WELCOME TO GAURSONS

This Privacy Notice is provided by Gaursons India Limited (“Gaursons”, “us”, “we”, or “our”. When we say “we” this may also include other Gaursons companies, our affiliates and our trusted partners who provide services to us. These include: our technology providers; social media partners; and advertising partners.

At Gaursons we value the personal data you share with us, so we have designed a Privacy Notice that helps set out how we collect, use and share your personal data (as defined in terms of applicable laws) when you interact with us on our websites, mobile sites, and applications (collectively, the “Sites”). We encourage you to read this Privacy Notice before using the Sites. Your use of the Sites indicates to us that you understand how we process your personal data as set out in this Privacy Notice.

WHO WE ARE AND WHY THIS MATTERS

Gaursons India Limited (referred to as "we," "us," "our," or "Company") is a responsible data handler committed to protecting your privacy. We are the "Data Fiduciary" under India's Digital Personal Data Protection (DPDP) Act, 2023 and Rules 2025.

Why This Notice is Important

When you visit our Website, request property information, schedule a site visit, make a booking, or communicate with our team, you share personal information with us. This information might include your name, contact details, property preferences, financial information, or identification documents. This Privacy Notice explains:

What information we collect and where it comes from Why we need this information and what we do with it How long we keep your data and when we delete it

Who has access to your information and under what circumstances

What rights you have regarding your personal data

How we keep your information secure against unauthorized access

What you can do if you have privacy concerns

Governing Laws and Our Commitment

We comply with:

Digital Personal Data Protection (DPDP) Act, 2023 - India's comprehensive data protection law

Digital Personal Data Protection Rules, 2025 - Detailed implementation guidelines

Information Technology Act, 2000 - For cybersecurity and data protection

Real Estate (Regulation and Development) Act (RERA), 2016 - For project-specific regulations

Consumer Protection Act, 2019 - For consumer rights protection

This multi-layered compliance framework ensures that regardless of where you are located, your privacy is protected according to the highest standards.

WHAT INFORMATION WE COLLECT FROM YOU

We collect personal information through different channels and methods, depending on how you interact with us. Here's a detailed breakdown of what we gather and why:

Information You Provide Directly to Us

When you voluntarily share information with us, we collect it to provide better services.

Contact and Identity Information:

When you create an account, submit an inquiry form, or contact our sales team, we collect your full name, email address, phone number(s), current residential address, and preferred communication method. For international customers or Non-Resident Indians (NRIs), we may also collect passport details, country of residence, and visa information. This helps us identify you correctly and communicate with you effectively about your property interests. We use this information to maintain accurate records, send you relevant property updates, and process your transactions efficiently.

Financial and Investment Information:

When you express interest in purchasing or leasing a property, we collect information about your financial capacity, including your budget range, preferred payment method, and sometimes bank

account details for transaction processing. We may collect income information, employment details, and property history to better understand your investment profile and recommend suitable options. This information is handled with utmost confidentiality and is never shared with unauthorized parties. For property purchases, we collect financial documents like bank statements, employment letters, and proof of funds to comply with real estate regulations and due diligence requirements.

Property Preferences and Search History:

We track the types of properties you're interested in (residential apartments, commercial spaces, retail outlets), your preferred locations (specific projects or areas in Delhi-NCR etc.,), budget constraints, required amenities, and desired possession timelines. This helps us personalize your experience and send you notifications about properties matching your criteria. Your search history tells us about your real estate goals, helping us recommend properties that genuinely align with your needs rather than showering you with irrelevant listings.

Documentation and Verification Data:

For property transactions and regulatory compliance (especially under RERA), we may collect government- issued identification documents such as Aadhaar card (masked), Passport, PAN (Permanent Account Number), or Voter ID. We gather address proof documents like utility bills, lease agreements, or municipal property tax receipts. We collect employment verification documents (salary slips, employment letters), income documentation (tax returns, Form 16), and sometimes family information (for co- ownership purposes). This documentation is necessary to comply with anti-money laundering (AML) and know-your-customer (KYC) verification requirements mandated by Indian law.

Communication and Correspondence:

When you email us, call our customer support team, or use our live chat feature, we retain records of these interactions. We keep copies of messages, emails, call recordings (where disclosed), and support tickets. This helps us maintain service quality, resolve disputes, track your inquiries, and provide a seamless experience if you need to follow up. Our support team can review your previous conversations to better assist you without asking you to repeat information.

