Last Updated: July 12, 2026 | Effective Date: July 12, 2026 | Version: 1.0

1. Introduction

Welcome to The Urban Estate ("we", "us", or "our"). We operate the real estate SaaS marketing and digital advertising platform located at https://theurbanestate.co. This Privacy Policy explains how we collect, use, process, store, share, and protect your personal data when you visit our Site or submit inquiries. It has been drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, while incorporating principles suitable for future global compliance, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), Australian Privacy Act, and UAE Personal Data Protection Law (PDPL).

2. Personal Data We Collect

We only collect minimal personal data necessary to provide our digital marketing and lead-matching services. We collect:

Identity Data: Full name.
Contact Data: Email address, mobile/telephone number.
Preferences & Inquiry Data: Budget range, preferred property location, property configurations of interest, and custom message details.
Technical Data: IP address, browser type, device information, and interaction records via cookies.

We do NOT collect sensitive personal data such as financial account numbers, credit/debit cards, Aadhaar numbers, passports, or national identity documents from website visitors.

3. Lawful Bases for Processing

We process your data under the following legal bases:

Consent: You provide explicit, voluntary consent when submitting lead forms, contact forms, or newsletter signups.
Legitimate Interests: To analyze website performance, optimize user experience, and monitor platform security.

4. How and Why We Use Your Personal Data

Lead Matching & Inquiry Routing: To forward your inquiry details directly to the verified Builder/Developer whose project you expressed interest in.
Customer Support: To contact you to clarify or respond to your submitted query.
Marketing Communications: To send you property updates, blog highlights, and locality guides (only if you have opted in).
Analytics and UX Improvement: To evaluate user behavior on our platform and improve our page layouts.

5. Data Sharing & Disclosure

5.1. Sharing with Developers: When you submit an inquiry regarding a specific real estate project listed on our Site, you consent to our sharing of your Name, Email, Phone Number, and Inquiry Preferences with the respective Builder or Developer of that project. Once shared, the Developer acts as an independent Data Controller of your personal data.

5.2. Service Providers: We may share technical analytics or transactional email delivery data with trusted third-party cloud service providers acting as Data Processors under strict confidentiality terms.

5.3. Legal and Regulatory Disclosures: We may disclose personal data if required by law, court order, or government authority (e.g., MahaRERA inquiries).

6. International Data Transfers

If we expand operations globally and transfer personal data outside of India, we will ensure that such transfers comply with appropriate safeguards, such as Standard Contractual Clauses (SCCs), adequacy decisions, or statutory cross-border requirements under the DPDP Act and GDPR.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Lead inquiry logs are retained for a maximum of twenty-four (24) months, unless a longer retention period is required by law. Analytical visitor logs are retained for twelve (12) months.

8. Your Legal Rights

Depending on your country of residence (India, EU, UAE, Australia, etc.), you possess the following rights regarding your personal data:

Right to Access & Confirmation: Confirm if we process your data and receive a copy.
Right to Correction: Update or correct inaccurate or incomplete data.
Right to Erasure (Right to Be Forgotten): Request deletion of your personal records.
Right to Withdraw Consent: Revoke consent for processing at any time.
Right to Data Portability: Request transfer of your data to another entity in a structured, machine-readable format.
Right to Nominate (India DPDP Act): Nominate any individual to exercise your rights in the event of death or incapacity.
Right to Restrict or Object: Object to direct marketing or profiling.
Right to File Grievance: Seek redressal through our Grievance Officer or appeal to the Data Protection Board of India (DPBI) or regional supervisory authorities.

9. Data Security

We implement appropriate technical, organizational, and physical security measures (including SSL/HTTPS encryption, access control protocols, and firewalls) to protect your data from unauthorized access, alteration, disclosure, or destruction.

10. Children's Privacy Protection

Our Platform is not intended for use by children. Under the India DPDP Act, GDPR, and other global frameworks, we do not knowingly collect, process, or solicit personal data from individuals under the age of 18 (or the applicable statutory age of majority in your jurisdiction). If we discover that we have inadvertently collected data from a child without verifiable parental consent, we will delete it from our systems immediately.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated revision date.

12. Contact Information

To exercise your rights, please contact our Grievance Redressal Officer at:
Email: [email protected]
Grievance Officer: Legal & Compliance Department
Address: Mumbai, Maharashtra, India (Virtual/Remote Office)