Privacy Policy

1. INTRODUCTION AND COMMITMENT TO PRIVACY

1.1 About Deal Chahta Hai

Deal Chahta Hai (hereinafter referred to as "Company," "we," "us," "our," or "Deal Chahta Hai") is a licensed Real Estate Channel Partner registered with Haryana RERA (Registration Number: RC/HARERA/GGM/3989/3584/2026/24), headquartered in Gurugram, Haryana, India. We are committed to protecting your privacy and ensuring transparency in how we collect, process, store, and use personal data.

We operate as a multi-stakeholder platform connecting various parties in the real estate ecosystem, including buyers, sellers, tenants, landlords, investors, developers, and channel partners.

1.2 Purpose of this Privacy Policy

This Privacy Policy ("Policy") explains:

1. What personal data we collect from you.

2. Why and how we collect this data based on your role/stakeholder type.

3. How we use and process your data differently based on your category.

4. With whom we share your data and for what purposes.

5. How long we retain your data.

6. How we protect your data.

7. Your rights regarding your data.

8. How we handle cookies and similar tracking technologies.

9. How you can contact us regarding privacy concerns.

This Privacy Policy is governed by and should be read in conjunction with our Terms of Use. If there is any conflict, the Terms of Use shall take precedence unless this Privacy Policy provides greater protection to your data.

1.3 Applicability and Scope

This Privacy Policy applies to:

1. All personal data collected through Deal Chahta Hai's Platform (website, mobile application, offline channels).

2. Personal data submitted through enquiry forms, calls, messages, or any other communication medium.

3. Personal data shared with us by third parties (developers, channel partners, loan facilitators, referrers) for our use.

This Privacy Policy does NOT apply to:

• Third-party websites linked from our Platform (each maintains its own privacy policy).

• Information collected by developers, sellers, landlords, or other parties after your information is shared with them (they assume responsibility for their own privacy practices).

• Publicly available information or government databases.

1.4 Your Stakeholder Category

Deal Chahta Hai recognizes that users fall into different categories, and this Privacy Policy addresses each:

1. Buyers: Property purchasers or owner-occupiers seeking residential or commercial properties.

2. Tenants: Individuals or entities seeking rental properties (residential or commercial).

3. Sellers: Property owners seeking to sell their properties.

4. Landlords: Property owners seeking to rent out their properties.

5. Investors: Individuals or entities with investment interests in real estate (may buy, sell, or rent).

6. Developers & Partners: Real estate developers, channel partners, or brokers collaborating with us.

Different sections of this Privacy Policy may apply differently based on your stakeholder type, and we've noted this where applicable (marked as "[For Buyers/Tenants]," "[For Sellers/Landlords]," etc.).

2. TYPES OF PERSONAL DATA WE COLLECT

2.1 Data You Provide Directly (Voluntary)

When you use the Deal Chahta Hai Platform, we collect the following personal data that you voluntarily provide. The specific data collected may vary based on your role:

A. Contact Information (Collected from All Stakeholders)

• Full name

• Mobile phone number(s)

• Email address(es)

• WhatsApp number (if different from phone)

• Postal address (if provided)

• Alternate contact person (if you're acting as a representative)

B. Property-Related Data

[For Buyers/Tenants/Investors]

• Property type sought (residential, commercial, plot, etc.)

• City/location of interest

• Budget range or price bracket

• Unit configuration preference (studio, 1 BHK, 2 BHK, 3 BHK, etc.)

• Possession timeline preference (immediate, 6 months, 1 year, etc.)

• Your investment intent (owner-occupancy, investment, rental income, etc.)

• Specific projects or listings you've enquired about

• Property amenity preferences (gym, pool, parking, etc.)

[For Sellers/Landlords]

• Property details (address, locality, area)

• Property type (residential, commercial, plot, etc.)

• Built-up area and carpet area

• Number of bedrooms, bathrooms, and other configurations

• Year of construction or age of property

• Amenities present in the property

• Current occupancy status (vacant, self-occupied, rented)

• Reason for selling or renting (relocation, investment returns, upgrade, downsize, etc.)

• Expected price or rental range

• Preferred buyer/tenant profile (budget, family size, business type, etc.)

• Property documentation details (title, approvals, registrations)

C. Identity and Qualification Data (Data Collection Varies by Stakeholder)

[For All Stakeholders]

• Age and date of birth (if provided)

• Gender (if provided)

[For Buyers/Tenants/Investors]

• Employment status and occupation

• Company name and designation (if applicable)

• Annual income range (if provided for loan qualification purposes)

• Educational qualification (if provided)

• Marital status and family composition (if provided)

[For Sellers/Landlords]

• Ownership status and proof of ownership

• Legal representation (if represented by a lawyer or agent)

• Authorized representative details (if property is in trust, company, or joint ownership)

D. Financial and Eligibility Data

[For Buyers/Investors]

• Financial capability indicators (e.g., "ready to invest," "seeking finance")

• Bank or lending institution preferences

• Loan eligibility details (if you request loan facilitation)

• Credit score (if shared for loan pre-qualification)

• Investment history or real estate experience

[For Sellers/Landlords]

• Expected proceeds from sale

• Mortgage or loan details on the property (for title verification)

• Financial constraints or urgency (if shared voluntarily)

E. Communication Preferences (Collected from All Stakeholders)

• Your preferred communication channel (call, SMS, email, WhatsApp)

• Best time to contact you

• Whether you've opted in or out of marketing communications

• Language preference for communications

• Frequency preference (daily, weekly, as-needed, etc.)

F. Enquiry and Interaction Data (Collected from All Stakeholders)

• Content of messages, emails, or chat conversations with us

• Enquiry or application forms you submit

• Documentation you upload (PAN, Aadhar, passport, salary slips, offer letters, property documents, NOCs, etc.)

• Questions or feedback you provide about our services

• Your transaction history with us (previous properties inquired, deals closed, etc.)