Feedback and Preferences:

If you participate in surveys, provide testimonials, leave reviews, or provide feedback about our Website or services, we collect and store this information. Your feedback helps us improve our offerings, understand customer satisfaction levels, and identify areas for enhancement. With your permission, we may use your testimonials on our Website to help other potential buyers understand the Gaursons experience.

Information Collected Automatically When You Visit Our Website

Even if you don't actively provide information, our Website automatically collects certain technical data about your visit.

Technical and Device Information:

When you access our Website, our servers automatically record your Internet Protocol (IP) address, which gives us your approximate geographic location and internet service provider. We collect information about your device type (computer, tablet, smartphone), operating system (Windows, iOS, Android), and browser type (for ex. Chrome, Safari, Firefox, Edge). We record your device's unique identifiers and screen resolution. This technical information helps us ensure our Website works properly on different devices and optimize our infrastructure for speed and reliability.

Browsing Behavior and Activity:

We track which pages you visit on our Website, how long you spend on each page, which links you click, and in what order. We record your scroll depth (how far down you scroll on pages), which forms you interact with, and what content you download. We collect search queries you enter on our Website to find properties. This browsing data helps us understand which properties and content are most interesting to our visitors, allowing us to highlight the most relevant information and improve our Website design.

Property Interaction Data:

We track which property listings you view, how much time you spend examining each property, whether you view multiple photos or videos of a property, and if you use our virtual tour features. We record when you save properties to a wishlist, add properties to comparison tools, or request more information about specific projects. This data helps us understand your specific interests and suggest properties you're more likely to be interested in.

Site Visit and Appointment Data:

When you schedule or request a property site visit through our Website, we record the date, time, and specific project you want to visit. We note if you reschedule, cancel, or confirm your appointment. We track if you attended the scheduled visit and may record your feedback after the visit. This helps us manage our on-site operations efficiently and provides insights into your serious level of interest.

Location Information:

Based on your IP address, we can identify your approximate geographic location (city or region level). If you use mobile apps or explicitly grant permission, we can access more precise location data. This helps us show you properties in your preferred areas and deliver location-relevant information.

Location data also helps us understand traffic patterns to our Website and which regions show the most property interest.

Cookies and Tracking Technologies:

Our Website uses cookies (small text files stored on your device) to remember your preferences, keep you logged in, and track your activity. We use pixels (invisible images) embedded in our pages to measure how many people visit specific pages and sections. We use session storage to temporarily hold information during your Website session. These technologies help us understand Website usage patterns, measure marketing effectiveness, and personalize your experience. (See our detailed Cookie Policy for complete information about cookies, including how to control them.)

Information We Receive from Third Parties

Information From Real Estate Agents and Partners:

If you're working with a real estate agent or broker, they may provide us with your information when submitting property inquiries on your behalf or when you're referred to us. Co-developers and project partners who work with us may share information about joint project inquiries. This helps us provide seamless service across our partner network while ensuring you get the best real estate solutions.

Credit Bureaus and Financial Institutions:

When processing property financing or for credit assessment purposes, we receive information from credit bureaus (CIBIL, Equifax, Experian) including your credit score and credit history. Banks may share information about your account status if you're seeking financing through them for a property purchase. This information helps us verify your financial capacity and facilitate property transactions.

Property Data and Public Records:

We access public property registries maintained by municipal corporations and government authorities to verify property details, ownership history, and legal status of properties. We may receive information from cooperative housing societies, resident welfare associations, and building management if you're purchasing in an existing complex. Public databases help us ensure we're providing accurate information about properties.

Marketing and Lead Generation Partners:

Third-party marketing partners may provide us with contact information of individuals who expressed interest in real estate investments or specifically in Gaursons properties. Online advertising platforms (Google, Facebook, LinkedIn etc.,) may share information about your interactions with our ads. We ensure these partners comply with privacy regulations before sharing any data.

Social Media Platforms:

If you use social login features or link your social media account to our Website, platforms like Facebook, Instagram, LinkedIn, and Google share limited profile information with us (name, email, profile picture, general interests). You can control what information is shared through your social media platform settings.

Website Analytics Services:

Companies like Google provide us with aggregated Website analytics data about visitor behavior, traffic sources, and geographic distribution of our Website visitors. These analytics help us understand how our Website performs and who our audience is.

