Consumer Privacy Notice

Effective Date: 07th January, 2026

IMPORTANT NOTICE TO DATA PRINCIPALS

This Privacy Notice ("Notice") is issued by Gaursons India Private Limited ("Gaursons," "we," "us," or "our" this may also include other Gaursons companies, our affiliates and our trusted partners who provide services to us), a data fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"). Through this Notice, we explain how we collect, process, store, share, and protect your personal data in connection with our marketing campaigns, including advertisements, promotional activities, events, lead generation initiatives, and related interactions.

This Notice is provided independently of any other information and is intended to enable you to provide specific and informed consent where required. We process your personal data only for lawful purposes, adhering to principles of data minimization (collecting only what is necessary), purpose limitation (using data solely for specified purposes), accuracy, storage limitation, integrity, and confidentiality as mandated under the DPDP Act and DPDP Rules.

At Gaursons we value the personal data you share with us, so we have designed a Privacy Notice that helps set out how we collect, use and share your personal data (as defined in terms of applicable laws) when you interact with us on our websites, mobile sites, and applications (collectively, the “Sites”). We encourage you to read this Privacy Notice before using the Sites. Your use of the Sites indicates to us that you understand how we process your personal data as set out in this Privacy Notice.

For any questions, contact our Data Protection Officer using the details in Section 13. This Notice applies only to digital personal data processed within India; it does not apply to anonymized data or processing outside India under applicable exemptions.

1. WHO WE ARE

Company Name: Gaursons India Private Limited
Business: Real Estate Development and Marketing
Registered Office: Gaur Biz Park, Plot No-1, Abhay Khand II, Indirapuram, Ghaziabad - 201014, Uttar Pradesh, India
Contact Details: Telephone: 0120 434 33 33 | Email: privacy@gaursonsindia.com | Website: https://www.gaursonsindia.com/
Data Protection Officer (DPO): Our DPO is responsible for overseeing compliance. Contact: Email: sudhir.kumar@gaursonsindia.com | Telephone: 0120 434 33 33 | Address: Same as Registered Office.
The DPO or an authorized person can answer questions about our data processing activities.

We are not designated as a Significant Data Fiduciary under DPDP Act at this time, but we adhere to all applicable obligations.

2. WHAT PERSONAL DATA WE COLLECT

In accordance with Section 4 of the DPDP Act, we collect only personal data that is necessary for the specified purposes outlined in Section 4. We do not collect sensitive personal data unless explicitly required and with your consent. Personal data means any data about an identified or identifiable individual in digital form.

The categories of data we may collect from you includes:

biographical data (for example, address, email address, Age range or demographic information to ensure compliance with children's data rules, first name, last name, and contact number);
financial data (for example, financial history, credit card details, bank details Income range; Loan requirements; Pre-approval status);
data relating to your use of the Sites (for example, domain name, IP address and cookies).

Type of property (e.g., residential, commercial); Budget range; Preferred location of project; Timeline for purchase; Purpose (e.g., self-use, investment, rental)
Source of lead (e.g., advertisement, website, event, referral)

any data you independently choose to provide to us (for example, if you send us an email or call us).

Any additional data you voluntarily provide in inquiries, such as employment details for loan facilitation.

Note: We collect data only voluntarily provided by you or necessary for responding to your inquiry, in line with data minimization under Section 8 of the DPDP Act. We do not collect data through automated means without notice and consent, except for essential cookies on our website (see our Cookie Policy for details).

3. HOW WE COLLECT YOUR PERSONAL DATA

We collect personal data through the following methods by providing this Notice prior to or accompanying any consent request:

when you interact with us and purchase our products and services.
when you visit and/or register on our Sites and, for example, join our loyalty programs / consumer promotions.
when you sign up for our email newsletters and other notifications.
when you participate in promotional campaigns.
when you fill out a survey.
when you visit our Sites through the use of cookies and similar technology.
We may also generate data about you by combining information that we and other PepsiCo companies have collected about you through the use of cookies and similar technology when you access our Sites.
Inquiry forms on our website or apps
Phone calls or emails to our sales team
Walk-ins at sales offices or site visits
Participation in property exhibitions, events, or webinars
Responses to digital advertisements (e.g., via Google, Facebook, Instagram)

Indirect Collection:

Property portals (e.g., 99acres, MagicBricks, Housing.com)
Outdoor, print, television, or radio advertisements where you respond
Third-party sources such as real estate brokers, channel partners, lead aggregation platforms, marketing agencies, or event organizers

For indirect collection, we require third parties to confirm they have obtained your verifiable consent and provided a similar notice. If you believe your data was shared without consent, contact our DPO to exercise your rights.

