Privacy Notice & Policy
Committed to safeguarding your privacy, personal data rights, and digital trust across India.
Last Revised: October 2026 | Effective Date: Under DPDP Rules (India)
This Privacy Notice is issued by Technoculture Building Centre Private Limited (operating under the registered trade brand “Vastu Vihar”), as the Data Fiduciary, to all visitors, buyers, customers, and individuals (“Data Principals”) interacting with our website, projects, digital applications, and customer support channels.
In compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable Information Technology rules of India, this document provides an itemized notice of the personal data we collect, the lawful purposes for processing, and the comprehensive statutory rights guaranteed to you.
1. Identity of the Data Fiduciary
Under the DPDP Act, the entity determining the purpose and means of processing your personal data is:
- Data Fiduciary Name: Technoculture Building Centre Private Limited (Vastu Vihar)
- Corporate Headquarters: 417, 419, 4th Floor, Aashiana Tower, Exhibition Road, Old Jakkanpur, Lodipur, Patna, Bihar - 800001, India.
- Official Email: info@vastuvihar.org
- Privacy & Grievance Redressal Desk: privacy@vastuvihar.org
2. Key Definitions in Plain Language
Data Principal
The individual to whom the personal data relates (i.e., you, as a home buyer, prospective customer, or website visitor).
Data Fiduciary
Vastu Vihar, which determines the purpose and means of processing personal data in accordance with the law.
Personal Data
Any data about an individual who is identifiable by or in relation to such data (e.g., name, phone number, national ID, digital footprint).
Consent Manager
An interoperable platform registered with the Data Protection Board through which a Data Principal may give, manage, review, or withdraw consent.
3. Itemized Notice of Personal Data Collected & Purpose
As per Section 5 of the DPDP Act, we only collect personal data that is necessary for specified, explicit, and legitimate real estate purposes:
A. Data Provided Directly by You
- Inquiry & Contact Details: Full name, mobile number, email address, current city of residence.
Purpose: To respond to inquiries, send model brochures, share verified price lists, arrange site visits, and coordinate home buyer consultations. - Property Preferences & Financial Range: Preferred project location, villa/apartment model preference, budget range, and loan assistance requests.
Purpose: To recommend tailored township phases matching your housing requirements. - Booking & Statutory KYC Documents: PAN card, Aadhaar card (masked/offline verification as per UIDAI norms), address proof, bank details, and photograph upon formal booking.
Purpose: For legal agreement drafting, property registration, stamp duty, RERA statutory reporting, and Prevention of Money Laundering Act (PMLA) compliance.
B. Digital & Technical Data Collected Automatically
- Device & Network Identifiers: IP address, device type, operating system, browser version, and approximate location.
- Usage Interactions: Pages viewed, interactive floor plans visited, session duration, and referral sources.
Purpose: To maintain website security, prevent fraudulent bot traffic, and optimize load speeds across desktop and mobile devices.
4. Lawful Grounds for Processing
Under Section 4 and Section 6 of the DPDP Act, Vastu Vihar processes personal data strictly based on:
- Valid & Explicit Consent: Obtained through affirmative, unambiguous action (such as submitting an inquiry form, booking request, or accepting cookie categories). You are never subjected to pre-ticked consent boxes or bundled non-essential permissions.
- Legitimate Uses (Section 7): Fulfilling obligations under property sale contracts, facilitating banking/home loan disbursements requested by you, complying with court orders, RERA directives, or tax authorities.
5. Your Statutory Rights under the DPDP Act
The DPDP Act endows you with unequivocal, enforceable rights regarding your personal data:
Right to Access Information
You have the right to request a summary of the personal data being processed by us and the identities of all third-party Data Processors with whom it has been shared.
Right to Correction & Erasure
You can request the correction of inaccurate personal data, completion of incomplete data, or complete erasure of data that is no longer necessary for its initial purpose.
Right to Withdraw Consent
You have the right to withdraw your consent at any time as easily as it was given. Upon withdrawal, we cease processing your personal data, subject to statutory retention laws.
Right to Nominate
You may designate an individual who will inherit the right to exercise your data rights in the unfortunate event of death or incapacity.
6. Protection of Children & Persons with Disabilities
In strict adherence to Section 9 of the DPDP Act, 2023:
- Our website, architectural models, and real estate offerings are directed exclusively at individuals of legal contracting age (18 years and above).
- We do not knowingly collect or process personal data of children (under 18 years) without prior verifiable consent from their parent or lawful guardian.
- We strictly refrain from tracking, behavioral monitoring, or targeted profiling directed at children.
7. Cookie Policy & Real-Time Consent Management
We deploy cookies strictly in compliance with consent guidelines. Cookies are classified into three distinct categories:
- Strictly Necessary Cookies: Essential for foundational website navigation, security, and responsive layouts. Always active and cannot be toggled off.
- Analytics & Performance Cookies: Help us measure anonymous visitor metrics and phase popularities to improve township planning. Optional and inactive by default.
- Marketing & Personalization Cookies: Enable relevant real estate recommendations and third-party media embeds (e.g. YouTube virtual walk-throughs). Optional and inactive by default.
8. Data Retention & Purpose Limitation
In compliance with Section 8(7) of the DPDP Act, personal data is retained strictly as long as necessary to satisfy the purpose for which it was collected:
- General Inquiry Data: Retained for a maximum of 24 months from the last date of interaction unless renewed by consent.
- Property Booking, Agreement & Financial Records: Retained for statutory periods mandated under Real Estate Regulatory Authority (RERA) regulations, the Companies Act 2013, and Indian Income Tax regulations (ordinarily 8 years following the completion of transaction).
- Secure Deletion: Upon expiry of the retention window or upon your valid erasure request, all digital records are securely deleted or irreversibly anonymized.
9. Technical & Organizational Security Safeguards
We deploy robust, multi-layered security controls to protect against unauthorized access, loss, or personal data breach:
- Transport Encryption: End-to-end TLS/HTTPS encryption across all data transmitted between your browser and our servers.
- Access Governance: Role-based access control (RBAC), multi-factor authentication (MFA), and audit logging for administrative staff.
- Data Breach Protocol: In the unlikely event of a personal data breach affecting your information, we maintain strict incident response procedures to notify the Data Protection Board of India and impacted Data Principals in the manner prescribed by law.
10. Grievance Redressal & Data Protection Officer
If you have questions, wish to exercise any of your statutory rights (Access, Correction, Erasure, Nomination, or Withdrawal of Consent), or have a grievance, you can contact our dedicated officer:
Data Protection & Grievance Redressal Officer
Designated under Section 8(9) & Section 13 of the DPDP Act, 2023
Escalation to Data Protection Board of India (DPBI): If you do not receive a resolution from our Grievance Officer within 30 days, or if you are dissatisfied with the resolution provided, you hold the statutory right to file a complaint directly before the Data Protection Board of India in accordance with Section 13(3) of the DPDP Act.