WHY WE COLLECT THIS INFORMATION - OUR PURPOSES

We process your personal data for specific, legitimate purposes. Understanding these purposes helps you see that we're not collecting data indiscriminately but for genuine business reasons.

Delivering Real Estate Services

The most fundamental reason we collect your information is to provide you with the real estate services you request from us.

Processing Your Property Inquiries and Bookings:

When you express interest in a property, we collect and use your information to prepare property information documents, answer your specific questions, and guide you through the booking process. We use your details to create quotations, prepare property agreements, and process your booking application. We maintain records of your booking to ensure all documentation is accurate and transactions are completed smoothly.

Facilitating Property Transactions:

For property purchases or leases, we collect detailed information to prepare legal documentation, coordinate with your financial institution for loan processing, work with legal advisors for title verification, and coordinate with RERA authorities for mandatory registrations. We use your information to process payments, coordinate with brokers and agents, and maintain transaction records as required by law. Your personal information is essential to completing the legal transfer of property ownership or lease rights.

Site Visits and Property Viewing Management:

We use your information to schedule property site visits, coordinate with our on-site teams, track your appointment details, and send you visit reminders. We collect feedback after your visit to understand your experience and suggest next steps. We maintain records of which properties you've visited to avoid suggesting the same properties repeatedly.

Payment Processing and Financial Management:

We collect financial information to process your payments securely through encrypted payment gateways. We maintain payment records for accounting, GST compliance, and financial reporting. We use your banking information only for the specific transaction you authorize, never for any other purpose without explicit consent.

After-Sales Support and Customer Service:

After your transaction is completed, we provide ongoing customer support regarding your property. We use your information to address maintenance issues, coordinate repairs under warranty, provide resident services, and assist with disputes. We maintain your information to honor warranty obligations and handle any issues that arise with your property.

Communicating With You

We need to stay in contact with you for various important reasons.

Transactional Communications:

We may send you emails, SMS or WhatsApp messages confirming your bookings, payment receipts, appointment reminders for site visits, and updates about your transaction status. These communications are

essential for your understanding of where things stand with your property purchase or lease. We send you legal notices, regulatory disclosures required by RERA, and information about any regulatory changes affecting your property. These communications are mandatory and not optional.

Property Updates and Project Information:

If you've expressed interest in specific projects, we send you updates about project progress, timeline changes, amenity completions, and possession dates. We share information about new phases opening at projects you're interested in. We notify you when new properties matching your criteria become available. These updates keep you informed about properties relevant to your interests.

Support and Assistance Communications:

Our customer support team uses your information to respond to your questions, address concerns, and provide assistance. We send troubleshooting guides, FAQ documents, and helpful information to resolve issues. We may proactively reach out if we notice issues with your transaction or account that need attention.

Marketing and Personalized Recommendations

With your consent, we use your information to send you marketing communications and personalized property recommendations.

Personalized Property Recommendations:

Based on your search history, budget, location preferences, and property type interests, we identify and recommend properties that might be of interest to you.

Marketing Communications (With Your Consent):

We send marketing emails about new project launches, special offers, promotional schemes, and investment opportunities. We may send SMS, email or WhatsApp notifications about limited-time offers or discounts. We may display targeted advertisements when you use our Website or visit other websites. We only send these communications if you've opted in and can easily opt-out anytime.

Event Invitations and Offers:

We invite you to property launches, investor seminars, property appreciation workshops, and other events that match your interests. We notify you about exclusive buyer offers, contractor discounts, and time-limited promotional schemes. We may send personalized offers based on your profile and purchase patterns to encourage you to consider additional properties.

Newsletter and Content Delivery:

If you've subscribed to our newsletter, we may send regular updates about market trends, investment insights, property buying guides, and relevant industry news. We share information about new projects, success stories from other buyers, and market analysis that might interest you.

Website and Service Improvement

We analyze data to make your experience better and improve our services.

Understanding Website Usage:

We track which pages are most visited, where visitors spend the most time, and which features are used most frequently. We analyze drop-off points where visitors leave without completing actions. This helps us identify which content resonates with visitors and what content needs improvement. We identify if the Website loads slowly on certain devices or in certain regions so we can fix performance issues.

User Experience Research:

We conduct A/B testing, trying different Website layouts or content presentations to see which version users prefer. We use heatmaps to understand where users click and what content captures their attention. We analyze form abandonment to understand why users don't complete forms and how we can simplify them. This research helps us create a more intuitive, user-friendly Website.

Analytics and Business Intelligence:

We analyze aggregated data to understand market trends, identify which property types attract the most interest, and understand seasonal patterns in buyer demand. We identify which marketing channels drive the most qualified traffic. We analyze customer data to understand buyer demographics, average purchase price points, and decision-making timelines. This helps us better serve future customers and allocate resources effectively.

Feature Development and Prioritization:

By understanding what features users like and what they struggle with, we prioritize new feature development. We identify if our mobile application needs improvement or if our Website needs better mobile optimization. We determine which pages should be redesigned for better clarity.

Legal and Regulatory Compliance

We must comply with various Applicable Laws and regulations regarding real estate and data protection.

RERA Compliance and Mandatory Disclosures:

The Real Estate (Regulation and Development) Act requires us to maintain detailed project documentation and customer records. We use your information to prepare mandatory project information documents that RERA requires us to provide. We maintain records of all transactions and buyer interactions as required by state RERA authorities. We provide regulatory reports to RERA as mandated.

GST and Income Tax Compliance:

Indian tax laws require us to maintain financial records, billing documents, and transaction details for 7-10 years. We use your information to generate invoices for GST compliance and GST filings. We maintain payment records for income tax reporting and tax audit purposes. We provide transaction information to tax authorities if legally requested.

Anti-Money Laundering (AML) and KYC Verification:

Reserve Bank of India and other financial regulators require us to verify customer identities and the source of funds for real estate transactions above certain thresholds. We collect government-issued identification documents to comply with KYC requirements. We maintain verification records as mandated by regulatory authorities. We report suspicious transactions as required by law.

Regulatory Reporting and Audits:

We provide information to government agencies during audits and investigations. We respond to information requests from real estate regulators, consumer protection authorities, and law enforcement agencies. We maintain detailed records to demonstrate compliance with all applicable regulations.

Fraud Prevention and Security

We use your information to protect your account, our Website, and our business.

Preventing Unauthorized Access:

We analyze login patterns to identify suspicious access attempts. If someone tries to log in from an unusual location or device, we may block the access or ask for verification. We track and prevent

brute-force attacks where someone repeatedly tries to guess passwords. We maintain security logs to identify and block hackers.

Transaction Security:

We verify that booking payment amounts match quoted prices before processing. We check for duplicate bookings or fraudulent double-booking attempts. We analyze transaction patterns to identify unusual or potentially fraudulent activity. We verify that property owners match booking requests and prevent property double-selling.

Data Protection:

We maintain detailed access logs showing who accessed your information and when. We track unauthorized access attempts and take corrective action. We identify if our systems are under attack and activate security measures. We analyze data access patterns to detect insider threats.

Complaint and Dispute Prevention:

By analyzing past issues, we identify patterns and prevent recurring problems. We use feedback to identify system vulnerabilities and fix them. We track complaints to ensure they don't escalate to regulatory issues.

 

HOW WE SHARE YOUR INFORMATION

We don't keep all your information locked away inside Gaursons. In many cases, we must or should share your information with others to provide you with complete real estate services.

Service Providers Who Help Us Serve You Better

Payment Processing Partners:

We share your financial information with PCI-DSS compliant payment gateways (like Razorpay, PayU) only to process your payments. These companies cannot use your information for any other purpose and must maintain strict confidentiality. We never share your full credit card or bank account details with us; payment processors handle this directly.

Website and Infrastructure Providers:

We share Website usage data with hosting providers who maintain our servers and ensure our Website is always available. Cloud storage providers (AWS, Google Cloud) store our data on secure servers, but they access only what's necessary to maintain the infrastructure. Email service providers send our transactional and marketing emails on our behalf. Website analytics providers (Google Analytics) receive anonymized aggregated data about visitor patterns, never individual personal information.

Customer Relationship Management (CRM) System Providers:

We use CRM platforms like HubSpot or Salesforce to manage customer relationships and coordinate our sales process. Only our authorized staff members can access your information in these systems. These providers have contracts requiring them to protect your data and use it only as instructed by us.

Legal and Professional Advisors:

Our legal consultants and auditors access relevant portions of your information to ensure our legal compliance, handle disputes, or prepare for audits. Real estate lawyers access information needed to draft and review property agreements. Chartered accountants access financial information for accounting and tax compliance. These professionals are bound by professional confidentiality obligations.

