Privacy Policy

1. Introduction

This notice explains how AB Housing Realty Pvt. Ltd. ("AB Housing", "we", "us") processes personal data when you browse https://abhousingrealty.com, submit an enquiry, request a site visit or brochure, contact us, or interact with our WhatsApp and concierge chat support. It should be read with our Terms & Conditions and Property Disclaimer.

Where we refer to the Digital Personal Data Protection Act, 2023 (DPDP Act), we implement consent as free, specific, informed, unconditional and unambiguous, recorded with notice and consent version and timestamp as required by our lead controllers.

2. Data fiduciary & contact

AB Housing Realty Pvt. Ltd. is the data fiduciary for personal data collected through this site.

3. What we collect

We collect only the minimum necessary for your request. Categories we may process:

• Enquiry data: name, phone, optional email, message, project / locality / configuration interest, preferred contact time.
• Site-visit & brochure data: the same enquiry fields plus requested date/slot where applicable.
• Developer intake: organisation, contact, and project material where you submit via the developer form (moderated, pending review before any publication).
• Consent record: consent flag, notice version (1.0), timestamp, IP and user-agent at submission for abuse protection and audit.
• Automatically collected: browser, device and approximate location inferred from IP, pages viewed, and on-site interactions. This includes data collected via cookies/pixels where analytics is enabled (see next section).
• Chatbot interactions: messages you send to the concierge at POST /api/chat (English-only, rate-limited) and the project/locality context we use to answer from published data.
• Communications: records of calls, WhatsApp messages and emails exchanged when you ask us to contact you.

We do not collect payment details through these forms. Any payment or booking is handled directly with the developer under their own terms.

4. Why we use it & lawful basis

We use personal data to:

• Respond to your enquiry and provide advisory, site-visit or brochure support.
• Maintain a consent and audit record for compliance (Lead, VisitBooking, BrochureDownload, DeveloperSubmission).
• Protect forms against spam/abuse (honeypots, rate limits, audit logs) and secure admin access.
• Improve our site and advisory coverage in aggregate — not to sell personal data.

Where the DPDP Act applies, our basis is your consent, given freely via the required checkbox before submission. You may withdraw that consent at any time (see section 8). We do not bundle unrelated marketing consent into a mandatory service request.

5. Cookies & analytics

We use strictly necessary cookies for session, CSRF and security headers, and — where a measurement ID is configured — analytics cookies/pixels.

• Google Analytics 4 (GA4): when ga4_measurement_id is set in Site Settings, pages load googletagmanager.com/gtag/js and log page views and labelled on-site events (e.g., submit_lead_form, click_call). The payload is PII-free (page_type, content_slug, cta_placement only). CSP restricts loading to googletagmanager.com and google-analytics.com.
• Meta Pixel: pages load connect.facebook.net/en_US/fbevents.js and send PageView to Meta. We use it for aggregated audience measurement and ad delivery. You can control ad personalisation in your Facebook ad preferences and via browser cookie settings; a noscript 1×1 at facebook.com/tr is used when JS is disabled. CSP restricts script loading to connect.facebook.net.
• Controls: you can block or delete cookies in your browser and use GA opt-out mechanisms at tools.google.com/dlpage/gaoptout. Blocking necessary cookies may break form submission.
• WhatsApp / phone links: clicking a wa.me or tel: link hands off to WhatsApp/your dialler under their own policies.

We do not sell analytics or pixel data. A dedicated cookie-consent banner is not yet deployed — pending legal decision — and will replace this implied-consent model if required.

6. How we share personal data

We do not sell personal data. Sharing is limited to:

• Internal advisors: authorised AB Housing personnel who need the data to fulfil your request (role-restricted via admin).
• Processors acting on our behalf: hosting (Hostinger), transactional email and form delivery, and — where approved — Google Sheets / CRM sync. Pending confirmation: the exact list of approved processors will be published here after legal sign-off. No training-crawler or public indexer receives personal data.
• Legal or safety disclosures: where required by law or to protect rights, safety or the integrity of our systems.

7. Retention & security

Access is restricted to authorised personnel and protected by role checks, audit logging, CSP, and rate limits. Retention, deletion and export workflows require legal sign-off on lawful basis and are not yet final; until then we apply this interim position:

8. Your rights & how to withdraw consent

Subject to applicable law, you may request access to, correction of, or deletion/anonymisation of personal data we hold about you, and you may withdraw consent for further contact. Withdrawing consent does not affect processing already carried out lawfully before withdrawal.

• Use the contact block in section 2, or the Contact page, stating "Privacy request" and the phone/email used in your enquiry. We aim to respond within 30 days, sooner where the DPDP Act requires.
• After withdrawal we will suppress further marketing/advisory outreach and limit processing to what is required for legal compliance or to respect your withdrawal.
• We may need to verify your identity before acting on a request.

9. Children

Our services are directed to adults researching property. We do not knowingly collect personal data from children. If you believe a child has submitted data, contact us so we can delete it.

10. International transfers

Our servers and primary processors are in India. Where an approved processor stores or processes data outside India, transfers will be made under safeguards approved in our final legal review. No transfer is made for sale to third parties.

11. Updates & contact

We may update this notice when our services or legal requirements change. Material changes will be reflected in a new Version 1.0 published on this page. Continued use after an update constitutes acceptance of the revised notice where consent is not otherwise required.

Questions about this policy or how to exercise your rights: