Privacy Policy
Last updated: 01 February 2026
1. Who we are
ZILOXIS PRIVATE LIMITED (CIN: U19201UW2026PTC256559) is the data fiduciary for personal information collected on ziloxis.com. Registered office: Galaxy Diamond Plaza, Crossing Republik, Ghaziabad, UP — 201016. Reach us at contact@ziloxis.com.
2. What we collect
- Name, phone, email, city — via lead / enquiry / callback forms.
- Property preferences and budget — where you volunteer them.
- KYC (PAN, Aadhaar) — only for onboarded channel partners.
- Payment metadata via Razorpay — we never store raw card / UPI data.
- Device + browser info + IP for analytics (Meta Pixel, GA4).
3. How we use it
- Respond to your enquiry and coordinate site visits / calls.
- Match property, financing, HR, IT, CBG and partner offers.
- Improve our services via aggregated analytics.
- Meet statutory obligations (RERA, GST, income-tax, TDS).
4. Who we share with
Only with (a) our verified partners / lenders / vendors on a need-to-know basis, (b) statutory authorities on lawful request, and (c) infrastructure providers (Emergent, MongoDB, Twilio, Resend, Razorpay, MSG91, Google, Meta) under confidentiality. We never sell your data.
5. Your DPDPA rights
You can access, correct, erase or withdraw consent for any of your data by writing to contact@ziloxis.com. We action verified requests within 30 days.
6. Cookies & tracking
We use first-party session cookies for authentication. Meta advertising cookies and server-side conversion sharing require your advertising consent. If allowed, Meta may receive enquiry event identifiers, browser and IP information, advertising cookie identifiers, and normalized, SHA-256-hashed contact details. Hashing does not make this information anonymous. Form messages, passwords, KYC documents and payment details are not included in these events. You can withdraw advertising consent using “Ad preferences” in the footer; enquiries still work if you reject. Browser Global Privacy Control and Do Not Track signals are respected for Meta tracking. Existing Google analytics settings are separate.
7. Retention
Lead records: 36 months from last interaction. KYC records: as per RBI / MoU-defined statutory windows. You may request earlier deletion any time.
8. Changes
Policy changes are posted here with an updated "Last updated" date. Material changes are also notified by email to registered users.