Property Expert Realtors is a Delhi-NCR property information and enquiry platform. We publish decision-grade facts about new-build residential projects across multiple builders, and pair each project with an honest "what to consider" section.
We operate from Sector 65, Noida, Uttar Pradesh. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act) we act as a Data Fiduciary. For visitors to whom the EU/UK GDPR applies, we act as a Data Controller.
This policy explains what personal data we collect, why, the legal basis for it, who it may be shared with, how long we keep it, and the rights you have.
• We do not require you to create an account. There is no login and no user profile.
• We collect personal data only when you choose to contact us through a form on the site, or when you contact us by phone or WhatsApp.
• We do not sell or rent your details. We do not run advertising or retargeting trackers.
• You can ask us to show you, correct, or delete the data we hold about you.
The enquiry and data-request features on this site can be switched on or off. On a default deployment they are switched off, and no personal data is collected through the site at all — the only data the site holds in that state is a session cookie that carries no personal information.
This policy describes the position when the enquiry forms are enabled, so that it is accurate at the point you can actually submit your details. If you are reading this and no enquiry form appears on the site, the collection described in Section 4 is not yet active.
4.1 Data you give us through enquiry forms
The site offers up to four enquiry channels. When a channel is enabled and you use it, we collect:
On every form:
• Your name (required)
• Your mobile phone number (required; normalised to a 10-digit Indian mobile number)
• Your consent to be contacted (required — see Section 6)
• The page you enquired from, and any campaign (UTM) parameters, so we know how you reached us
Depending on the form:
• Email address — optional for a general enquiry; required to receive a brochure download
• The project you are interested in
• Your budget and property type — optional, used only to understand your enquiry
• A message you write (up to 2,000 characters)
• Your preferred callback time, or a preferred site-visit date and time
Purpose: to respond to your enquiry, arrange a callback or site visit, send a brochure you asked for, and keep a record of the enquiry. We do not use these details for anything you have not asked for.
4.2 Technical data collected with an enquiry
When you submit an enquiry form, we also record, as evidence that the enquiry and consent are genuine:
• Your IP address
• Your browser's user-agent string (device/browser information)
• The date, time and version of the consent you gave
We disclose this because it is personal data. It is retained with the enquiry and used for security, fraud-prevention and to prove that consent was validly obtained.
4.3 Data you give us off the site
If you call us or message us on WhatsApp, you share whatever you choose to tell us (typically your name, number and what you are looking for). This is handled as an ordinary business enquiry.
4.4 Data collected automatically
• A session cookie and a CSRF-protection token are set so the site works and stays secure. Neither carries personal data such as your name, number or email. See our Cookie Policy.
• If, and only if, we later enable privacy-friendly analytics, we may collect anonymous, aggregate usage statistics. See Sections 8 and 9.
We do not collect special-category / sensitive personal data, and we ask you not to include it in free-text messages.
For each purpose, the basis under the DPDP Act 2023 and under the GDPR:
• Responding to your enquiry / callback / site visit / brochure — Your consent · Consent, and/or performance of steps taken at your request (Art. 6(1)(b))
• Security, anti-fraud and abuse prevention (IP, user-agent, rate-limits) — Legitimate purpose incidental to providing the service · Legitimate interests (Art. 6(1)(f))
• Keeping a record of consent — Legal/records obligation · Legal obligation / legitimate interests
You are not required to give consent, but if you do not, we cannot process an enquiry submitted through the form.
When you submit an enquiry, you tick a consent box. The current wording is:
"I agree to be contacted about this enquiry by phone, SMS, email or WhatsApp, and to Property Expert Realtors storing these details for that purpose, as described in the privacy policy."
We store the version and timestamp of the consent you gave, and keep an unchangeable record of the exact wording each version referred to, so we can always show you what you agreed to. We do not store special-category data in this record.
You may withdraw your consent at any time (see Section 12). Withdrawing consent does not affect the lawfulness of processing before withdrawal, and it may mean we can no longer help with an open enquiry.
We use a minimal set of cookies. In its default state the site sets only a session cookie and a CSRF token, neither of which identifies you personally, and there are no advertising or retargeting cookies. Full details, including any cookies set only when optional features are switched on, are in our Cookie Policy.
By default, no third-party analytics runs on this site and no analytics script is loaded.
