Legal

Privacy policy

Last updated: 6 November 2026

This policy explains what personal data Nestoo Worksphere collects through nestooworksphere.co.in and when you contact us about an office in Bengaluru. It covers why we collect it, who sees it, how long we keep it, and your rights under India’s data protection law.

The short version

We collect what you choose to give us: your office requirements, your name and mobile number, and your email and company if you add them. We also note how you found our website.
We use it to reply to you and prepare your quote. We never sell it, and we share your requirements with building owners only with your agreement.
Our forms open WhatsApp or your email app with your answers filled in, and nothing is sent until you press send.
Your quote answers are saved in your browser so you can come back to them. They expire after 30 days, and your contact details are cleared when you close the tab.
We don’t send newsletters or marketing messages.
You can ask us to show, correct or delete your data, or withdraw your consent, at any time. From May 2027, if we don’t resolve a complaint, you can also take it to the Data Protection Board of India. See how to make a request.

1. Who we are

Nestoo Worksphere (“Nestoo”, “we”, “us”) builds offices for companies in Bengaluru and runs them. We run this website, nestooworksphere.co.in.

Registered office (legal address, not a walk-in office): 269, 8th Main Cross Rd, 3rd Stage 4th Block, West of Chord Road 1st Stage, Basaveshwar Nagar, Bengaluru, Karnataka 560079.

Under India’s Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the Data Fiduciary for the personal data this policy describes. That means we decide why and how it’s used. You are the Data Principal, the person the data is about.

This policy covers personal data we collect through this website and when you contact us about our offices. The DPDP Act and the Digital Personal Data Protection Rules, 2025 (the DPDP Rules) come into force in stages. Most of their duties start in May 2027. Until then, the personal information rules made in 2011 under the Information Technology Act, 2000 apply. We wrote this policy to meet both sets of law, and everything it promises applies now.

If you become a client, your written agreement with us may add terms about how we handle data for your office.

2. What personal data we collect

We collect what you choose to give us, a note of how you found our website, and the technical details any website receives. Of your own details, only your name and mobile number are required, plus your email address if you ask us to reply by email.

Most of what our forms ask is about your company’s office, not about you. Because it arrives with your name and number, we treat all of it as personal data.

The Get a Quote form

Your office: the kind of office you need, how many people will use it and, if you say, how many in 12–24 months.
Where and when: the areas you prefer, any landmark you name, when you’d like to move in, and any extras you ask for.
How to reach you: your name and mobile number and, if you add them, your email, company, preferred channel and best time to call.
From the space planner, if you carry its result into the form: the floor area range, the numbers of desks, cabins, meeting rooms and phone booths, and any extra rooms you chose.
A reference number such as NW-2610-K7QD. Your browser creates it when you start, so we can match later messages to your request.

The space planner works in your browser. What you enter in it reaches us only if you carry its result into a quote request.

The callback form

It asks for your name, mobile number and what the call is about, and the best time to call if you choose one. If the call is about an office and your browser holds quote answers you haven’t sent, the form adds them and tells you so. Its button then opens WhatsApp with these details filled in, and nothing is sent until you press send.

Building owners, vendors and job seekers use the same form. We use their details only to reply about the topic they chose.

Extra details after you send a quote request

On the thank-you page you can add more detail. Every field is optional:

what’s prompting the move
how many cars and two-wheelers your team needs to park, and whether visitors need to park
how many cabins and meeting rooms you need
the kind of building you prefer
your approximate monthly budget
whether head office or clients set IT, security or audit requirements
who’s deciding
where most of your team lives
anything else you want to tell us

We link these to your request by its reference number and your mobile number. For where your team lives, please name areas, not people’s addresses.

WhatsApp, calls and email

If you message, call or email us, we receive your number or email address and whatever you tell us. That includes any files you send, such as a floor plan. WhatsApp also shows us the profile name you’ve set.

Where we offer to send your answers on WhatsApp or by email, the button opens your own app with them filled in. You can edit the message, and nothing is sent until you press send.

We may add what you tell us to our records of your request, so we can follow up.

How you found us

When you arrive, your browser saves a small record of how you found us (see what this website keeps in your browser). It can hold:

campaign tags in the link you followed (utm_source, utm_medium, utm_campaign, utm_term and utm_content);
ad click identifiers that Google, Meta or Microsoft ads add to links (gclid, fbclid and msclkid);
the address of the website that sent you here, if any; and
the first page you visited on our site, and when.