G. User-Generated Content (If Applicable)

• Reviews or testimonials about properties or our service

• Comments on projects or listings

• Ratings and feedback on your experience with us or referred properties or parties

• Social media posts referencing Deal Chahta Hai or properties (if publicly available and tagged)

H. Referral and Network Data (Collected from All Stakeholders)

• Information about how you learned about us (word-of-mouth, social media, ads, etc.)

• Whether you referred us to others and details of those referrals

• Network details if you're a channel partner or agent

2.2 Data Collected Automatically (Involuntary)

When you visit or interact with our Platform, we automatically collect certain technical data:

A. Device Information

• Device type (smartphone, tablet, laptop, desktop)

• Operating system and version (iOS, Android, Windows, macOS, etc.)

• Device identifier (IMEI, UDID, or similar unique identifier)

• Device model and manufacturer

• Browser type and version (Chrome, Safari, Firefox, Internet Explorer, etc.)

B. Connection and Network Information

• Internet Protocol (IP) address (which reveals approximate geographic location)

• Mobile network provider information

• WiFi or cellular connection status

• Internet Service Provider (ISP)

C. Browsing and Usage Data

• Pages or sections of the Platform you visited

• Time spent on each page

• Clicks, taps, and interactions with Platform features

• Search queries entered on the Platform

• Whether you completed forms or abandoned them mid-way

• Download history of materials or brochures

• Video or content viewed on the Platform

• Products or listings you viewed or bookmarked

D. Cookies and Similar Technologies

• Session cookies (temporary, deleted when you close the browser)

• Persistent cookies (stored on your device for longer periods)

• Web beacons, pixels, or tracking tags

• Local storage data

• Similar tracking technologies used for analytics, marketing, and personalization

E. Location Data

• Approximate geographic location based on IP address

• If you've granted location permission: precise location data from GPS, Bluetooth, or cellular triangulation

• City, state, or region inferred from your usage patterns

F. Communication Metadata

• Timestamp of calls, messages, or emails

• Duration of calls

• Whether messages were read or opened

• Frequency and pattern of your interactions with us

2.3 Data from Third Parties

We also collect personal data from various third-party sources:

A. Developers and Channel Partners

• Information you may have already provided to a developer (name, contact, interest in specific projects)

• Documentation you may have submitted to them

• Your transaction history or interaction pattern with them

• Referral data if they've referred you to us

B. Loan Partners and Financial Institutions

[For Buyers/Investors Seeking Finance]

• Loan pre-qualification data or loan eligibility assessment

• Credit-related information (with appropriate consent and disclosures)

• Financial profile data used to determine loan suitability

C. Aggregator Portals and Real Estate Databases

• Lead information from external property portals where you may have registered

• Public records or real estate listing information

• Market data aggregators and property databases

• Property ownership records and municipal data

D. Social Media and Public Sources

• Information from your social media profiles (if linked to our Platform)

• Publicly available information from LinkedIn, Facebook, or other platforms

• Information from public records, directories, or government databases

• Property records from municipal or state authorities

E. Referrals and Word-of-Mouth

• Information from existing users who refer you to Deal Chahta Hai

• Details shared by agents, brokers, or other intermediaries who refer leads to us

• Information from property dealers or networks

F. Call Recording and Monitoring

• Records from calls placed to us or received from us (if call recording is enabled)

• Transcripts of calls (if we use speech-to-text technology)

• Call analytics data (duration, outcome, topic discussed)

G. Previous Transactions and History

[For Repeat Users/Stakeholders]

• Your previous enquiry and transaction history with us

• Communication records from past interactions

• Feedback and ratings from previous transactions

3. PURPOSE OF DATA COLLECTION AND USE

3.1 Primary Purposes (Tailored by Stakeholder Type)

Deal Chahta Hai collects and uses your personal data for the following primary purposes:

A. Lead Generation and Qualification

[For Buyers/Tenants/Investors]

1. To capture your interest in real estate properties and projects.

2. To understand your property requirements and investment preferences.

3. To qualify and segment leads into categories based on property type, budget, location, timeline.

4. To assess your suitability for specific projects or properties.

[For Sellers/Landlords]

1. To understand your property details and selling/rental requirements.

2. To qualify your property for listing and market positioning.

3. To identify potential buyers/tenants matching your property profile.

4. To assess the urgency and authenticity of your property listing.

B. Facilitation of Real Estate Transactions

[For Buyers/Tenants/Investors]

1. To connect you with relevant developers, sellers, landlords, or investment opportunities.

2. To share your enquiry and contact details with appropriate real estate stakeholders.

3. To arrange site visits, property inspections, or meetings with developers, sellers, or landlords.

4. To facilitate preliminary discussions or negotiations between you and counterparties.

5. To provide you with documentation, offer letters, or project details from developers.

[For Sellers/Landlords]

1. To connect you with potential buyers/tenants matching your property.

2. To share your property details and contact information with interested buyers/tenants.

3. To arrange property viewings, inspections, or meetings.

4. To facilitate negotiations and communication between you and prospective buyers/tenants.

5. To coordinate documentation and transaction processes.

C. Communication and Customer Service (Applicable to All)

1. To contact you about properties or opportunities matching your preferences.

2. To respond to your enquiries, questions, or requests for information.

3. To send you updates about projects, offers, new listings, or interested parties.

4. To schedule calls, meetings, or site visits at your convenience.

5. To provide customer support, assistance, or clarification.

6. To gather feedback about our services or your experience with referred properties or parties.

D. Marketing and Business Development

[For Buyers/Tenants/Investors]

1. To send promotional communications about new projects, offers, or opportunities.

2. To inform about events, webinars, or industry updates relevant to real estate.

3. To conduct market research or surveys to improve our services.

[For Sellers/Landlords]