If analytics is enabled in future, our intended provider is Plausible, which is cookieless and does not track you across sites or collect personal data. If a cookie-setting analytics provider (such as Google Analytics 4) were ever used instead, this policy and the Cookie Policy would be updated first and appropriate consent obtained.
We keep third-party data sharing to the minimum. Each service below is switched off by default and only becomes a processor of your data if and when we enable it; we will name the specific provider here once selected.
Each potential service, what it would receive, and its current status:
• Email / SMTP provider — Enquiry acknowledgement to you; internal lead alerts · Provider not yet selected; e-mail is logged only by default
• Google reCAPTCHA — Your IP address and interaction data, sent to Google, to tell humans from bots · Off by default. Only if both keys are set
• Analytics (Plausible / GA4) — Anonymous usage data (Plausible is cookieless) · Off by default
• WhatsApp notification webhook — Your name, phone, email, project and message, forwarded to a configured business/automation endpoint · Off by default. Only if a webhook URL is set
• SMS provider — Enquiry type, your name, phone and project · Off by default
• Error tracking (Sentry) — Diagnostic error data, configured not to send personal data · Off by default
• Cloud object storage (AWS S3) — Brochure/media files · Not configured; files stored locally by default
We do not sell, rent or trade your personal data, and we do not share it for third-party advertising.
Our databases (leads and data requests) run on MySQL with Redis for cache/queue, and the application time zone is India (Asia/Kolkata).
The hosting provider and the country where the site is hosted have not yet been finalised. We will state the hosting region here once decided.
If any enabled processor (for example Google reCAPTCHA, or a cookie-based analytics provider) processes data outside India or the EEA, that transfer will be covered by the safeguards those providers offer, and disclosed here. Under the DPDP Act, cross-border transfer is permitted except to countries the Government of India may restrict.
We are finalising a retention schedule for enquiry data and data-principal requests. At present the code applies no automatic deletion; records persist until manually erased.
We will state a specific retention period here (for example, how long after an enquiry closes we keep it) before enquiry forms go live. When the period expires, or when you ask us to erase your data, records are anonymised so they no longer identify you.
Under the DPDP Act 2023 you may:
• Access a summary of the personal data we hold about you and how it is processed.
• Correct or update inaccurate or incomplete data.
• Erase your personal data where it is no longer needed.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Raise a grievance with our Grievance Officer (Section 15).
• Withdraw consent at any time.
If GDPR applies to you, you additionally have the right to:
• Restrict or object to processing.
• Data portability — receive your data in a structured, machine-readable format.
• Lodge a complaint with your local supervisory authority.
How to exercise your rights
When the data-request feature is enabled, you can submit an access, correction or erasure request through the site by providing the phone number or email you contacted us with. This feature is off by default and fails closed; while it is off, please email or message us instead (Section 16).
For security, we verify your identity before acting on any request that would disclose or delete data. For an erasure request we locate every enquiry matching your phone number or email and anonymise each — replacing identifying fields and recording what was removed (never the values) and by whom. Access and correction requests are handled by a person, not automatically. We do not permanently hard-delete records in a way that would bypass this audited path.
The site is intended for adults making property decisions and is not directed at children. Under the DPDP Act we do not knowingly process the personal data of anyone under 18 without verifiable parental/guardian consent, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child's data has been submitted, contact us and we will delete it.
We apply reasonable technical and organisational security measures, including: HTTPS with HSTS on secure connections, standard security response headers, mandatory app-based two-factor authentication for staff/admin access, CSRF protection, validation of all submitted input, and encrypted session cookies. Access to enquiry data is limited to authorised staff, and erasure is audit-recorded.
We do not claim, and you should not assume, encryption at rest of the database, any security certification (such as ISO 27001 or SOC 2), or that the site is fully or perfectly secure. No system is completely secure.
Under the DPDP Act 2023 we must name a contact for grievances, and under GDPR a data-protection contact where required.
A named Grievance Officer / Data Protection Officer and a dedicated privacy email have not yet been designated. Until they are, you can reach us using the details in Section 16, and we will respond within the timelines required by law.
Property Expert Realtors — Sector 65, Noida, Uttar Pradesh, India.
To make an enquiry, exercise your rights or raise a privacy question, please contact us.
We may update this policy as our practices, the features we enable, or the law change. The "Last updated" date at the top shows the current version. Material changes will be highlighted on the site. Continuing to use the site after a change means you accept the updated policy where the law allows.