This record stays in your browser and reaches us only with a form you send. The form also tells us the page you sent it from, the time on your device and which Get a Quote button you pressed.

We use this to see which pages, searches and ads bring requests. We don’t use it to follow you around other websites.

Technical data

When you visit, our hosting provider, Cloudflare, processes the technical details needed to deliver the website and keep it secure. These include your IP address, browser and device type, and the pages you request and when. They may be kept in server and security logs.

Usage analytics

We don’t use Google Analytics or any other analytics service at the moment. If we turn one on, this section will say so.

What we don’t collect

There are no accounts or passwords on this website, and we don’t take payments through it. We don’t need bank or card details, government ID numbers or health information, so please don’t send them to us. Share another person’s details only with their permission.

3. Browser storage and cookies

This website keeps a few small records in your browser’s own storage, rather than in cookies. They save your quote answers as you go and note how you found us. Nothing in them reaches us until you send a form.

What this website keeps in your browser

What this website keeps in your browser
Record	What it holds	How long it stays	When it reaches us
Your quote answers (`nestoo_quote_draft`, local storage)	Your answers to the first two steps of the Get a Quote form, any planner result and your reference number	30 days, then they expire and are deleted the next time you visit. Sooner if you send the form, or choose “Clear my answers” or “Start again”	When you send the quote form, or with a callback request, which tells you so
Your contact details (`nestoo_quote_contact`, session storage)	The name, number, email, company, preferred channel and best time you type in the form’s last step	Until you close the tab, send the form or clear your answers	When you send the quote form
What you sent (`nestoo_last_brief`, session storage)	A copy of the request you just sent, so the thank-you page can show it to you	Until you close the tab	Only if you add more detail on the thank-you page, and then only your reference, name and number go with it
Planner result (`nestoo_plan`, session storage)	Your team size and plan summary, when you choose Get a Quote from the planner	Until you close the tab	Only in a quote request you send
Which button you pressed (`nestoo_entry`, session storage)	Which Get a Quote button brought you to the form, for example “home-hero”	Until you close the tab	With a form you send
How you found us (`nestoo_attribution`, local storage)	Campaign tags, ad click identifiers, the website that sent you, and your first page and visit time	Until you clear this website’s data in your browser	With a form you send

WhatsApp and email buttons that fill in your answers read these records too. What they fill in reaches us only if you press send. “Copy my answers” and “Print or save as PDF” work only on your device, and nothing is sent to us.

To remove all of these records, clear this website’s data in your browser settings. “Clear my answers” removes your saved answers and contact details.

Cookies

We don’t use analytics or advertising cookies. Cloudflare, our hosting provider, may set a strictly necessary security cookie, for example to tell people apart from automated bots.

We don’t add advertising tags, chat widgets, maps, embedded videos or social media buttons to this website.

4. How and why we use your personal data

We use your personal data to answer your request, prepare your quote and follow up. We don’t use it for anything unrelated without telling you first.

We use it to:

reply to you by WhatsApp, phone or email, as you prefer;
understand your requirements, look for buildings in the areas you want, and prepare your quote and proposal;
discuss a building with its owner or their representatives, only with your agreement (see section 5);
keep a record of your request and how it’s progressing;
follow up and, if you go ahead, prepare your agreement and work with you on your office;
reply to building owners, vendors and job seekers about the topic they chose;
see which pages, searches and ads bring requests, so we can improve the website;
keep the website and forms secure, and filter out spam and misuse; and
meet our legal duties, and establish, exercise or defend legal claims.

We don’t send newsletters or marketing messages, and we won’t add you to a mailing list.

When you send one of our forms, you consent to our using your details as the notice beside its button and this policy describe. When you message, call or email us, we use what you tell us only for the reason you gave it. The DPDP Act allows this. We also use personal data where a law or a court order requires it, or to enforce or defend a legal claim. If we want to use your data for a new purpose, we’ll tell you first and, where the law requires, ask for your consent.

We don’t sell or rent your personal data. We share it only with the organisations and people below, and only as far as each needs for the purposes in this policy.

Cloudflare hosts this website and processes the technical data described in section 2.
WhatsApp (Meta), when you message us on WhatsApp or ask us to reply there. WhatsApp’s own terms and privacy policy apply to those messages.
Email services: when you email us or we email you, the email services we each use carry and store the messages.
Building owners and their representatives, only with your agreement. We share only what’s needed, such as your company name and requirements when discussing a building for you.
Professional advisers and authorities: our accountants, lawyers or other advisers where needed, and courts, regulators or government authorities where the law requires it.