Project Partners and Co-Developers:

For joint projects, we may share limited information (name, contact details, property preferences) with co-developers or project partners to ensure coordinated service delivery. You'll be informed when partnering developers are involved. We don't share more information than necessary for that specific partnership.

Regulatory and Government Agencies

Real Estate Regulatory Authority (RERA):

State RERA authorities require us to file detailed information about properties, prices, and buyer details. We share project information, unit details, pricing, and your transaction information as mandated by RERA. RERA uses this information to monitor real estate market compliance and protect consumers. You have rights under RERA regulations that we must respect.

Income Tax and GST Authorities:

Tax authorities can request transaction details, payment records, and customer information during audits or investigations. We maintain records and provide information if legally required. We file GST returns that include aggregated transaction data. We report income from property sales as required by tax laws.

Municipal Corporations and Local Authorities:

Local municipalities require building information, occupancy details, and property owner information for civic administration. We provide the information they legally require for property registration and

municipal services. Local authorities use this to track properties, collect property taxes, and administer local services.

Law Enforcement and Judicial Authorities:

If police investigate crimes or courts issue orders, we provide information as legally required. We respond to subpoenas, search warrants, and official investigations. We provide information when required by court orders. We comply with legal process even if we haven't received user consent.

Reserve Bank of India and Financial Regulators:

For transactions involving external funding, we may share information with RBI and banking regulators for monitoring purposes. We report suspicious transactions as required by anti-money laundering regulations. We comply with financial regulatory requirements.

When You've Consented or When It's Obvious

Your Explicit Consent:

If you specifically ask us to share your information with someone (like providing your details to a mortgage broker you've identified), we do so. If you authorize us to share information with third-party service providers, we proceed. You can withdraw this consent at any time, and we'll stop sharing once we receive your request.

Information You Choose to Make Public:

If you give a testimonial for our Website, we may display your name and feedback publicly. If you participate in surveys, your aggregated responses (not identified with your name) may be published. If you participate in property reviews, your review may be displayed to other potential buyers.

Information We DON'T Share

We never sell your personal data to third parties for marketing purposes. We never share your data with non-essential third parties. We never share financial details with unauthorized parties. We never sell your information to data brokers or list companies. We never rent your contact details to other real estate companies. We never share your data with political campaigns or religious organizations. We never use your information for purposes other than those disclosed in this notice.

HOW LONG WE KEEP YOUR INFORMATION

We don't keep your personal data indefinitely. We maintain information only as long as necessary for our purposes or as required by law.

Data Retention Schedule

Property Transaction Records: 7-10 Years

 

We maintain complete records of property transactions (agreements, payment proofs, registration documents) for a minimum of 7 years due to GST compliance requirements. Income Tax Act requirements often extend this to 10 years, particularly if the property is an investment property with income tax implications. We maintain these records even after you stop being an active customer because we may need to refer to them for tax audits, legal disputes, or regulatory inquiries years later. The full 10-year period applies when properties are investment properties with rental income or capital gains implications.

Customer Support and Service Records: 1 Year

Records of your customer support interactions, complaint resolutions, warranty issues, and after-sales service is retained for 1 year. This period covers the standard warranty periods for construction defects and allows us to address follow-up issues customers may report months or years after their purchase. If disputes or legal cases arise, we retain these records until the dispute is fully resolved.

Marketing and Communication Preferences: Until You Opt Out

If you've opted in to receive marketing communications, we maintain your consent preferences and communication history until you unsubscribe. Once you unsubscribe from marketing, we retain a record of your opt-out for 30 days to ensure we don't accidentally re-send marketing emails. After 30 days, we fully remove your information from marketing lists, though we keep this record of your preference indefinitely if required for compliance.

Website Analytics and Technical Data: 1 year

Website traffic data, page visit logs, cookie tracking information, and technical analytics are retained for 1 year to analyze trends, measure performance, and understand Website usage patterns.

After this period, we delete the data unless we need it for legal or compliance purposes. If you file a

legal complaint related to your Website experience, we retain relevant technical data until the matter is resolved.

KYC/AML Verification Data: 5-10 Years

Know-Your-Customer verification documents and Anti-Money Laundering records must be retained for 5-10 years under RBI and regulatory requirements. These records include identity documents, address proof, and source of funds verification. We cannot delete these even if you request because regulators require we maintain them for investigation and audit purposes.

