Legal
Privacy Policy
Effective date: 1 September 2026
CARAT respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, contact us, or enquire about our services.
CARAT is operated by Firststep Business Services Private Limited. In this policy, “CARAT,” “we,” “us,” and “our” refer to Firststep Business Services Private Limited.
Our website is www.caratfarms.in.
1. Information we collect
Depending on how you interact with us, we may collect:
- Contact information: Your name, telephone number, email address, and preferred communication method.
- Buyer requirements: Preferred locations, acreage, budget range, intended use, purchase timeframe, and other preferences you choose to share.
- Landowner information: Property location, survey references, acreage, expected price, ownership details, photographs, and documents you provide for evaluating a potential sale.
- Communications: Messages, emails, enquiry details, and notes from conversations or site visits.
- Engagement records: Where you engage our services, relevant agreements, invoices, and transaction-related correspondence.
- Technical information: Information generated when you access the website, such as IP address, browser and device information, requested pages, timestamps, and security or error logs.
Our current website allows you to contact us by phone, WhatsApp, or email without creating an account.
Please do not send passwords, payment-card credentials, or unnecessary identity documents. If specific documents are needed, we will explain the purpose and how to provide them.
If you share information about another person, you must have appropriate authority to do so.
2. How we use information
We use relevant information to:
- Respond to enquiries and understand your requirements.
- Identify and discuss potentially suitable land opportunities.
- Assess information supplied by landowners.
- Arrange calls, meetings, and site visits.
- Coordinate requested work with landowners, buyers, lawyers, surveyors, and other professionals.
- Administer agreed services, payments, and business records.
- Maintain website reliability, investigate misuse, and protect our systems.
- Meet applicable legal obligations and address complaints or disputes.
We process information with your consent where required, or on another basis permitted by applicable law. Simply visiting our website does not constitute consent to unrelated marketing.
3. Communications and marketing
When you contact CARAT, we may respond using the contact details and communication channels you provide.
We will seek any consent required for promotional communications. You may ask us to stop promotional messages by replying to the message or emailing hello@caratfarms.in.
Stopping promotional messages does not prevent essential communications about an ongoing engagement or a legal obligation.
4. When we share information
We share personal information only where reasonably necessary for the purposes described in this policy, including with:
- Authorised team members and service providers supporting hosting, communications, document storage, and business administration.
- Prospective buyers or landowners when sharing is authorised and necessary to progress an enquiry.
- Lawyers, surveyors, and other professionals involved in work you have requested or authorised.
- Authorities or professional advisers where disclosure is required by law or reasonably necessary to address fraud, legal claims, or security incidents.
Landowner property details are shared with prospective buyers with the landowner's permission. Providing documents to CARAT does not authorise their unrestricted publication.
We do not sell personal information or provide contact lists to unrelated businesses for their own marketing.
5. Cookies, analytics, and website technologies
Our website is hosted on Vercel and includes Vercel Web Analytics to help us understand website usage and improve our content.
Analytics information may include pages visited, referring websites, visit timestamps, approximate location, and browser, operating system, and device type. Vercel provides aggregated website-usage statistics.
Vercel Web Analytics does not use third-party cookies. It uses a request-derived identifier to distinguish visitors, with visitor sessions automatically discarded after 24 hours. Aggregated analytics records may remain available for longer under Vercel's applicable service plan and data-handling policies; the 24-hour period is not a deletion period for all analytics information.
Hosting and security systems may separately process technical logs needed to deliver pages, prevent misuse, and diagnose errors.
You can manage cookies through your browser and use browser privacy controls or content-blocking tools to restrict analytics scripts. Blocking cookies alone may not prevent cookie-free analytics. You can also contact us with questions about these technologies.
If we introduce additional tracking technologies, we will update this policy and obtain consent where required.
Further information is available in Vercel's Web Analytics privacy documentation.
6. WhatsApp and other third-party services
When you contact us through WhatsApp or use an external link, the relevant provider may process information under its own privacy policy.
This policy covers CARAT's handling of information we receive. It does not govern the independent practices of WhatsApp, telecommunications providers, or other third-party websites.
Some technology providers may process information outside India. Where this occurs, we will comply with applicable transfer restrictions and use appropriate safeguards.
7. How long we retain information
We retain information for as long as reasonably necessary to handle your enquiry, provide agreed services, and fulfil the purposes described in this policy.
Retention depends on whether an enquiry remains active, whether a service engagement exists, and whether records are needed for accounting, legal obligations, complaints, or disputes.
We periodically review retained information and delete or anonymise information that is no longer needed. Where particular records must be retained, we limit their use to the relevant purpose.
8. Security
We use reasonable technical and organisational safeguards appropriate to the information we handle, including access restrictions and care in selecting service providers.
No website, communications channel, or storage system can be guaranteed completely secure. Where a personal-data incident requires notification under applicable law, we will provide the required notifications.
9. Your choices and requests
You may contact us to:
- Ask what personal information we hold about you and how it is used.
- Request correction or updating of inaccurate information.
- Request deletion of information that is no longer required.
- Withdraw consent where processing relies on consent.
- Stop promotional communications.
- Raise a privacy concern or exercise other rights available under applicable law.
We may need to verify your identity before acting. If we cannot fulfil a request in full, we will explain the reason, subject to applicable law.
Withdrawing consent does not affect prior lawful processing. It may prevent us from continuing a service that requires the relevant information.
10. Children
Our services are intended for adults aged 18 and above. We do not knowingly collect children's personal information through website enquiries.
If you believe a child has provided personal information, please contact us so we can review and appropriately address it.
11. Privacy questions and grievances
Please contact:
Company: Firststep Business Services Private Limited
Privacy / Grievance Contact: Pradeep Kumar, Founder & CEO
Email: hello@caratfarms.in
Telephone: +91 79934 53030
Use the subject line “Privacy Request” or “Privacy Grievance” and describe your concern without including unnecessary sensitive information.
We will review requests promptly and respond within the period required by applicable law. This process does not limit your right to approach a competent authority where available under applicable law.
12. Changes to this policy
We may update this policy to reflect changes in our services, practices, or legal obligations. The current version and effective date will appear on this page.
Where required, we will provide additional notice or obtain consent before using existing information for a materially different purpose.
