1. Who we are
ICR — Institute for Corporate Real Estate ("ICR", "we", "us") operates the ICR marketplace, a B2B platform connecting corporate buyers with facility-management vendors across India. This policy describes how we handle personal data when you visit our websites, create an account, or transact on the platform.
For the purposes of applicable data-protection law, including the Digital Personal Data Protection Act, 2023 (India), ICR is the data fiduciary for the personal data described in this policy.
2. Data we collect
- Account data: name, work email, phone number, role, and password (stored as a salted hash).
- Business profile data: company details, GST/PAN numbers, addresses, certifications and verification documents you submit.
- Transactional data: requirements (RFQs), quotes, awards, ratings, reviews and messages exchanged on the platform.
- Usage data: pages visited, referrer, UTM parameters, and interaction events, collected first-party with an anonymous visitor identifier.
- Communications data: emails you opt in to (for example the newsletter, with your consent text recorded) and support correspondence.
3. How we use data
- To operate the marketplace: matching requirements to vendors, delivering quotes, and facilitating awards and reviews.
- To verify vendors: reviewing submitted documents and assigning verification levels.
- To secure the platform: authentication, fraud prevention, rate limiting and audit logging.
- To improve the product: aggregate, de-identified analytics of how the platform is used.
- To communicate: service notifications, and marketing emails only with your consent (double opt-in, unsubscribe anytime).
4. What we do not do
- We do not sell personal data.
- We do not share buyer contact details with vendors until you choose to engage (for example by publishing a requirement or requesting a quote).
- We do not use third-party advertising trackers on the marketplace.
5. Sharing and disclosure
We share data with service providers who process it on our behalf (hosting, email delivery, payment processing), under contracts that restrict their use of the data. We may disclose data where required by law, regulation or valid legal process, or to protect the rights, safety and integrity of the platform and its users.
Business profile information that you choose to list (company name, categories, service areas, ratings, verification level) is public marketplace content by design.
6. Data retention
We retain account and transactional data for as long as your account is active and as needed to meet legal, tax and audit obligations. Content records (requirements, quotes, reviews) use soft deletion so that transaction history relied on by counterparties remains consistent. You may request deletion of your account and associated personal data, subject to retention required by law.
7. Your rights
- Access and correction: view and update your profile data from your account, or ask us for a copy of your personal data.
- Erasure: request deletion of your personal data, subject to legal retention requirements.
- Consent withdrawal: unsubscribe from marketing at any time via the link in every email.
- Grievance redressal: contact our grievance officer at hello@icr.network; we respond within the timelines prescribed by applicable law.
8. Security
We protect data with encryption in transit, hashed credentials, role-based access control, and short-lived, rotating authentication tokens. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and the relevant authorities as required by law.
9. Cookies
We use strictly necessary cookies for sign-in and session management, and a first-party analytics identifier to understand product usage. We do not use third-party advertising cookies. You can manage preferences through the cookie banner and your browser settings.
10. Changes to this policy
We may update this policy as the product and the law evolve. Material changes will be announced on the platform and, where appropriate, by email. The "Last updated" date at the top reflects the current version.