Account Information (Non-Transaction): 1 Year

If you create an account but don't complete a transaction, your account information (name, contact details, saved properties) is retained for 1 year. This allows us to reconnect with you about properties you were interested in. After 1 year of inactivity, we will delete your information & deactivate your account. You can request earlier deletion as well or delete your account.

Inquiry Forms and Lead Information: 1 Year

If you fill out inquiry forms about properties but don't proceed to booking, we retain this information for 1 Year for follow-up marketing purposes. After 1 Year of no engagement, we remove you from our active lead database, though we may retain minimal information for our business records.

What Happens When Your Data is Deleted

Secure Destruction:

When the retention period ends, we securely delete your personal data. This means:

Electronic files are permanently deleted using secure deletion methods that prevent recovery Paper documents are shredded or incinerated

Backup copies are also deleted after they cycle through our backup retention schedule We remove your information from active databases and archives

Anonymization for Analytics:

Even after we delete personal identifiers, we may retain anonymized data that can't be traced back to you. This anonymized data helps us understand market trends.

Legal Hold Exceptions:

If you file a legal complaint or we're involved in litigation, we place a "legal hold" on your data, meaning we don't delete it until the legal matter is fully resolved.

Regulatory Exceptions:

If data is required by law for a longer period under any other applicable law, we retain it regardless of our policy. For example, if income tax authorities are investigating your property purchase, we keep records even beyond 10 years.

Your Right to Request Earlier Deletion

When You Can Request Deletion:

If you've never completed a transaction with us and don't want to receive further communications If you've completed a transaction but want to delete optional data we've retained

If you no longer want your data in our systems for marketing purposes

What We Can and Cannot Delete:

We CAN delete: Optional feedback, marketing preferences, browsing history, preference data We CANNOT delete: Transaction records (required by law), KYC documentation (regulatory requirement), tax records, information/data subject to legal hold

Deletion Timeline:

We process deletion requests within 30 days. Once approved, data is permanently deleted using secure methods within 15 days. Deletion is permanent and irreversible. Once deleted, we cannot recover or restore your information. Please note, we will intimate you at least forty-eight (48) hours before completion of the time period for erasure of personal data that such personal data shall be erased upon completion of such period, unless you log into your user account or otherwise initiate contact with us for the performance of the specified purpose or you exercise your rights in relation to the processing of such personal data.

YOUR RIGHTS AND HOW TO EXERCISE THEM

Here are your rights regarding your personal data:

Right to Know and Access

What This Right Means:

You have the right to know exactly what personal data we hold about you, where it came from, what we do with it, how long we keep it, and who has access to it. You can access your personal data in a structured, commonly used, machine-readable format.

How to Exercise This Right:

• Email sudhir.kumar@gaursonsindia.com with subject "Data Access Request"
• Identify yourself clearly (email, phone, customer reference number)
• Specify what information you want to access (all data, specific period, specific category)
• We respond within 30 days with your data in the requested format
• If the request is complex, we may take up to 45 days

 

Right to Correction

What This Right Means:

If information we hold about you is inaccurate, incomplete, or outdated, you can request correction. For example, if we have the wrong email address, an outdated phone number, or incorrect property purchase date, you can ask us to fix it.

How to Exercise This Right:

• Contact unsubscribe@gaursonsindia.com with subject "Correction Request"
• Clearly identify what information is inaccurate
• Provide correct information
• Explain why it's important to correct (if not obvious)
• We review and correct the information within 30 days
• We confirm the correction and inform you when complete

 

Right to Deletion (Right to be Forgotten)

What This Right Means:

In specific circumstances, you can request that we delete your personal data. This is not an unlimited right; we must comply with legal retention requirements, but where possible, we delete your data.

When You Can Request Deletion:

• If we no longer need your data for the purposes we collected
• If you withdraw consent for optional processing
• If you believe we're processing your data unlawfully
• If legal requirements for retention have ended
• If the data is inaccurate or incomplete and cannot be corrected

How to Exercise This Right:

 

• Email unsubscribe@gaursonsindia.com with subject "Deletion Request"
• Clearly state what you want deleted
• We review if deletion is legally possible
• We notify you within 30 days of our decision
• If approved, we delete within 15 days and confirm deletion
• If denied, we explain why the data must be retained and for how long

Right to Data Portability

What This Right Means:

You can request your personal data in a structured, machine-readable format and have it transferred to another organization. This right is particularly useful if you want to switch real estate agents or property management companies and share your information with them.

How to Exercise This Right:

• Email unsubscribe@gaursonsindia.com with subject "Data Portability Request"
• Specify which data you want and in what format (PDF, Excel, CSV, JSON)
• Identify where you want the data transferred (provide contact details)
• We prepare your data in the requested format within 30 days
• We will provide the data to you directly or transmit directly to your chosen recipient if you authorize

What Data Can Be Ported:

 

Contact and profile information Preference and settings data

Transaction history (as much as legally permitted) Communication records

Technical and device data associated with your account

Right to Withdraw Consent

What This Right Means:

For any processing that requires your consent (like marketing emails, cookie tracking, or optional data collection), you can withdraw your consent at any time. Withdrawing consent stops future processing but doesn't affect the legality of processing before withdrawal.

How to Withdraw Consent:

For Marketing Emails: Click the "Unsubscribe" link in any email we send

For Marketing SMS: Reply "STOP" to any SMS we send

For Cookies: Visit https://www.gaursonsindia.com/cookie-settings and toggle off preferences

For Account: Go to your account settings and update communication preferences

For Specific Consent: Email unsubscribe@gaursonsindia.com specifying what consent you're withdrawing

Right to Grievance Redressal

What This Right Means:

If you believe we've violated your privacy rights or not complied with data protection laws, you can file a formal complaint with us. We have a structured process to investigate complaints and provide redressal.

How to File a Grievance:

• Email unsubscribe@gaursonsindia.com with subject "Privacy Grievance"
• Clearly describe the issue and how your privacy was violated
• Provide any supporting documentation
• Request the specific redressal you're seeking (correction, deletion, compensation, etc.)
• We acknowledge receipt within 5 days
• We investigate thoroughly within 30 days
• We provide our response explaining what happened and what action we're taking
• If you're unsatisfied, you can appeal to the Data Protection Board (once functional)

 

HOW WE PROTECT YOUR INFORMATION

We take data security extremely seriously and implement multiple layers of protection.

Technical Security Measures

Encryption in Transit:

All data traveling between your device and our servers is encrypted using SSL/TLS encryption (Secure Sockets Layer/Transport Layer Security). This means if someone tries to intercept the data, they see only encrypted gibberish, not your actual personal information. You can identify secure connections by the "https://" (not just "http://") in URLs and the padlock icon in your browser.

Encryption at Rest:

All personal data stored on our servers is encrypted using AES-256 encryption, military-grade encryption that makes it extremely difficult to access even if someone physically steals our servers. Financial data, identification documents, and sensitive personal information receive the highest protection of encryption.

Database Security:

Our databases are not publicly accessible. Access requires multiple authentication layers, including usernames, passwords, and sometimes additional verification. Database connections are encrypted and monitored. Databases sit behind firewalls and are not connected directly to the internet. We maintain detailed logs of who accessed what data and when.

Firewalls and Intrusion Detection:

We maintain enterprise-grade firewalls that block unauthorized access attempts. Intrusion detection systems monitor for suspicious activity 24/7. If someone tries to hack our system, the attack is blocked and we're immediately alerted. We have multiple firewalls in different layers to ensure that if one is compromised, others still protect our system.

Organizational Security Measures

Employee Training and Confidentiality:

Every employee undergoes data protection training before accessing any personal information. We require employees to sign confidentiality agreements prohibiting them from sharing customer information. We remind employees regularly about privacy obligations and security best practices.

Physical Security:

Our offices and server rooms have restricted access. Entry requires keycards, biometric authentication, or PIN codes. Security cameras monitor restricted areas 24/7. Sensitive documents are stored in locked cabinets. After hours, only authorized security personnel can access office areas.

Monitoring and Auditing:

We monitor system access logs to identify unusual patterns. Regular audits check if anyone is accessing information they shouldn't. We conduct surprise security audits to ensure compliance. We maintain complete audit trails showing who accessed what information and when.

Incident Response and Breach Notification

What We Do If There's a Breach:

 

If we discover or suspect that unauthorized parties have accessed your personal data, here's exactly what happens:

Notification (Within 72 Hours):

• We notify all affected individuals by email
• We will provide clear information about what happened
• We will explain what data was compromised
• We tell you what steps we're taking to prevent recurrence
• We will provide instructions on protective steps you can take

Regulatory Notification:

We immediately notify the Data Protection Board of India and provide them with the same information we give you. We cooperate fully with any investigation. We notify RERA and other relevant authorities as required.

COOKIES AND TRACKING TECHNOLOGIES

Our Website uses cookies and similar technologies to enhance your experience. (See our detailed Cookie Policy for complete information.)

THIRD-PARTY LINKS AND EXTERNAL WEBSITES

Our Website contains links to third-party websites (banks, payment processors, social media, news sites, partner websites).

Important Disclaimers:

We don't control third-party websites or their privacy practices

Third parties' privacy policies apply to them; we're not responsible for their data handling Visit their privacy policy before sharing information with them

We recommend caution with third-party sites and review their security

We're not liable for third-party breaches or misuse of your data on their sites

 

INFORMATION FOR INTERNATIONAL CUSTOMERS

If you're outside India, additional laws may apply to your data.

For European Users (GDPR):

If you're in the EU or EEA, the General Data Protection Regulation (GDPR) applies in addition to our Privacy Notice

For US Customers (California and Other States):

If you're in California, the California Consumer Privacy Act (CCPA) provides additional rights. Similar laws exist in other states (Virginia, Colorado, etc.). You may contact us for state-specific privacy information.

For NRI and International Buyers:

Your data receives the same protection regardless of where you're located. Data may be stored on servers located worldwide. If you have concerns about your data's international transfer, contact us at unsubscribe@gaursonsindia.com

CHILDREN'S PRIVACY

Our Website is not designed for children under 18 years of age. Real estate transactions are adult matters, and our Website contains complex information about property purchases and investments.

If Children's Data is Collected:

We don't knowingly collect data from anyone under 18

Parents can contact us if their child's data was collected

We'll delete a child's information immediately upon notification We require verifiable parental consent for any minor to use our services

Parental Concerns:

If you believe we've collected data from your child, please reach out to us unsubscribe@gaursonsindia.com immediately.

UPDATES AND CHANGES TO THIS PRIVACY NOTICE

We review and update this Privacy Notice periodically to:

Reflect legal changes in data protection laws Update our data practices

Clarify confusing sections

Address new technologies or services

How We Notify You of Changes:

We update the "Last Updated" date on this notice

Material changes are communicated via email to existing customers We post notices on our Website about significant changes

Continued use of our Website indicates your acceptance of updated terms

CONTACT US ABOUT PRIVACY

We make it easy to reach us with privacy questions or concerns.

Data Protection Officer

Gaursons India Limited

Gaur Biz Park, Plot No-1, Abhay Khand II, Indirapuram, Ghaziabad - 201014, India

Primary Email Contact: unsubscribe@gaursonsindia.com

DEFINITION OF KEY TERMS

Personal Data: Any information related to you (a natural person) that can directly or indirectly identify you. Examples: name, email, phone, address, ID numbers, financial information.

Data Fiduciary: This is Gaursons. We decide what personal data to collect, why to collect it, and how to process it.

Data Processor: Third parties who process data on our behalf (website hosts, email services). They can only use data as we instruct.

Data Principal: You; the person whose data we process.

Processing: Any operation on data including collection, storage, use, analysis, transfer, deletion, or sharing.

Consent: Your freely given, specific, informed agreement to processing. It must be explicit—we cannot assume you've consented.

Legitimate Interests: Legal reasons to process data beyond your explicit consent, like fraud prevention or contract performance.

Data Breach: Unauthorized access to or disclosure of personal data due to inadequate security.

Grievance: A complaint that you believe we've violated your privacy rights or data protection laws.

We understand that your personal information is important to you. This Privacy Notice is our commitment to transparency and to protecting your privacy while delivering exceptional real estate services. We work hard to earn your trust by handling your information responsibly, protecting it carefully, and respecting your rights.

If you have any questions or concerns about how we handle your information, please don't hesitate to reach out. Your privacy matters to us.

Acknowledgment: By using Gaursons' Website and Services, you acknowledge that you have read, understood, and accept this Privacy Notice. If you don't agree with our practices, please don't use our Website or services.

Effective Date: 7th January, 2026

Last Updated: 7th January, 2026