1. To market your property to potential buyers/tenants.

2. To create targeted campaigns to attract suitable prospects.

3. To inform about market trends, pricing guidance, or marketing strategies.

4. To conduct feedback on our listing and marketing effectiveness.

E. Platform Improvement and Analytics (Applicable to All)

1. To analyze how you use our Platform and identify usage patterns.

2. To improve the functionality, user experience, and features of the Platform.

3. To identify technical issues or bugs and enhance Platform performance.

4. To conduct A/B testing or user experience research.

5. To generate aggregated analytics and insights about user behavior (without identifying individuals).

F. Legal Compliance and Risk Management (Applicable to All)

1. To comply with legal obligations under laws such as RERA, IT Act, Consumer Protection Act, etc.

2. To maintain records for audit, regulatory reporting, and compliance purposes.

3. To verify your identity and eligibility to transact property in India.

4. To detect, prevent, and investigate fraud, unauthorized access, or misuse of the Platform.

5. To protect the rights, property, and safety of Deal Chahta Hai, users, developers, and the public.

6. To enforce these Terms of Use and other agreements.

G. Know-Your-Customer (KYC) and Anti-Money Laundering (AML) Compliance (Applicable to All)

1. To verify your identity and source of funds (where applicable).

2. To comply with Prevention of Money Laundering Act (PMLA) requirements.

3. To screen you against government sanctions lists or watch lists (where required).

4. To maintain KYC records as mandated by financial institutions or regulators.

H. Loan Facilitation [For Buyers/Investors Seeking Finance]

1. To connect you with bank partners for home loan pre-qualification or sanction.

2. To submit your financial information to lenders for loan assessment.

3. To track loan application status and communicate updates to you.

4. To facilitate the loan disbursement process once sanctioned.

I. Dispute Resolution and Legal Proceedings (Applicable to All)

1. To investigate complaints, grievances, or disputes involving you.

2. To gather evidence for legal proceedings or regulatory inquiries.

3. To defend Deal Chahta Hai's interests in litigation or arbitration.

3.2 Secondary and Optional Uses (Based on Consent)

In addition to the primary purposes above, we may use your data for the following secondary purposes, only if you have explicitly provided consent or opted in:

[For Buyers/Tenants/Investors]

1. Direct marketing via email: Newsletters, project updates, market insights, or promotional offers.

2. Marketing via SMS/WhatsApp: Property recommendations or promotional messages (subject to TRAI regulations).

3. Personalized recommendations: Use of AI or machine learning to suggest properties matching your profile.

4. Social media marketing: Display targeted ads on Facebook, Instagram, Google, or other platforms.

[For Sellers/Landlords]

1. Direct marketing via email: Newsletters, market updates, pricing guidance, or promotional services.

2. Marketing via SMS/WhatsApp: Updates on interested buyers/tenants or promotional services.

3. Testimonials and case studies: Feature your experience or testimonial in marketing materials (with explicit permission).

4. Social media marketing: Use your property images or listing details in targeted campaigns (with explicit permission).

[For All Stakeholders]

5. Third-party research: Share anonymized data with market research firms or industry analysts.

6. Referral incentives: Contact you about referral programs or incentive schemes.

You can withdraw consent for secondary purposes at any time by contacting us (see Section 9 for contact details).

3.3 Lawful Basis for Processing

We process your personal data based on one or more of the following lawful bases:

1. Your Consent: You have explicitly provided consent for processing (especially for marketing or sensitive data).

2. Contractual Necessity: Processing is necessary to perform services you have requested (lead generation, facilitation, property listing).

3. Legal Obligation: Processing is required to comply with applicable laws (RERA, IT Act, PMLA, Consumer Protection Act, etc.).

4. Legitimate Interest: We have a legitimate business interest in processing (customer relationship management, fraud prevention, Platform improvement, property marketing).

5. Protection of Vital Interests: Processing is necessary to protect your or others' rights, safety, or health.

4. DATA SHARING AND THIRD-PARTY DISCLOSURE

4.1 Parties with Whom We Share Your Data (Tailored by Stakeholder Type)

Deal Chahta Hai shares your personal data with the following categories of third parties for the purposes outlined:

A. Developers, Builders, and Project Promoters

[For Buyers/Tenants/Investors]

Why: To match you with relevant projects and allow them to contact you directly.

• We share your name, contact number, email, property preferences, and budget range with developers associated with projects you've enquired about.

• We do not share sensitive data like financial details, identification documents, or credit information with developers unless you've specifically consented or request loan facilitation.

[For Sellers/Landlords]

Why: To inform them of interested parties and facilitate connections.

• We may share your property details with developers who may be interested in acquisition or redevelopment.

B. Sellers/Landlords and Buyers/Tenants (as Counterparties)

[For Buyers/Tenants/Investors]

Why: To facilitate property transactions.

• We share your contact information with sellers or landlords of properties you've shown interest in.

• Sellers/landlords will use this to contact you regarding property details, viewings, or negotiations.

[For Sellers/Landlords]

Why: To facilitate property transactions.

• We share your contact information with buyers/tenants who have expressed interest in your property.

• Buyers/tenants will use this to contact you regarding property details, viewings, or negotiations.

C. Channel Partners and Authorized Brokers

Why: To expand reach and facilitate connections through authorized intermediaries (applies to all stakeholders).

• We may share your lead data with other licensed real estate channel partners or authorized brokers who may have better connections with specific developers or market segments.

• These partners are contractually obligated to maintain confidentiality and use data solely for real estate facilitation.

D. Loan Partners and Financial Institutions

[For Buyers/Investors Seeking Finance]
Why: To facilitate home loan pre-qualification and processing.

• If you request loan facilitation, we share relevant financial and personal information with banks or non-banking financial companies (NBFCs) with whom we have partnerships.

• Financial institutions will have their own privacy policies and will comply with Reserve Bank of India (RBI) regulations and lending guidelines.

E. Service Providers and Technology Partners

Why: To provide necessary backend services for our Platform to function (applies to all).

• CRM (Customer Relationship Management) Providers: To store, manage, and organize lead data and customer interactions.

• Email Service Providers: To send transactional emails, newsletters, and communications.

• SMS and WhatsApp Service Providers: To send SMS and WhatsApp messages for lead routing and updates.

• Analytics Providers: Google Analytics, Mixpanel, or similar tools to understand Platform usage.

• Cloud Hosting and Storage Providers: AWS, Google Cloud, or similar for data hosting and backup.

• Call Recording and Monitoring Services: Third-party vendors for call recording, transcription, and analysis.

