Privacy Policy

Aurevon Realty Pvt. Ltd. ("Aurevon Realty", "we", "us", or "our"), a company registered under the Companies Act, 2013 and operating as a RERA-registered real estate advisory firm, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or engage with us through any medium.

This policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), the Digital Personal Data Protection Act, 2023 ("DPDPA"), and applicable provisions of the Real Estate (Regulation and Development) Act, 2016 ("RERA").

1. Information We Collect

1.1 Personal Data You Provide

When you fill out our contact form, enquire about a property, register for our NRI advisory service, or communicate with us via WhatsApp, phone, or email, we may collect:

• Full name
• Email address
• Phone number / WhatsApp number
• City of interest and property preferences
• Budget range
• NRI status and country of residence (if applicable)
• PAN, Aadhaar, or passport details (only when required for RERA-mandated documentation)

1.2 Automatically Collected Information

When you access our website, our servers and third-party analytics tools may automatically record:

• IP address and approximate geolocation
• Browser type, device type, and operating system
• Pages visited, time spent, and referral source
• Cookies and similar tracking technologies (see Section 7)

1.3 Sensitive Personal Data or Information (SPDI)

As defined under the SPDI Rules, 2011, we do not ordinarily collect sensitive personal data such as financial information, passwords, biometric data, health data, or sexual orientation. In cases where financial details are required (e.g., for payment processing during property transactions), such data is collected by our banking partners and payment gateways, not stored on our servers.

2. Purpose of Data Collection

We collect and process personal data for the following lawful purposes:

• To respond to your enquiries about commercial properties
• To provide personalised property recommendations
• To facilitate property transactions, documentation, and RERA-mandated processes
• To provide NRI advisory and investment consultancy services
• To send transactional communications (booking confirmations, site visit schedules, document updates)
• To send marketing communications about new listings, market reports, or events (with your consent)
• To improve our website, services, and user experience through analytics
• To comply with legal and regulatory obligations under RERA, IT Act, and tax laws

3. Lawful Basis for Processing (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:

• Consent: Your voluntary submission of personal data through our forms, calls, or messages constitutes consent. You may withdraw consent at any time (see Section 9).
• Legitimate Uses: Processing necessary for performing a contract (e.g., property transaction), compliance with law, or responding to a medical emergency.
• Legal Obligation: Data processing mandated by RERA, Income Tax Act, FEMA (for NRI transactions), or court orders.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your information with:

• Property Developers & Builders: To facilitate enquiries and site visits for properties you have expressed interest in.
• Legal & Documentation Partners: Advocates, registrars, and RERA-registered professionals involved in your transaction.
• Financial Partners: Banks, loan providers, and payment processors, only when you initiate a financial transaction.
• Government Authorities: When required by law, including MahaRERA, Income Tax Department, and courts of competent jurisdiction.
• Service Providers: Website hosting (Vercel), analytics (Google Analytics), email delivery services — all bound by data processing agreements.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Specifically:

• Enquiry data: Retained for up to 3 years from the date of last engagement, unless you request earlier deletion.
• Transaction records: Retained for a minimum of 8 years as mandated by the Income Tax Act and RERA regulations.
• Marketing consents: Until you withdraw consent or unsubscribe.
• Website analytics: Anonymised and aggregated data retained indefinitely; identifiable data deleted after 26 months.

6. Data Security

We implement reasonable security practices and procedures as mandated under the SPDI Rules, 2011, including:

• SSL/TLS encryption for all data transmitted over the internet
• Access controls limiting data access to authorised personnel only
• Secure storage of physical documents in locked facilities
• Regular security reviews of our digital infrastructure
• Incident response procedures for data breaches, including mandatory reporting to the Data Protection Board of India within 72 hours as required under the DPDPA, 2023

While we strive to protect your data, no method of transmission or electronic storage is 100% secure. We encourage you to exercise caution when sharing personal information online.

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

• Essential cookies: Required for the website to function (session management, authentication).
• Analytics cookies: To understand website usage patterns and improve our services (Google Analytics).
• Marketing cookies: To deliver relevant advertisements and measure their effectiveness (with consent).

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

8. Third-Party Links

Our website may contain links to third-party websites, including WhatsApp (Meta Platforms Inc.), Google Maps, LinkedIn, and partner developer websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before sharing any personal data.

9. Your Rights Under DPDPA 2023

As a Data Principal, you have the following rights:

• Right to Access: Request a summary of your personal data processed by us and the processing activities undertaken.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of personal data that is no longer necessary for the purpose it was collected, subject to legal retention requirements.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time. Withdrawal does not affect the lawfulness of processing done prior to withdrawal.
• Right to Grievance Redressal: Lodge complaints with our Grievance Officer (see Section 12) or the Data Protection Board of India.
• Right to Nominate: Nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact us at info@aurevonrealty.in.

10. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information immediately. In compliance with the DPDPA 2023, processing of children's data requires verifiable parental consent.

11. Cross-Border Data Transfers

Your data may be processed by service providers located outside India (e.g., cloud hosting and analytics providers). Under the DPDPA 2023, cross-border transfers of personal data are permitted to countries not restricted by the Central Government. We ensure all international transfers comply with applicable data protection laws and that appropriate safeguards are in place.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDPA 2023, the details of the Grievance Officer are:

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Any material changes will be communicated via our website. The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of our website after changes constitutes acceptance of the updated policy.

14. Governing Law & Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts in Pune, Maharashtra.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: