndrsmart.com.