Privacy Policy

Who we are

FlippingKeys is a brand of Skyros Estates Private Limited (“FlippingKeys”, “we”, “us”), based in Bengaluru. We help investors find early-stage residential projects and support them from booking to resale.

For the personal data you share with FlippingKeys, Skyros Estates Private Limited is the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”). That means we decide why and how your data is used, and we are responsible for it.

Registered address: WeWork Prestige Atlanta, 80 Feet Road, Koramangala 1A Block, Koramangala, Bengaluru South, Karnataka 560034, India

What this policy covers

This policy covers personal data collected through the FlippingKeys pages, the eligibility form and calculators, and the calls, WhatsApp messages and emails that follow. For the rest of the Skyros Estates website, the Skyros Estates Privacy Policy applies.

Information we collect

What you give us

• Contact details: your name, mobile number (and country code), email address and city.
• Eligibility details: your employment type, monthly income, existing loan EMIs and preferred investment budget.
• Calculator figures: if you move from a calculator to the form, the figures you chose (such as down payment, interest rate and holding period) are filled in for you.
• Phone verification: the one-time code we send by WhatsApp to confirm your number. We use it only to check the number is yours.
• Messages and notes: anything you write to us and notes from our calls, including the projects you are interested in.

Please do not send identity documents, bank statements or salary slips through website forms. If a bank or developer needs documents, your specialist will tell you what is needed and how to share it safely.

What we collect automatically

• Device and usage data, such as IP address, browser type, pages visited and the link or ad that brought you here.
• Cookies and similar technologies, explained below.

How we use your information

We use your personal data to:

• review your eligibility and call you back;
• suggest projects that fit your budget, income and plans;
• share project details, pricing and payment plans, and arrange site visits;
• introduce you to banks for a home loan, if you ask us to;
• support your booking, follow-ups and, later, the resale of your unit;
• tell you about new early-investment windows you may be interested in (you can opt out any time);
• understand how FlippingKeys is used and fix problems; and
• meet legal duties, prevent fraud and handle disputes.

We do not sell your personal data.

Your consent

We process your personal data on the basis of your consent, which you give when you submit the eligibility form or ask us to contact you. Your consent is limited to the purposes described in this policy. We may also process data where the DPDP Act allows it as a “legitimate use”, or where the law requires it.

You can withdraw your consent at any time by writing to sales@skyrosestates.com or telling your specialist. We will then stop using your data for those purposes and ask anyone we shared it with to stop too, unless the law requires us to keep it.

Calls, WhatsApp, SMS and email

When you submit the form, you agree that FlippingKeys and Skyros Estates may contact you about your enquiry and related opportunities by phone, WhatsApp, SMS and email, even if your number is on the National Do Not Call (DND) registry. To stop marketing messages, reply STOP on WhatsApp or SMS, use the unsubscribe link in our emails, or ask your specialist. We may still contact you about an active booking or resale.

Who we share it with

We share only what is needed for the purpose, with:

• Developers of the projects you are interested in, so they can register you, confirm pricing and availability, and process your booking.
• Banks and housing finance companies you choose to apply to, to check eligibility and process your loan.
• Channel partners and prospective buyers when you ask us to resell your unit, limited to what is needed for the sale.
• Skyros Estates’ team, as FlippingKeys is part of the same company.
• Service providers who work for us under contract, such as website hosting, our CRM, WhatsApp, SMS and email tools, and analytics. They may use the data only on our instructions.
• Authorities where the law requires it, or to protect our rights or someone’s safety.

Developers and banks decide for themselves how they use the data once they have it, and their own privacy policies apply.

Cookies and analytics

We use cookies to keep the site working, to measure visits and to understand which ads or links brought you here. Analytics and advertising providers (for example Google or Meta) may set their own cookies under their own policies. You can block or delete cookies in your browser settings; the site will still work.

How long we keep it

We keep your data while your enquiry, booking or resale is active and for a reasonable time after, so we can help with follow-ups, handle disputes and meet tax, accounting and legal record-keeping rules. If you have not been in touch for a long time, or you withdraw consent, we delete or anonymise your data unless the law requires us to keep it, giving advance notice where the DPDP Rules, 2025 require it.

How we protect it

We use reasonable security measures, including encrypted connections (HTTPS), access only for staff who need it, and service providers with their own security controls. No system is completely secure. If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, as the DPDP Act requires.

Your rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and who we have shared it with;
• Correct and update data that is wrong or out of date;
• Erase your data once it is no longer needed, unless the law requires us to keep it;
• Withdraw consent at any time;
• Grievance redressal through our Grievance Officer; and
• Nominate someone to use these rights for you if you die or cannot act yourself.

To use any of these rights, email sales@skyrosestates.com from the email or mention the phone number you used with us, so we can confirm it’s you.

Children

FlippingKeys is meant for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.

Data stored outside India

Some of our service providers store data on servers outside India. Where that happens, we transfer data only as allowed under the DPDP Act and any restrictions the Government of India notifies. If you are an NRI, your data is still handled under this policy and Indian law.

Grievance Officer

If you have a question or complaint about how we handle your personal data, contact our Grievance Officer:

We will acknowledge your complaint and aim to resolve it as quickly as we can, and in any case within the time allowed under the DPDP Rules, 2025 (currently no more than 90 days). If you are not satisfied, you may complain to the Data Protection Board of India once you have used our grievance process.

Changes to this policy

We may update this policy when the law or our services change. The “Effective from” date at the top will change when we do. If a change affects how we use data you have already shared, we will tell you and, where needed, ask for your consent again. See also our Terms & Conditions and Risk Disclosure.