4. PURPOSES FOR PROCESSING YOUR PERSONAL DATA

Under Section 4(1) of the DPDP Act, we process personal data only for lawful purposes with your consent or under legitimate uses (Section 7). Purposes are specified and limited:

Marketing and Communication:
Sending details about current and upcoming projects, brochures, floor plans, and offers to which you have consented.
Inviting you to events, launches, or newsletters.
Personalizing communications based on your preferences.
To provide you with the right products and services.
To develop well targeted offers and products that are of interest to you.
To manage our relationship with you.
Provide personalised advertising to you on third party websites (this may involve us aggregating your personal data with the data of others)
To respond to your questions and/or enable you to participate in our promotional campaigns
To learn how useful our marketing is and enable us to make it better

b) Lead Management and Customer Service:

Tracking inquiries, scheduling visits, and providing recommendations.
Answering questions and facilitating transactions.
To better understand how you use our products and services.
To view trends in our product offerings.
Sales and post-sales Processes:
Processing bookings, documentation, and loan coordination.
Providing after-sales support.
Analytics and Improvement
Analyzing campaign effectiveness, trends, and preferences to enhance services (data is anonymized where possible).
Legal Compliance:
Complying with Real Estate (Regulation and Development) Act, 2016 (RERA), tax laws, or court orders.
Responding to government requests.
to fulfil our legal, contractual and other obligations with you or our authorised partners.

Some of your personal data is necessary so that we can supply you with our products and services you have purchased or requested, and to authenticate you so that we know it is you and not someone else. You can choose not to provide certain information, but then you might not be able to take advantage of some our products and services offered on our Sites.

We do not process data for unspecified purposes. If a new purpose arises, we will provide a fresh notice and seek consent.

5. ON WHAT BASIS DO WE USE YOUR DATA

We use your personal data on the following bases where applicable in line with data protection laws:

for our legitimate interests. Using your personal data helps us to operate, improve and minimize any disruption to the products, goods and services that we may offer you. We also have a legitimate interest in sending you information on the products, services and offerings we believe will be of interest to you.
because the data is necessary for the performance of a contract with you or to take steps at your request to enter a contract.
because you have given your consent (if we expressly ask for consent to process your personal data, for a specific purpose); and
to comply with legal and regulatory obligations.
Legal Obligations: As required under RERA, or applicable laws.

Consent is our primary basis for marketing. You may withdraw consent at any time (see Section 9), without affecting prior lawful processing.

6. SHARING OF YOUR PERSONAL DATA

We share personal data only as necessary, with appropriate:

With our sales, marketing, customer service, and management teams on a need-to-know basis.
other Gaurson companies. This includes current and future Gaursons subsidiaries, franchisees, affiliates, and joint venture partners across geographical borders.
third parties who help us to provide services to you or who act for us. For example, companies who manage and operate our Sites or help run our promotional campaigns.
third parties who you consent to us sharing your personal data with.
local or overseas law enforcement agencies, industry bodies, regulators and/or tax authorities.
any third party to whom we may transfer our business so it can evaluate our business and use your personal data after any transfer.
social media advertising partners (who can check if you hold a relationship with us and send our adverts to you and advertise to people who have a similar profile to you);
We may also share your anonymised data with other third parties. If we do this, you will not be identifiable from this data.
Channel partners/brokers (for viewings, with your consent).
Marketing providers (e.g., email/SMS platforms, digital ad networks like Google/Facebook).
Financial institutions (for loans, only if requested).
Technology providers (e.g., CRM systems, analytics tools).
Professional advisors (e.g., lawyers, auditors).
Government authorities (e.g., RERA, tax departments, law enforcement when required).

Safeguards: All recipients are bound by contracts ensuring compliance with the applicable laws (including but not limited to DPDP Act 2023 and DPDP Rules 2025). We do not sell, rent, or trade your data. No international transfers outside the Republic of India occurs without your consent. We ensure accuracy and completeness when sharing for decision-making.

If you provide data about others?

If you provide personal data to us about another person please ensure you refer them to this Privacy Notice, so they know how we collect, use and share their data. By sharing personal data with us about another person, you warrant and confirm that you have obtained the necessary consent from the relevant person before sharing their data with us and/or the sharing of their data complies with applicable laws.

