Privacy Policy

1. Who we are

Aashray Realty (“we”, “us”, “our”) is a real-estate advisory and brokerage firm based at CS-1-11, Gate No. 3, Shopping Complex, Orris Residential Complex, Sector 85, Gurgaon – 122004, Haryana, India. For the personal data described in this policy, Aashray Realty is the Data Fiduciary: we decide why and how your personal data is processed. You are the Data Principal.

This Privacy Policy is our notice to you. It explains what personal data we collect through this website and our services, why we collect it, how you can withdraw your consent, how to exercise your rights and how to reach our Grievance Officer. We handle personal data in line with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under them.

2. What we collect

Information you give us

• Enquiry and contact forms: your name, phone number, email address (optional), what you are looking to do (buy, rent, sell or rent out), preferred locality, property details you choose to share, and any message you write.
• Calls, WhatsApp and email: the details you share with us while discussing your requirement.
• During a transaction: where needed to complete a deal, identity and address proofs, property ownership documents, and information required for agreements, police verification of tenants, or society formalities.

Information collected automatically

• Basic technical data such as IP address, browser type, device, pages visited and time of visit, recorded in server logs and by our hosting and security provider (Cloudflare) to keep the website secure and working.
• Data needed to protect our forms from spam and bots (for example, your IP address is used to limit repeated submissions).
• Your cookie choices, stored in a cookie on your device (see section 6).

We collect only the personal data that is necessary for the purposes listed below. We do not knowingly collect personal data from anyone under 18 (see section 10).

3. Why we use it, and your consent

We process your personal data only for these specific purposes:

• to respond to your enquiry and understand your requirement;
• to suggest suitable properties, buyers or tenants, arrange site visits and share price or rent recommendations;
• to contact you by phone, SMS, WhatsApp or email about your requirement;
• to carry out verification and document checks and to complete the transaction you have asked us to help with;
• to keep records required by law, resolve disputes and enforce our Terms of Use;
• to keep the website secure and prevent fraud and spam.

Consent. When you submit an enquiry form or contact us after reading this notice, you give your free, specific, informed and unambiguous consent, by a clear affirmative action, to us processing the personal data you provide for the purposes above. Providing your data is voluntary, but we cannot respond to an enquiry without a name and a phone number. We will not send you unrelated marketing without separate consent, and we will not make your consent to marketing a condition of using our services.

Withdrawing consent. You can withdraw your consent at any time, as easily as you gave it, by telling us by phone, WhatsApp or email (details in section 13). Withdrawal does not affect processing done before you withdrew, and we may need to keep certain records where the law requires it. If you withdraw consent, we will stop processing your data and delete it, unless retention is required by law.

Legitimate uses. Without asking again, we may also process personal data where the DPDP Act permits it, for example where you voluntarily gave it to us for a purpose and have not objected to its use, to comply with a law or a court order, or to respond to a medical emergency or threat to life.

4. Who we share it with

We do not sell or rent your personal data. We share it only when needed:

• The other party to your deal: for example, sharing a buyer’s or tenant’s name and contact number with the owner or landlord (and vice versa) once you have agreed to proceed with a visit or discussion;
• Professionals involved in your transaction: such as lawyers, banks or society offices, when you ask us to coordinate with them;
• Service providers (Data Processors): who host and secure our website and handle email and messaging (for example Cloudflare, our web host, Google and WhatsApp), only to the extent needed to provide their service and under appropriate obligations to protect your data;
• Authorities: where required by law, court order, or for tenant police verification.

5. Storage and transfers outside India

Some of our service providers, such as Cloudflare, Google and WhatsApp, may process technical or messaging data on servers outside India. We transfer personal data outside India only to the extent permitted by the DPDP Act, that is, not to any country or territory the Central Government has restricted by notification.

6. Cookies and third-party services

When you first visit the website, a cookie notice asks for your choices. You can change them at any time through the Cookie settings link at the bottom of every page. We group cookies as follows:

• Strictly necessary (always on): needed for the website to work and stay secure, such as form security tokens, spam protection, security cookies set by Cloudflare, and the cookie that remembers your choices. They cannot be switched off.
• Functional: remember optional preferences to make the website more convenient.
• Analytics: help us understand how visitors use the website so we can improve it.
• Marketing: used to show relevant advertising or measure its effect.

At the time of writing, the website itself does not run analytics or marketing tools. If we add them, they will load only if you have allowed that category, and we will update this section.

Some pages load third-party services that may set their own cookies or collect technical data when you use them: Google Fonts for the website’s typefaces, Google Maps for our office location, and WhatsApp if you choose to message us there. Their own privacy policies apply to that data. You can also block or delete cookies through your browser settings; the website will still work for browsing and enquiries.

7. How long we keep it

We keep enquiry details for as long as your requirement is active and for a reasonable period afterwards so we can follow up or help you again — generally not more than 24 months after our last contact. Transaction records and documents are kept for as long as required by applicable tax and other laws. After that, or earlier if you withdraw consent and no law requires us to keep it, data is deleted or anonymised. Your cookie-choice cookie is kept for up to 6 months.

8. How we protect it

We use reasonable security safeguards, including encrypted (HTTPS) connections, access limited to staff who need it, and secure storage of documents. No method of transmission or storage is completely secure, but we work to protect your data. If a personal data breach occurs, we will inform the Data Protection Board of India and the affected people in the manner the law requires.

9. Your rights as a Data Principal

Subject to applicable law, you can:

• Access: ask for a summary of the personal data we hold about you, the processing we do, and the other parties we have shared it with;
• Correction, completion and updating: ask us to correct inaccurate data, complete incomplete data, or update it;
• Erasure: ask us to erase your data, unless we must keep it by law;
• Withdraw consent at any time, and ask us to stop contacting you;
• Grievance redressal: raise a complaint about how we handle your data or how we respond to your requests;
• Nominate: name another person to exercise these rights on your behalf in the event of your death or incapacity.

To use any of these rights, contact our Grievance Officer using the details in section 13. We may ask you to confirm your identity first, and we aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India; the Board expects you to have first used our grievance process.

10. Children

Our services are meant for adults. We do not knowingly collect or process the personal data of anyone under 18 years of age, and we do not track or target advertising at children. If you believe a child has given us personal data, please contact us and we will delete it. Where we ever need to process a child’s data, we will first obtain verifiable consent from a parent or lawful guardian.

11. Your duties as a Data Principal

The DPDP Act asks you to: comply with applicable law when exercising your rights; not impersonate anyone or suppress material information when giving us your data; not make false or frivolous grievances or complaints; and give us only information that is verifiably authentic when asking for correction or erasure.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page with its “Last updated” date, and we will take fresh consent where the law requires it.

13. Contact and Grievance Officer

For privacy questions, requests, withdrawal of consent or complaints, please contact our Grievance Officer:

Grievance Officer, Aashray Realty
Email: info@aashrayrealty.in
Phone: 9220635005, 9911494004
Address: CS-1-11, Gate No. 3, Shopping Complex, Orris Residential Complex, Sector 85, Gurgaon – 122004
Office hours: Mon–Sat, 10 AM–7 PM