Privacy Policy

1. Who this policy covers

This Privacy Policy explains how PK Mens PG, operated under Annai General Store ("we", "us", "our"), collects, uses, stores, and protects personal information belonging to website visitors, enquirers, and tenants and prospective tenants of our PG/hostel properties in Chennai.

2. Information we collect

Identity and contact

• Full name
• Phone number
• Photograph
• Email address
• Current and permanent address
• Father's name, occupation and permanent address, as provided in your tenancy agreement
• Emergency contact name and phone number. These are a third party's details that you provide

Identity/KYC data

• Last 4 digits of your Aadhaar number - this is the only part of the Aadhaar number we retain
• Name, date of birth, gender, and address as printed on the Aadhaar document, collected as part of identity verification
• Where identity verification is completed via DigiLocker (once enabled), the same data fields fetched with your consent

Tenancy information

• Property, room, and bed assigned; joining date; rent amount; agreement details; guardian/emergency contact details where provided
• Your signed tenancy agreement, including your digital signature and the date and time it was captured
• A record of any breach of your tenancy agreement or house rules

Payment information

• Declared payment details: amount, date, mode (UPI/bank transfer/card), and a reference number
• Once online payment collection is enabled: transaction reference data returned by our payment gateway (transaction ID, order ID, bank/UPI reference). We do not receive or store your UPI ID/VPA, card number, UPI PIN, or bank login - these are entered directly on the payment gateway's own page.

Communications

• Messages exchanged with us over WhatsApp, phone, email, or the enquiry form on this website

Website usage data

• Basic technical information (such as browser type) that may be logged by our hosting provider for security purposes

3. Sensitive data - Aadhaar

Aadhaar information is handled as a distinct, higher-sensitivity category, separate from ordinary contact data. Only the last 4 digits of your Aadhaar number are retained in our records. The full number is used solely at the point of identity verification and is not stored beyond that. Access to this information is restricted to authorised staff.

4. Why we collect it

• To respond to enquiries and process bookings/reservations
• To verify tenant identity as required for hostel/PG occupancy
• To create and manage a tenancy - rent billing, deposit tracking, agreements, and ledger records
• To communicate with tenants about dues, notices, receipts, and property matters, including over WhatsApp
• To process payments once online payment collection is enabled
• To meet accounting, tax, and other legal/regulatory record-keeping requirements
• Maintaining a record of breaches of the tenancy agreement (for example, early exit during the lock-in period or violation of house rules), which may be referenced in future dealings between you and us

5. Consent

Submitting the enquiry form, completing KYC, or signing the tenancy agreement constitutes consent to the collection and use of your personal data for the purposes stated in this policy. Consent for Aadhaar/KYC data is taken separately, at the point of KYC.

You may withdraw consent at any time by writing to us. Withdrawal may mean we can no longer provide accommodation to you, since a valid tenancy requires KYC and payment records to remain in place.

6. How we collect information

• Directly from you - the enquiry form, WhatsApp, phone, email, or in person at onboarding
• Via documents you upload for identity verification
• Once enabled, via DigiLocker, with your consent
• Once enabled, via transaction data returned by our payment gateway

7. How we store and protect information

Tenant and payment records are stored on Supabase (secured, access-controlled database and authentication infrastructure). Access is scoped by staff role - Manager and Staff accounts can only view records for the specific properties they are assigned to; Owner and Admin have unrestricted access. We take reasonable technical and organisational measures to protect information against unauthorised access, loss, or misuse.

8. Data retention

We retain tenancy and ledger records, including KYC information, for as long as needed for tenancy administration and for accounting/legal record-keeping purposes, even after a tenancy ends. Breach records are retained together with tenancy records.

9. Sharing of information

We do not sell personal information. We share limited information only with:

• Payment gateway (once online payment collection is enabled) - solely to process a payment you initiate. No access to card numbers, UPI PIN, or bank login credentials.
• e-KYC/DigiLocker provider (once enabled) - solely to verify identity documents you provide.
• WhatsApp Business Platform / Meta - used to deliver rent reminders, receipts, and property announcements. Message and call content is not shared with Meta, but your phone number and messaging metadata are processed by Meta to deliver the message and may be used by Meta for its own products.
• Our hosting/database provider (Supabase) - processes data on our behalf; does not use it for its own purposes.
• Government or regulatory authorities - where required by law.

10. Your rights

You have the right to access, correct, update, or request erasure of your personal information, subject to our legal record-keeping obligations (for example, we cannot delete financial ledger records required to be retained for accounting purposes). You also have the right to nominate another person to exercise these rights on your behalf in the event of your death or incapacity, and the right to raise a grievance as set out below.

11. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, we have appointed a Grievance Officer to address requests and complaints relating to your personal data:

12. Cookies

This website does not use advertising or tracking cookies. Any cookies set are limited to what's strictly necessary for the site to function.

13. Children's information

Our accommodation and services are for men 18 years and above. We do not knowingly collect personal information from minors.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page reflects the latest revision.

15. Contact us

For any privacy-related question, request, or complaint, contact us at tech@pkaccommodation.in, or reach our Grievance Officer using the details in Section 11.