Our service providers process personal data for us, only for the purposes in this policy.

6. Processing outside India

We are based in India, but Google, Cloudflare and WhatsApp may store or process data on servers in other countries. The DPDP Act allows this, except to countries the Government of India restricts by notification. Any transfer we make follows the Act and the DPDP Rules.

7. How long we keep it

We keep personal data only for as long as we need it for the purposes in this policy. Then we delete it.

Requests that don’t go ahead: while we discuss your requirements and follow up, then for a reasonable period in case you come back to us. After that we delete them, including related messages and emails.
Callbacks about other topics: as long as we need to reply about that topic and follow up. Then we delete them in the same way.
Clients: for as long as we work together, then for as long as legal, tax and accounting rules require.
Records in your browser: as the table in section 3 shows. Saved answers expire after 30 days, and contact details are cleared when you close the tab. The record of how you found us stays until you clear it.
Technical logs: for the periods set in our providers’ services.

If you withdraw consent, or we no longer need your data, we delete it, unless a law requires us to keep it. We also have our service providers delete it. When a law sets a minimum time for a record, we keep only that record, and only for that time.

8. Your rights

You can ask what personal data we hold about you, have it corrected or deleted, and withdraw your consent. You can also raise a grievance and name someone to act for you. These become your rights under the DPDP Act in May 2027, and you can use them with us now.

Access: ask for a summary of the personal data we hold about you and how we use it. We’ll also tell you who we’ve shared it with, and what.
Correction: ask us to correct, complete or update your data.
Erasure: ask us to delete your data, unless we need it for your request or the law requires us to keep it.
Withdraw consent: at any time, as easily as you gave it. We then stop using your data, and make our service providers stop, within a reasonable time, unless the law requires or allows us to continue. Withdrawing doesn’t affect what we did before, but we may no longer be able to help with your request.
Grievance redressal: complain to us about how we’ve handled your data, and get an answer.
Nominate: name someone to use these rights for you if you die or become unable to act for yourself.

The DPDP Act also asks you to give accurate information, not to impersonate anyone, and not to make false or frivolous complaints.

Read the DPDP Act, 2023 (PDF) and the DPDP Rules, 2025 (PDF) on the Ministry of Electronics and Information Technology’s website.

This policy is in English. If you’d like it in another language listed in the Eighth Schedule to the Constitution of India, such as Kannada or Hindi, ask us.

9. Making a request or complaint

To use your rights, withdraw consent or raise a grievance, email our Grievance Officer at vijaynestooworksphere@gmail.com with “Privacy request” in the subject line.

Tell us what you’d like us to do. To help us find your details, give the mobile number you used and your reference number, which starts NW-, if you have one. We may ask you to confirm it’s you, for example by replying from that number or email address.

We answer requests and grievances as soon as we can, and no later than one month after we receive them.

Grievance Officer

Role: Grievance Officer, Nestoo Worksphere
Email: vijaynestooworksphere@gmail.com

Our Grievance Officer also answers any question about how we handle personal data.

From May 2027, if you’re not satisfied with our answer, you can complain to the Data Protection Board of India. The DPDP Act asks you to raise your grievance with us first.

10. How we protect it

We protect your personal data with reasonable security safeguards, including these:

this website uses HTTPS, so what you send through our forms is encrypted on its way to us;
your contact details stay in your browser only until you close the tab, so they don’t linger on a shared computer;
only our own accounts, and people we authorise, can open the messages and emails you send us.

No website or online service can be completely secure. If a breach affects your personal data, we’ll tell you. We’ll also report it as the law requires, which from May 2027 includes telling the Data Protection Board of India.

11. Children

This website and our services are meant for businesses. They aren’t directed at anyone under 18, and we don’t knowingly collect their personal data. If you think a child has sent us their details, tell us and we’ll delete them.

12. Other websites

This website links to other services, such as WhatsApp, and to the sources quoted in our guides. We don’t control how they handle personal data, so please read their privacy policies.

13. Changes to this policy

We’ll update this policy whenever the way we handle personal data changes, for example if we add a service provider. The date at the top shows the latest version. If a change affects data you’ve already given us, we’ll take reasonable steps to tell you. Where the law requires, we’ll ask for your consent again.

14. Contact us

For questions about this policy or your personal data, email our Grievance Officer at vijaynestooworksphere@gmail.com.