• Payment Gateways (If Applicable): Payment processors for any online transactions on the Platform.

All service providers are bound by Data Processing Agreements (DPAs) ensuring they maintain confidentiality and use data strictly for specified purposes.

F. Legal and Compliance-Related Parties

Why: To comply with legal obligations or defend our interests (applies to all).

• Government Agencies and Regulators: Haryana RERA, Income Tax Department, local authorities, law enforcement, as required by law.

• Courts and Arbitration Bodies: When compelled by legal process or court orders.

• Legal Counsel: Our external lawyers and auditors for legal advice, compliance audits, and litigation support.

• Insurance Companies: For claims handling or fraud investigations related to our business.

G. Merger, Acquisition, or Business Transfer Parties

Why: In case of corporate restructuring or change of ownership (applies to all).

• If Deal Chahta Hai is acquired, merged with another entity, or undergoes significant restructuring, your data may be transferred to the successor entity.

• We will notify you of such changes and your rights regarding your data.

4.2 Data NOT Shared Without Consent (Applicable to All)

Deal Chahta Hai does NOT share the following sensitive data without your explicit prior consent:

1. Identity proof documents (PAN, Aadhar, Passport, Driving License).

2. Financial documents (bank statements, salary slips, offer letters, tax returns).

3. Credit score or credit report information.

4. Health information or medical records.

5. Biometric data.

6. Religious, political, or ideological information.

7. Criminal records or legal history.

8. Detailed financial statements or asset valuations.

Exceptions: We may disclose such sensitive data if:

• Legally required by government authorities or court orders.

• Necessary to prevent fraud, misuse, or illegal activity.

• You have explicitly provided consent.

4.3 Data Sharing Across Borders (If Applicable)

Important: If your personal data is transferred outside India:

1. We will ensure that the recipient country or jurisdiction has data protection laws equivalent to Indian laws (or equivalent safeguards are in place).

2. We will not transfer sensitive personal data to countries with inadequate data protection unless:

   • Legally required.

   • You have explicitly provided consent.

   • Standard contractual clauses or Binding Corporate Rules are in place.

Currently, most of Deal Chahta Hai's operations and data processing occur within India. If this changes, we will update this section.

4.4 Responsibility of Third Parties

While we take steps to ensure third parties handle your data responsibly, Deal Chahta Hai is not responsible for:

1. How developers, sellers, landlords, buyers, tenants, or other counterparties use your data after we share it.

2. Data breaches or misuse by third parties.

3. Privacy practices of third-party websites linked from our Platform.

4. Violations of third-party privacy policies.

You are encouraged to review the privacy policies of developers, loan partners, sellers, landlords, and other third parties before sharing additional information with them directly.

5. DATA RETENTION AND DELETION

5.1 Retention Periods (Tailored by Stakeholder Type and Data Category)

Deal Chahta Hai retains your personal data for the following periods based on the purpose, nature of data, and your stakeholder type:

A. Lead Data - Buyers, Tenants, Investors

• Retention Period: 2-3 years from the date of last contact or interaction.

• Rationale: To enable follow-up on long-term interests and comply with RERA requirements for record-keeping.

• Accelerated Deletion: If you explicitly request deletion or opt-out of all communications, data is deleted within 30 days.

B. Listing Data - Sellers, Landlords

• Active Listing Period: As long as the property is actively listed on the Platform.

• Post-Delisting: 1 year after the listing is removed or marked as sold/rented (for reference, dispute resolution).

• Accelerated Deletion: Upon your written request and confirmation that the property is no longer available.

C. Communication Records (Applicable to All)

• Call Recordings: 90 days to 1 year (depending on regulatory requirements and business needs).

• Emails and Chat Messages: 1-2 years for customer service and dispute resolution purposes.

• SMS Records: 1 year (in compliance with TRAI regulations).

D. Transaction Data (Enquiries, Applications, Bookings - Applicable to All)

• Retention Period: 5-7 years from the date of transaction.

• Rationale: To comply with Income Tax Act requirements for financial records and RERA regulations for channel partner records.

E. Financial and KYC Data (Applicable to All, Especially for Loan/Investment)

• Retention Period: 5-10 years from the date of collection.

• Rationale: To comply with PMLA, AML, and financial institution requirements.

F. Legal and Compliance Records (Applicable to All)

• Retention Period: 7-10 years or as required by applicable law.

• Rationale: To address potential disputes, audits, or legal proceedings.

G. Cookies and Tracking Data (Applicable to All)

• Session Cookies: Deleted when you close the browser.

• Persistent Cookies: 1-2 years (or until you clear your browser cache).

H. Complaint and Grievance Records (Applicable to All)

• Retention Period: 3-5 years from resolution date.

• Rationale: To address appeals or follow-up grievances.

I. Marketing and Analytics Data

• Aggregated and Anonymized Data: Retained indefinitely (cannot be linked to you).

• Personally Identifiable Marketing Data: 1-2 years or until you unsubscribe.

5.2 Right to Request Deletion

You have the right to request deletion of your personal data in the following circumstances (see Section 5.1):

Deletion Request Process:

1. Email us at hello@dealchahtahai.com with the subject line "Data Deletion Request."

2. Provide your full name, contact number, email, and stakeholder type for identification.

3. Specify clearly which data you want deleted and provide reason.

4. We will acknowledge within 7 business days.

5. Processing will take 30-45 business days depending on data location across multiple systems, backups, and third-party processors.

6. You will receive confirmation once deletion is complete.

Note: Complete deletion across all backups and third-party systems may take up to 90 days due to manual processing requirements. We will provide status updates upon request.

5.3 Deletion Request Process (Applicable to All)

To request deletion of your data:

1. Email us at hello@dealchahtahai.com with the subject line "Data Deletion Request."

2. Provide your full name, contact number, and email so we can identify your account.

3. Specify clearly which data you want deleted:

   • [For Buyers/Tenants/Investors]: "All lead data," "call recordings," "email communications"

   • [For Sellers/Landlords]: "All property listing data," "my contact details," "property images"

4. Provide reason for deletion if relevant.

· We will acknowledge your request within 7-10 business days and process deletion within 30-45 business days depending on data location across multiple systems. You will receive confirmation once deletion is complete across all databases, backups, and third-party systems. Note: Due to manual processing and legal retention requirements, complete deletion may take up to 90 days. We will provide status updates at 30 and 60 days if requested.

