Privacy Policy

Effective Date: August 18, 2026 · Last Updated & Reviewed: September 2026 · Operating Domain: https://www.hemadara.com

1. Operating Legal Entity & Contact Details

The website https://www.hemadara.com is owned and operated by:

2. Categories of Information We Collect

We collect and process only the minimum information necessary to provide plotted real estate township services:

A. Information You Voluntarily Provide

• Lead & Inquiry Data: Full name, 10-digit Indian mobile number (+91), email address, city/state of residence, preferred plot number(s), budget range, preferred facing, and custom message when requesting callbacks, downloading project brochures, or booking site visits.
• Agent & Channel Partner Registration: Full name, mobile number, agency/firm name, designation, real estate experience, AP RERA certificate number (optional), and identification for sales portal access.
• Customer Booking Details: Customer address, identity verification documents for plot allotment agreements under APCRDA / RERA guidelines, payment transaction references, and installment receipts.

B. Authentication & Phone Verification Data (Firebase Phone OTP)

• When authorized team members, sales managers, and registered agents log in to the Hemadara platform, authentication is facilitated via Google Firebase Authentication.
• We process the verified phone number, Firebase Unique Identifier (UID), authentication timestamps, and session security tokens.
• No Passwords: We do not store plain-text passwords; authentication is passwordless via SMS OTP.

C. Technical, Device & Anti-Abuse Telemetry

• Security Verification: Cloudflare Turnstile anti-bot verification tokens to safeguard lead forms and login endpoints against automated brute-force attacks.
• Audit Logs: Timestamps, browser user-agent header, and hashed IP identifiers for rate-limiting enforcement (raw IP addresses are never permanently logged in user profile tables).

3. Purpose & Legal Basis for Processing

We process personal data solely for legitimate business operations and legal compliance:

1. Fulfilling Inquiries & Site Visits: To contact you regarding your requested plot availability, schedule physical site visits to Hemadara Paritala on NH-65, and provide legal title documents.
2. Secure User Authentication: To verify authorized identities via SMS OTP and maintain secure role-based administrative sessions.
3. Statutory & Transactional Records: To document customer reservations, payment receipts, and statutory compliance under the Real Estate (Regulation and Development) Act (RERA) and Indian Partnership Act.
4. Platform Security: To detect, investigate, and prevent fraudulent inquiries, spam, and cyber threats.

4. Google User Data & Firebase Phone Authentication Policy

5. Data Processors & Infrastructure Providers

We partner with enterprise infrastructure providers bound by strict confidentiality and security covenants:

6. Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered:

• General Inquiries & Leads: Retained for a maximum of 24 months from the date of last customer contact, after which inactive records are permanently expunged or anonymized.
• Booked Plots & Legal Agreements: Retained for the statutory period required by Indian real estate laws (AP RERA), tax laws, and Section 58 of the Indian Partnership Act.
• Audit & Security Logs: Security rate-limiting counters are automatically refreshed and purged on a 15-minute to 24-hour sliding window.

7. Your Rights & How to Request Data Deletion

Under the Digital Personal Data Protection Act (DPDPA), 2023, you have rights regarding your personal information:

• Right to Access: You may request a summary of the personal data we hold about you.
• Right to Correction: You may request correction or updating of inaccurate or outdated information.
• Right to Erasure (Deletion): You have the right to request the permanent deletion of your personal data.
• Right to Withdraw Consent: You may withdraw your consent for future marketing communications at any time.

8. Cookies & Local Storage

We use strictly necessary technical cookies to support core site functionality:

• hemadara_access_token & hemadara_refresh_token: Secure, HTTP-only, SameSite cookies used exclusively to maintain authorized team/agent logins.
• admin_otp_challenge: Ephemeral signed token used to verify 6-digit SMS OTP challenges (expires in 15 minutes).
• We do not load optional Google Analytics tags or send website browsing events before you grant analytics consent. If configured, Google Analytics may use first-party measurement cookies after you opt in.
• We remember your analytics preference in hemadara.analytics.consent.v1 on your device; you can change it using the “Privacy choices” control.
• With consent, we measure page views, project-filter and project-card interactions, form engagement and conversion events. Analytics excludes name, mobile number, email and form message contents.
• Campaign attribution (source, medium and campaign) is retained for the current browser session only after analytics consent; enquiry details submitted with contact consent are processed separately for CRM follow-up.
• Optional marketing updates require a separate, unchecked opt-in on enquiry forms.

9. Children's Privacy

The services offered on https://www.hemadara.com are strictly intended for individuals who have reached the age of majority (18 years of age or older in India) capable of entering into legally binding real estate agreements. We do not knowingly collect personal data from minors.

10. Grievance Officer & Statutory Redressal

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Redressal Officer are as follows:

11. Updates to this Privacy Policy

We may periodically revise this policy to reflect changes in our legal obligations or operational workflows. Any revisions will be posted directly to https://www.hemadara.com/privacy with an updated revision date.