Legal · Real Building Constructions Pvt. Ltd.

Privacy Policy

How Real Building Constructions Private Limited (RBC Group) collects, uses, shares and protects your personal data when you use therbcgroup.com or contact us.

Effective 25 October 2026

1. Who we are

This policy is issued by Real Building Constructions Private Limited, trading as RBC Group ("RBC Group", "we", "us"), a company incorporated in India on 2 September 2021 (GSTIN 03AALCR2528L1Z8), with its registered office at SCO 2B, SBP Lifestyle Square, Kharar–Landran Road, Sector 116, Mohali (SAS Nagar), Punjab 140301, India.

We are the Data Fiduciary for personal data collected through https://therbcgroup.com (the "website") and through enquiries that begin on it. This policy is issued under the Digital Personal Data Protection Act, 2023 and the rules made under it (the "DPDPA"), and the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent they apply.

2. What we collect

Information you give us. When you submit the enquiry form: your name, phone number, e-mail address, the project or property type you are interested in, your message, and a record of your consent (that you ticked the consent box, with the date and time). When you call us or write to us on WhatsApp: your phone number, your WhatsApp profile name and the content of your messages.

Information collected automatically. Your IP address, browser and device type, the pages you view and the page that referred you. Cloudflare collects this when it serves and protects the website.

What we do not ask for. The website does not ask for passwords, bank or card details, health information or identity documents; please do not put them in the message box. If you book a property, we will collect the documents that the law and the booking terms require (such as identity, address and PAN details) at that stage, and this policy will apply to them.

3. Why we use it and on what basis

We process your personal data only for these purposes:

  • to respond to your enquiry, arrange site visits and give you information on the project, unit or price you asked about;
  • to contact you by phone call, WhatsApp, SMS or e-mail about that enquiry and, where you have agreed, about our other projects and offers;
  • to keep the website secure and to filter spam and automated submissions;
  • to understand, in aggregate, how the website is used so that we can improve it;
  • to comply with law, a court order or a lawful direction of an authority.

Our basis is your consent, given by ticking the consent box on the enquiry form. Where you contact us yourself by phone or WhatsApp, our basis is the legitimate use recognised by Section 7(a) of the DPDPA for data you provide voluntarily for a specified purpose. Security processing and record-keeping rest on our legal duties to protect personal data and to comply with law. We will not use your data for an unrelated purpose without first asking you.

4. How long we keep it

We keep enquiry data for up to 36 months from your last interaction with us, unless a transaction follows. If you book a property, we keep your data for as long as the booking or agreement runs and afterwards for the periods required by tax, company and real-estate laws.

If you withdraw consent, we will delete your enquiry data within a reasonable time unless a law requires us to keep it. Cloudflare keeps technical logs for limited periods under its own practices.

5. Who we share it with

We do not sell, rent or trade your personal data. We share it only with:

  • Cloudflare, which hosts the website, stores enquiries in its D1 database, runs Turnstile and provides analytics, acting as our Data Processor;
  • service providers we engage to manage enquiries and communications, such as a customer relationship management (CRM) system and WhatsApp, SMS and telephony providers, each acting as our Data Processor under a contract that limits them to our instructions;
  • professional advisers, such as lawyers and auditors, bound by confidentiality;
  • authorities, where a law, court order or lawful request requires disclosure;
  • a successor to our business or a project, bound to protect your data as this policy does.

6. Cookies, analytics and third-party features

We do not use advertising or cross-site tracking cookies.

  • Cloudflare Web Analytics is cookieless. It gives us aggregate figures such as page views and referring sites, not a profile of you.
  • Cloudflare Turnstile checks whether a form submission comes from a person or a bot. It reads browser and connection signals for that purpose only.
  • Cloudflare may set strictly necessary security cookies to tell genuine visitors from malicious traffic.
  • The website uses a service worker that stores copies of page files in your browser so that pages load faster. It stores no personal data.
  • Embedded Google Maps may let Google collect your IP address and set its own cookies. WhatsApp links open WhatsApp, operated by Meta. Their own policies govern that data.

You can block or delete cookies in your browser settings. Blocking security cookies may stop the enquiry form from working.

7. Your rights

As a Data Principal under the DPDPA, you may:

  • access a summary of the personal data we hold about you, how we process it, and the identities of those we have shared it with;
  • ask us to correct, complete or update it;
  • ask us to erase it, unless a law requires us to keep it;
  • withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing carried out before it;
  • nominate another person to exercise your rights in the event of your death or incapacity;
  • have your grievance addressed by us and, if it is unresolved, complain to the Data Protection Board of India.

To stop marketing messages, reply STOP to any SMS or WhatsApp message, tell us during a call, or contact us as set out in section 12. We may verify your identity before acting on a request. You must not give false information or impersonate anyone when exercising these rights.

8. Children

The website is meant for adults and is not directed at anyone under 18. We do not knowingly collect personal data from children, and we do not track or monitor their behaviour. If a child has sent us personal data, tell us and we will delete it.

9. How we protect it

We follow reasonable security practices and procedures proportionate to the data we hold, including HTTPS encryption in transit, access to enquiry data limited to staff who need it, access controls on our database and service accounts, automated bot filtering, and contracts binding our Data Processors to security and confidentiality duties.

No method of transmission or storage is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and each affected person as the law requires.

10. Processing outside India

Cloudflare operates a global network, so your data may be processed or stored in countries outside India. Section 16 of the DPDPA permits this, except to a country that the Central Government restricts by notification. We will not transfer personal data to a restricted country.

11. Changes to this policy

We may update this policy; the date at the top shows the current version. If a change materially affects data you have already given us, we will publish a notice on the website and, where the law requires, seek fresh consent.

12. Contact and Grievance Officer

For any question, request or complaint about your personal data, use the Grievance Officer contact published on our Contact page, call +91 98727 39696 or +91 98726 39696, or write to the Grievance Officer at our registered office (section 1).

We will resolve your grievance within one month of receiving it. You must use this route before approaching the Data Protection Board of India.

Chat on WhatsApp