· Explain why we cannot delete certain data (e.g., legal obligations, ongoing disputes).

5.4 Exceptions to Deletion Rights (Applicable to All)

We may retain your data even after a deletion request if:

1. Legal Obligation: Retention is required by RERA, Income Tax Act, PMLA, or other applicable laws.

2. Ongoing Transaction: You have an active property transaction or loan application.

3. Dispute or Grievance: A complaint, dispute, or grievance is pending.

4. Fraud Investigation: We're investigating suspected fraudulent or unlawful activity.

5. Legitimate Business Interest: Data is necessary to protect our rights or the rights of others.

6. Manual Processing Time: Deletion requests are processed manually and may take 30-90 days to complete across all systems, backups, and third-party processors.

[For Sellers/Landlords - Special Provision]

6. Property Transaction Disputes: If there's a dispute or claim arising from a property listing, data may be retained until resolution.

5.5 Manual Processing and Realistic Timelines

Deal Chahta Hai operates with manual data management processes typical of small firms. Deletion, access, and correction requests are handled by our team rather than automated systems. This ensures accuracy but requires additional time:

1. Acknowledgment: Within 7 business days

2. Processing: 30-45 business days (may extend to 90 days for complex requests)

3. Confirmation: Within 10 business days of completion

4. Backups: Quarterly manual review (up to 180 days for complete removal)

You acknowledge that these timelines are reasonable for manual processing and comply with applicable data protection laws for small enterprises.

6. DATA SECURITY AND PROTECTION

6.1 Security Measures Implemented

Deal Chahta Hai implements comprehensive technical, operational, and organizational safeguards to protect your personal data:

A. Technical Safeguards

1. Encryption:

   • In Transit: All data transmitted between your device and our servers uses HTTPS encryption (SSL/TLS).

   • At Rest: Sensitive data stored in databases is encrypted using industry-standard algorithms (AES-256 or equivalent).

   • End-to-End Encryption: Implemented for sensitive communications where applicable.

2. Firewalls and Network Security:

   • Multiple layers of firewalls to prevent unauthorized access to our systems.

   • Intrusion detection and prevention systems (IDS/IPS).

   • Regular network penetration testing to identify vulnerabilities.

3. Access Controls:

   • Role-based access control (RBAC) limiting employee access to data based on job function.

   • Multi-factor authentication (MFA) for employee access to sensitive systems.

   • API tokens and authentication credentials regularly rotated.

4. Database Security:

   • Databases hosted on secure, isolated servers with restricted access.

   • Database activity monitoring and logging.

   • Regular security patches and updates applied promptly.

5. Application Security:

   • Code reviews and security testing during development.

   • Protection against common web vulnerabilities (SQL injection, cross-site scripting, etc.).

   • Web Application Firewall (WAF) to detect and block malicious requests.

B. Operational Safeguards

1. Regular Security Audits:

   • Third-party security audits and penetration testing at least annually.

   • Internal security assessments and vulnerability scans.

   • Compliance certifications (SOC 2, ISO 27001, or equivalent).

2. Incident Response Plan:

   • Documented procedures for responding to security incidents or data breaches.

   • Incident reporting and escalation protocols.

   • Regular drills and testing of incident response procedures.

3. Backup and Disaster Recovery:

   • Regular backups of all critical data.

   • Geographically distributed backup storage.

   • Tested disaster recovery procedures to ensure business continuity.

4. Secure Data Disposal:

   • Secure deletion or destruction of data when it reaches end-of-life.

   • Use of secure data wiping tools to ensure data cannot be recovered.

   • Certificates of destruction maintained for audit purposes.

C. Organizational Safeguards

1. Employee Training and Awareness:

   • Mandatory data privacy and security training for all employees.

   • Regular phishing simulations and cybersecurity awareness sessions.

   • Confidentiality agreements signed by all employees.

2. Access Monitoring:

   • Logging and monitoring of all access to personal data.

   • Alerts for unusual access patterns or suspicious activity.

   • Regular access reviews to ensure data is accessed only when necessary.

3. Third-Party Management:

   • Data Processing Agreements (DPAs) with all service providers.

   • Background checks and security assessments of vendors.

   • Regular audits of third-party data handling practices.

4. Privacy by Design:

   • Privacy considerations integrated into all new features and systems.

   • Privacy Impact Assessments (PIAs) for high-risk processing activities.

   • Data minimization principle applied (collecting only necessary data).

6.2 Limitations and No Absolute Guarantee

Despite these measures, Deal Chahta Hai cannot guarantee 100% security. You acknowledge that:

1. No system is impenetrable: Even the most robust security measures can be breached by sophisticated attackers.

2. User responsibility: You are responsible for maintaining the confidentiality of your passwords, login credentials, and personal information.

3. Open internet risks: Transmission of data over the internet or wireless networks inherently carries some risk.

4. Third-party risks: Third parties with whom we share data may have different security practices.

5. Insider threats: Malicious insiders may bypass security controls.

6.3 Data Breach Notification

In the event of a personal data breach, Deal Chahta Hai will:

1. Immediately investigate the scope and nature of the breach.

2. Notify affected individuals within 72 hours (or as required by law) if the breach is likely to cause harm.

3. Notify regulatory authorities (Haryana RERA, cybercrime authorities) as mandated.

4. Provide details of the breach, types of data compromised, and recommended steps to protect yourself.

5. Remediate the vulnerability that led to the breach and prevent recurrence.

6. Cooperate fully with authorities and affected parties.

You will receive breach notification via email at the address associated with your account, or via SMS to your registered mobile number.

7. YOUR PRIVACY RIGHTS AND CHOICES

7.1 Right to Access

You have the right to access the personal data Deal Chahta Hai holds about you.