7. RETENTION OF YOUR PERSONAL DATA

OPTION - 1

We will retain your personal data for as long as necessary to achieve the purpose for which it was collected or subsequently processed.
Your personal data may be held by us for longer periods where retention is: (a) authorised by law; (b) pursuant to a contract we have with you; (c) with your consent; and (d) required for our legitimate business activities.
We may also store your data locally or overseas, including in the cloud. We apply our data standards and policies wherever your data is stored

After retention expires, we securely delete or anonymize data. We will notify you 48 hours before erasure if the period lapses without interaction.

8. YOUR RIGHTS AS A DATA PRINCIPAL

Under the applicable laws, you have the following rights, exercisable free of charge:

Right to Information: Obtain a summary of your personal data processed, purposes, and recipients.
Right to Access: Request a copy of your data in a prescribed manner.
Right to Correction, Completion, Update, or Erasure: Correct inaccurate data or erase it when the purpose is fulfilled, consent withdrawn, or no longer necessary (subject to legal retention).
Right to Withdraw Consent: Withdraw at any time, as easily as giving it; we will cease processing within a reasonable time.
Right to Grievance Redressal (Section 13): Raise concerns; we respond within 90 days. Escalate to the Data Protection Board if unsatisfied.
Right to Nomination: Designate a nominee to exercise rights in case of death or incapacity.
Right to Object to Automated Processing: Request human review if automated decisions affect you.
Right to Delete your data: Submit a request to delete your data at sudhir.kumar@gaursonsindia.com. Please note we will stop processing your data within 48 hours and delete your data within 30 days.

To exercise rights, contact our DPO at sudhir.kumar@gaursonsindia.com. We will acknowledge within 3 working days and resolve within 30 days.

9.CONTROLLING MARKETING COMMUNICATIONS AND WITHDRAWING CONSENT

You control your data. To withdraw consent or opt out:

Email: Click "Unsubscribe" or email sudhir.kumar@gaursonsindia.com.
SMS/WhatsApp: Reply "STOP" or email sudhir.kumar@gaursonsindia.com.
General Withdrawal: Use the link in our communications or contact DPO; as easy as consenting

Processing time: 3–5 working days. Withdrawal applies prospectively; non-marketing communications (e.g., transaction updates) continue. Opt-back in anytime.

10. DATA SECURITY MEASURES

We implement reasonable security safeguards:

Technical: Encryption (in transit/storage), firewalls, intrusion detection, regular vulnerability assessments.
Organizational: Staff training, confidentiality agreements, access controls, privacy audits.
Third-Party: Vendor assessments, contractual obligations.

In case of a personal data breach, we will notify you and the Data Protection Board within prescribed timelines, mitigate harm, and investigate.

11. CHILDREN'S PRIVACY

It is not our intention to collect personal data of individuals who are minors as per local laws. If you are a parent or legal guardian of a child that is a minor as per the laws of your country and you think that your child has given us data, you can contact us at privacy@gaursonsindia.com.

12. AUTOMATED DECISION-MAKING

We may use automated systems for:

Lead scoring, property recommendations, and campaign personalization based on your preferences. This ensures accuracy. You have the right to:

Request explanation of decisions.
Object to automated processing.
Seek human review if the decision affects you significantly.

13. HOW TO CONTACT US

Privacy Queries/Rights Exercise: Email: sudhir.kumar@gaursonsindia.com
Telephone: 0120 434 33 33
Address: Data Protection Officer, Gaursons Hi-Tech Infrastructure Private Limited, Gaur Biz Park, Plot No-1, Abhay Khand II, Indirapuram, Ghaziabad - 201014.
General Inquiries: Email:-

info@gaursonsindia.com

Office Hours: Monday to Saturday, 9:30 AM to 6:30 PM (IST). Acknowledgment: Within 3 working days. Resolution: Within 30 days (or 90 for grievances).

14. FILING A COMPLAINT

Step 1: Contact our DPO (sudhir.kumar@gaursonsindia.com). We investigate and respond within 30 days.
Step 2: If unsatisfied, escalate to the Data Protection Board of India (details will be shared once notified).

15. UPDATES TO THIS NOTICE

We may update this Notice for changes in practices, laws, or feedback. Material changes will be notified via email, SMS, or website posting at least 30 days in advance.

16. LANGUAGE AVAILABILITY

This Notice is available in English, Hindi, and can be made available in all languages in the Eighth Schedule of the Constitution of India upon request. You can request a copy in your preferred language by emailing us at sudhir.kumar@gaursonsindia.com.

17. QUICK REFERENCE CARD

Data Protection Officer:

sudhir.kumar@gaursonsindia.com

Stop Marketing:

sudhir.kumar@gaursonsindia.com |Reply

“STOP" to SMS/WhatsApp

Effective Date: __________________

Last Reviewed: __________________