Privacy Policy

1. Introduction

This Privacy Policy applies to MumbaiProperty (Platform), owned and operated by Metro Property Solutions, a Proprietorship registered under the laws of India as Proprietorship. By accessing or using the Platform, you agree to the collection and use of your information in accordance with this Privacy Policy. We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act), IT Act 2000, and all applicable Indian laws.

2. Information We Collect

3. Purpose of Data Collection

• Display relevant listings and personalised recommendations
• Connect buyers, sellers, brokers, and developers
• Provide customer support and grievance resolution
• Send alerts, updates, and promotional communications (with explicit consent — see Section 5)
• Facilitate loan assistance via third-party partners (with explicit consent)
• Verify broker/agent credentials and RERA registration
• Comply with legal and regulatory obligations
• Fraud detection and platform security

4. Data Sharing & Disclosure

We may share your data:

• With property owners, brokers, developers upon submission of an enquiry
• With third-party service providers including SMS gateways, WhatsApp Business API providers, email providers, and analytics tools (including Google Analytics, Meta Pixel)
• With loan partners when financial assistance is requested by you
• With government authorities or law enforcement when required by law

This includes cloud hosting providers, CRM systems, customer support tools, and communication service providers.

We do NOT sell your personal data to any third party.

5. WhatsApp Communication Consent

By registering on the Platform, you will be presented with an explicit opt-in checkbox to consent to receiving communications via WhatsApp. This is an active, informed consent — not implied or passive.

If you provide active consent, you agree to:

• Receiving property-related communications via WhatsApp
• Having your contact details shared with relevant brokers/developers via WhatsApp for responding to your enquiry
• Being contacted by our team via WhatsApp for support or service communication

Promotional WhatsApp messages require explicit opt-in at registration. Transactional messages (account updates, lead notifications, subscription alerts) may be sent without additional consent while your account remains active.

You may opt out of promotional WhatsApp messages at any time by sending STOP via WhatsApp or by contacting support@mumbaiproperty.co.in.

6. User Consent

By using the Platform, you provide free, informed, and explicit consent to collection and processing of your personal data as described in this Policy. You have the right to withdraw consent at any time by contacting support@mumbaiproperty.co.in.

7. Cookies & Personalisation

We use the following types of cookies:

• Essential Cookies: Required for Platform functionality
• Analytics Cookies: Understand user interaction (e.g., Google Analytics)
• Marketing Cookies: Display relevant ads (e.g., Meta Pixel)
• Preference Cookies: Remember your settings

Users may opt out of targeted advertising and tracking technologies through browser settings, device permissions, or available opt-out tools provided on the platform.

Users may manage or disable cookies through their browser settings or through the cookie consent banner available on the platform. Disabling certain cookies may affect the functionality of the platform.

8. Data Security

Security measures we implement:

• SSL/TLS encryption for data in transit
• Role-based access controls for internal data access
• Regular security audits and vulnerability assessments
• Encrypted storage for sensitive data
• Two-factor authentication for administrative access

No system is completely secure. Users must maintain strong passwords and must not share credentials. Any suspected breach of your account credentials must be reported to us within 24 hours at support@mumbaiproperty.co.in.

9. Data Retention Policy

• Active account data: Duration of account being active
• Enquiry and lead data: 3 years from date of enquiry
• Transaction and payment records: 7 years (as required under Indian financial laws)
• Deleted account data: Purged within 90 days of deletion request, unless retention required by law

After the applicable retention period, data will be securely deleted or anonymised. Users will not be contacted after the applicable retention period expires.

10. Data Localisation

Personal data of Indian users is stored on servers located within India, in compliance with applicable data localisation requirements. Where data is processed by third-party providers outside India, appropriate safeguards are in place as required by law.

11. User Rights Under DPDP Act 2023

• Right to Access: Request a summary of personal data held about you
• Right to Correction: Request correction of inaccurate data
• Right to Erasure: Request deletion of personal data (subject to legal obligations)
• Right to Data Portability: Request a copy of your data in machine-readable format
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer
• Right to Nominate: Nominate a person to exercise your rights in case of death or incapacity

To exercise any of the above rights, contact: support@mumbaiproperty.co.in. Requests will be acknowledged within 24 hours and resolved within 15 working days.

12. Data Deletion Request

Users may request deletion of their account and personal data by contacting privacy@mumbaiproperty.co.in. Requests will be processed within 30 days, subject to legal retention requirements. We will confirm deletion in writing once complete.

13. Data Breach Notification (72-Hour Rule)

In the event of a personal data breach:

• We will notify the Data Protection Board of India as required under DPDP Act 2023
• Affected users will be notified within 72 hours of becoming aware of the breach
• Notification will include: nature of breach, data affected, remedial measures taken, and contact for further queries
• All breaches will be recorded in our internal breach register for regulatory compliance

14. Data Misuse & Protection

Users are strictly prohibited from extracting, copying, scraping, or misusing personal data of other users obtained through the Platform. Violation may result in immediate account suspension and legal action under the IT Act, 2000 and DPDP Act, 2023.

15. Third-Party Services

Third-party tools used on our Platform include:

• Google Analytics — usage analytics and traffic analysis
• Meta Pixel — advertising and remarketing
• WhatsApp Business API — user and broker communication
• Payment gateway providers — for subscription and payment processing

Each third-party provider operates under their own privacy policy. We do not guarantee the privacy practices or security of third-party providers. Users interacting with third-party services do so at their own discretion.

16. Children’s Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will delete it promptly.

17. Policy Updates

We may update this Policy from time to time. For material changes, we will notify users via email or a prominent notice on the Platform at least 7 days before the change takes effect. Continued use after the effective date constitutes acceptance of the revised Policy.

18. Grievance Officer (IT Rules 2021 & DPDP Act 2023)

• Name: Nishit Bhadra
• Designation: Grievance Officer
• Entity: Metro Property Solutions (Proprietorship)
• Email: support@mumbaiproperty.co.in
• Address: 1st Floor, Arihant Royale, Balrajeshwar Road, Mulund West, Mumbai, Maharashtra — 400 080
• Working Hours: Monday to Friday, 10:00 AM to 6:00 PM IST

Grievances will be acknowledged within 48 hours and resolved within 15 working days.

19. Contact Information

• Entity: Metro Property Solutions
• Email: support@mumbaiproperty.co.in
• Website: www.mumbaiproperty.co.in