To exercise this right:

1. Email us at hello@dealchahtahai.com with the subject "Data Access Request."

2. Provide identification (name, contact number, email).

3. Specify what data you want to access:

   • [For Buyers/Tenants/Investors]: "All enquiry data," "communication history," "property preferences"

   • [For Sellers/Landlords]: "My property listing data," "interested parties' information," "marketing materials used"

We will provide you with:

• A copy of your personal data in a structured, commonly used, and machine-readable format (CSV or PDF).

• Details of how your data is being processed.

• Information about third parties with whom your data has been shared.

Timeline: We will respond within 15-20 business days of receiving your request.

7.2 Right to Rectification (Correction)

You have the right to request correction of inaccurate or incomplete personal data.

To exercise this right:

1. Contact us via email at hello@dealchahtahai.com or call our support team.

2. Specify the inaccurate data and provide corrected information:

   • [For Buyers/Tenants/Investors]: "My contact details have changed," "I want to update my budget range"

   • [For Sellers/Landlords]: "Update property area details," "Correct the locality information"

3. Provide proof of the correction if available (e.g., updated address proof, property document).

We will:

• Verify the correction request.

• Update your records within 10-15 business days.

• Notify third parties (where feasible) who received the inaccurate data.

7.3 Right to Erasure (Deletion)

You have the right to request deletion of your personal data in specific circumstances (see Section 5.2).

7.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations:

1. If you dispute the accuracy of the data (we can restrict use while we verify).

2. If processing is unlawful and you oppose deletion but request restriction.

3. If you need data for legal claims but don't want us to use it otherwise.

4. If you object to processing (see Section 7.5) but we're verifying legitimate interests.

To exercise this right:

1. Email hello@dealchahtahai.com with details of your restriction request.

2. We will limit processing to storage only until the situation is resolved.

3. We will inform you when restrictions can be lifted.

7.5 Right to Object

You have the right to object to processing of your personal data in certain situations:

[For All Stakeholders]

1. Marketing Communications: You can object to receiving promotional emails, SMS, or calls.

2. Profiling for Marketing: You can object to automated profiling to send targeted offers.

3. Direct Marketing via Cookies: You can object to behavioral tracking for advertising purposes.

4. Legitimate Interest Processing: If we're processing based on legitimate interest, you can object.

[For Sellers/Landlords - Special Provision]

5. Property Marketing: You can request limited or no sharing of your property with certain parties or channels.

6. Photography/Listing Details: You can object to the use of your property images or details in certain marketing channels.

To exercise this right:

1. Reply "STOP" to any SMS or WhatsApp message from us.

2. Click "Unsubscribe" in promotional emails.

3. Email hello@dealchahtahai.com with specific objection details.

4. Use cookie preferences if available on our Platform to opt-out of tracking.

Exceptions: Even if you object, we may continue processing if:

• We have a compelling legitimate interest (fraud prevention, legal compliance).

• Processing is necessary for a contract or legal obligation.

• You have an active listing or transaction in progress.

7.6 Right to Data Portability

You have the right to request a copy of your personal data in a portable, machine-readable format for transfer to another service provider.

This right applies to data you have provided or that was generated based on your activities.

To exercise this right:

1. Email hello@dealchahtahai.com with subject "Data Portability Request."

2. We will provide data in a structured format (JSON, CSV, or XML) within 15-20 business days.

7.7 Right to Withdraw Consent

If processing is based on your consent, you can withdraw that consent at any time.

This applies to:

• Marketing communications.

• Cookie-based tracking.

• Sharing data with specific third parties.

• Use of sensitive personal data.

• [For Sellers/Landlords]: Permission to market your property or use your images.

To withdraw consent:

1. Email us at hello@dealchahtahai.com clearly stating which consent you're withdrawing.

2. Withdrawal is effective immediately but doesn't apply to past processing based on prior consent.

7.8 Right Not to Be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing if such decisions have legal or similarly significant effects on you.

Examples:

• Automated rejection of loan eligibility based solely on algorithmic assessment.

• [For Sellers/Landlords]: Automated rejection of your property listing based on scoring algorithms.

• Automated lead scoring that determines whether you receive communications.

If we use automated decision-making:

• We will inform you of this practice.

• You have the right to request human review or explanation.

• You can object and request manual reconsideration.

8. COOKIES, TRACKING TECHNOLOGIES, AND ANALYTICS

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They remember information about your visit so websites can recognize you on subsequent visits. Cookies can be:

• Session Cookies: Temporary, deleted when you close the browser.

• Persistent Cookies: Stored for a specified period (days, months, or years).

• First-Party Cookies: Set by the website you're visiting (Deal Chahta Hai).

• Third-Party Cookies: Set by other domains (analytics providers, advertisers).

8.2 Types of Cookies We Use

Deal Chahta Hai uses the following categories of cookies:

A. Essential/Functional Cookies

• Purpose: Necessary for the Platform to function (login sessions, security, form submission).

• User Control: Cannot be disabled as the Platform won't function without them.

• Examples: Session ID, CSRF tokens, language preferences.

B. Analytics Cookies

• Purpose: To understand how users interact with the Platform, measure traffic, and identify popular features.

• Providers: Google Analytics, Mixpanel, or similar.

• Data Collected: Pages visited, time spent, clicks, scroll depth, referral source.

• Stakeholder Note: [For Sellers/Landlords] Includes tracking of who viewed your listings and how long they spent on property details.

• User Control: You can opt-out (see Section 8.4).

C. Marketing/Advertising Cookies

• Purpose: To display targeted ads on external websites (Facebook, Google, Instagram).

• Providers: Facebook Pixel, Google Ads, LinkedIn Conversion Pixel, etc.

• Data Collected: Interests, behavior, demographics for ad targeting.

• Stakeholder Note: [For Sellers/Landlords] Used to target potential buyers/tenants based on their behavior and interests.

• User Control: You can opt-out (see Section 8.4).

D. Performance Cookies

• Purpose: To optimize Platform performance (load time, error tracking).

• Providers: Sentry, New Relic, or similar.

• Data Collected: Error logs, performance metrics, technical issues.

E. Social Media Cookies

• Purpose: To enable social media integration (share buttons, social login).

• Providers: Facebook, Twitter, LinkedIn, etc.

• Data Collected: Your social media interactions and profile information (if you use social login).

8.3 Other Tracking Technologies

In addition to cookies, Deal Chahta Hai may use:

1. Web Beacons/Pixels: Invisible 1x1 pixel images embedded in emails or web pages to track if you opened an email or visited a page.

2. Local Storage: Browser storage similar to cookies, persisting for longer periods.

3. Device Identifiers: Unique identifiers on mobile devices for tracking app usage.

4. IP Tracking: Monitoring IP addresses to track repeat visits and location.

5. Cross-Device Tracking: Linking your activity across devices (phone, tablet, laptop) using identifiers or email.

8.4 Your Cookie Choices

A. Browser-Level Control

• Chrome, Firefox, Safari, Edge: You can configure your browser settings to refuse cookies or alert you when cookies are being set.

• Process: Varies by browser. Generally: Settings → Privacy/Security → Cookies.

• Limitation: Disabling all cookies may break Platform functionality.

B. Opt-Out of Analytics

• Google Analytics: Visit https://tools.google.com/dlpage/gaoptout to download the Google Analytics Opt-Out Browser Add-On.

• Mixpanel: Visit https://mixpanel.com/optout to opt-out of tracking.

C. Opt-Out of Targeted Advertising

• Google Ads: Visit https://adssettings.google.com to control personalized ads.

• Facebook Ads: Visit https://facebook.com/ads/preferences to control ad targeting.

• Digital Advertising Alliance (DAA): Visit https://www.aboutads.info/choices for multiple ad network opt-outs.

D. Do-Not-Track (DNT) Signals

• Some browsers include a "Do Not Track" signal. While Deal Chahta Hai respects DNT signals, not all features may work optimally.

8.5 Cookie Consent

When you first visit the Deal Chahta Hai Platform (or if you clear cookies), we may display a cookie consent banner allowing you to:

1. Accept all cookies (essential + analytics + marketing).

2. Accept only essential cookies (Platform will function but limited insights).

3. Customize which categories of cookies you allow.

4. Reject non-essential cookies.

You can change your cookie preferences at any time through a preference link (typically in the footer of the Platform).

9. CONTACT INFORMATION AND GRIEVANCE REDRESSAL

9.1 Data Protection Officer and Privacy Contact

For all privacy-related inquiries, requests, or grievances, contact:

Email: hello@dealchahtahai.com

Subject Line: "Privacy Request," "Data Protection Grievance," or "[Your Stakeholder Type] - Privacy Issue" (e.g., "Seller - Property Listing Privacy")

Website: https://dealchahtahai.com

RERA License Number: RC/HARERA/GGM/3989/3584/2026/24

9.2 How to Submit Privacy Requests

To submit a privacy request (access, correction, deletion, portability, restriction, objection):

1. Email us at hello@dealchahtahai.com with a clear subject line and your stakeholder type.

2. Provide your full name, contact number, email, and stakeholder type (Buyer/Seller/Tenant/Landlord) for identification.

3. Describe your request in detail:

   • [For Buyers/Tenants]: "I request access to all enquiry data and communication history"

   • [For Sellers/Landlords]: "I request deletion of my property listing and associated data"

4. Attach supporting documents if necessary (proof of identity, property documents for listing deletion, etc.).

9.3 Response Timeline

We will respond to your privacy request within:

• Initial Acknowledgment: Within 48 hours.

• Substantive Response: Within 30-45 business days (acknowledgment within 7-10 business days). Complex requests involving multiple data sources or third-party processors may take up to 90 business days.

• Complex Requests: May take up to 30-45 days if we need to gather data from multiple systems or involve multiple stakeholders.

• Denial: If we deny a request, we will explain the reason and your appeal options.

9.4 Privacy Grievance Process

If you believe Deal Chahta Hai has violated your privacy rights:

1. First, contact us at hello@dealchahtahai.com with details of the alleged violation, including your stakeholder type.

2. We will investigate and respond within 7-10 business days.

3. If you're not satisfied with our response, you can escalate to (whichever is applicable):

   • Haryana RERA (which oversees channel partner compliance).

   • National Cybercrime Reporting Portal (NCRP): https://cybercrime.gov.in/

   • State Cyber Appellate Authority (if available in your jurisdiction).

   • Consumer Protection Authority (under Consumer Protection Act, 2019).

9.5 Right to Lodge Complaints with Authorities

You have the right to lodge complaints with regulatory authorities:

1. Haryana RERA:

   • Website: https://haryanarera.gov.in/

   • Address: Mini Secretariat, Sector-1, Panchkula, Haryana 134114

   • Phone/Email: (available on RERA website)

   • For: Privacy violations related to property transactions, listing misuse, or data mishandling by channel partners.

2. National Consumer Redressal Commission (NCRP):

   • Website: https://cybercrime.gov.in/

   • For cybercrime and data breach complaints.

3. Ministry of Electronics and Information Technology (MeitY):

   • If you believe there's a violation of the Information Technology Act.

10. CHILDREN'S PRIVACY

10.1 Age Restriction

The Deal Chahta Hai Platform is not directed at children under 18 years of age. We do not knowingly collect personal data from minors.

10.2 If We Discover Child Data Collection

If we discover that we have collected personal data from a child under 18 years:

1. We will immediately delete that data.

2. We will notify the parent or guardian (if contact information is available).

3. We will not use that data for any purpose.

10.3 Parental Rights

If you are a parent or guardian and believe your child has provided personal data to Deal Chahta Hai:

1. Contact us immediately at hello@dealchahtahai.com.

2. We will verify the minor's status and delete their data upon confirmation.

11. INTERNATIONAL DATA TRANSFERS

11.1 Data Storage and Processing Location

Currently, Deal Chahta Hai primarily stores and processes data within India. However, some service providers (cloud hosting, analytics) may store data on servers located outside India.

11.2 Cross-Border Data Transfer Safeguards

If your data is transferred outside India:

1. We ensure the recipient jurisdiction has laws equivalent to Indian data protection standards.

2. We implement additional safeguards (encryption, restricted access, contracts) for transfers to other countries.

3. We comply with Reserve Bank of India (RBI) guidelines and PMLA requirements for financial data transfers.

11.3 Jurisdictional Notices

• EU/GDPR Users: If you're in the European Union, your data may be subject to GDPR. We'll implement appropriate safeguards (Standard Contractual Clauses, if needed).

• US Users: If applicable, we comply with applicable US privacy laws.

12. RETENTION OF ARCHIVED OR BACKUP DATA

12.1 Backup and Archival

Even after deletion, your data may be retained in:

1. Backup systems: Automatic backups taken regularly may contain older versions of your data.

2. Archive systems: Historical records retained for compliance or audit purposes.

3. Disaster recovery systems: Copies held in case of system failure.

12.2 Backup Deletion Timeline

Deleted data in backups will be manually reviewed and purged during our quarterly backup cleanup process (typically within 90-180 days).

Manual Process Timeline:

· Primary databases: 30-45 days

· Active backups: 90 days

· Archive backups: Up to 180 days during quarterly review

This manual process ensures data integrity while complying with legal retention requirements.

13. THIRD-PARTY LINKS AND EXTERNAL WEBSITES

13.1 External Websites

The Deal Chahta Hai Platform may contain links to:

• Developer websites

• RERA portal (https://haryanarera.gov.in/)

• Bank and loan partner websites

• Aggregator portals

• Social media pages

13.2 No Responsibility for External Sites

Deal Chahta Hai is NOT responsible for:

1. Privacy practices of external websites.

2. Data collection by third parties through external links.

3. Security of external websites or data breaches.

You should review the privacy policies of external websites before submitting personal data to them.

14. COMPLIANCE WITH APPLICABLE LAWS

14.1 Legal Framework

Deal Chahta Hai's data handling practices comply with:

1. Information Technology Act, 2000 and IT Rules, 2011.

2. Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

3. Real Estate (Regulation and Development) Act, 2016 and Haryana RERA Rules.

4. Consumer Protection Act, 2019.

5. Prevention of Money Laundering Act, 2002 (for KYC/AML compliance).

6. Telecom Regulatory Authority of India (TRAI) regulations on commercial communications.

7. Reserve Bank of India (RBI) guidelines on digital payments and lending (where applicable).

8. State and local laws of Haryana and other jurisdictions where we operate.

14.2 No Guarantee of Compliance

While we make best efforts to comply with all applicable laws, changes in legal requirements may require modifications to this Privacy Policy without notice. We recommend periodic review.

15. CHANGES TO THIS PRIVACY POLICY

15.1 Right to Modify

Deal Chahta Hai reserves the right to modify, update, or amend this Privacy Policy at any time.

15.2 Notice of Changes

Material changes will be:

1. Posted on the Platform with an updated "Last Updated" date.

2. Communicated via email to users whose data is significantly affected (based on stakeholder type).

3. Announced on social media or news section (if applicable).

Non-material changes (clarifications, corrections) may be updated directly without notice.

15.3 Continued Use Constitutes Acceptance

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy. If you disagree with changes, you must cease using the Platform.

15.4 Archive of Previous Policies

We maintain archives of previous versions of this Privacy Policy. If you need a copy of a previous version, contact us at hello@dealchahtahai.com.

16. STAKEHOLDER-SPECIFIC APPENDICES

16.1 For Buyers, Tenants, and Investors

Summary of Key Privacy Practices:

• Your enquiry data is retained for 2-3 years to enable follow-up.

• Your data is shared with developers, sellers, or landlords of properties you've enquired about.

• You can opt-out of marketing communications at any time by replying "STOP" or unsubscribing.

• You have the right to delete your data upon request (with certain legal exceptions).

16.2 For Sellers and Landlords

Summary of Key Privacy Practices:

• Your property listing data is retained as long as your listing is active.

• Your contact information is shared with potential buyers/tenants interested in your property.

• You can delete your listing and associated data at any time by written request.

• You can object to sharing your property details with specific channels or parties.

• You have the right to control the use of your property images in marketing.

16.3 For Developers and Channel Partners

Summary of Key Privacy Practices:

• We share lead data (buyer/tenant enquiries) relevant to your projects or partnerships.

• You are responsible for complying with privacy laws regarding the leads you receive.

• You must maintain confidentiality and use lead data strictly for real estate facilitation.

• If you breach this agreement, Deal Chahta Hai may terminate the partnership.

17. ACKNOWLEDGMENT AND CONSENT

By using the Deal Chahta Hai Platform, you acknowledge and agree that:

1. You have read and understood this entire Privacy Policy appropriate to your stakeholder type.

2. You consent to the collection and processing of your personal data as described herein based on your role.

3. You understand the purposes for which your data is collected and used.

4. You consent to sharing your data with developers, sellers, landlords, buyers, tenants, channel partners, and service providers as appropriate.

5. You acknowledge that your data is shared with third parties, and you assume responsibility for reviewing their privacy practices.

6. You understand your privacy rights (access, correction, deletion, etc.) and know how to exercise them.

7. You understand the limitations of security and accept inherent risks of internet communication.

If you do not consent to these terms, you must immediately cease accessing and using the Platform.

18. FINAL TERMS

18.1 Integration with Terms of Use

This Privacy Policy is an integral part of Deal Chahta Hai's Terms of Use. In case of conflict between this Privacy Policy and the Terms of Use, this Privacy Policy takes precedence on privacy-related matters, while the Terms of Use governs all other aspects of Platform usage.

18.2 Entire Agreement

This Privacy Policy, together with the Terms of Use and any other documents expressly referenced, constitutes the entire agreement regarding privacy and data handling between you and Deal Chahta Hai.

18.3 Severability

If any provision of this Privacy Policy is found invalid or unenforceable, that provision will be severed, and the remaining provisions will remain in full force.

END OF PRIVACY POLICY

Last Updated: January 23, 2026