Privacy Policy

1.  Introduction

PropSquare LifeSpaces Management Pvt. Ltd. (“PropSquare”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data of every individual who interacts with us through our website www.propsquares.com (the “Website”) or our services.

This Privacy Policy explains how we collect, use, share, retain, and protect your personal data, and the rights you have in relation to your data. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made thereunder, PropSquare is the Data Fiduciary in respect of the personal data described in this Policy.

By using the Website, submitting an enquiry, applying for a job, or otherwise interacting with us, you acknowledge that you have read this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

Company Details

Registered Name	PropSquare LifeSpaces Management Pvt. Ltd.
CIN	U74990TG2019PTC129763
GSTIN	36AAKCP3086A1ZI
Registered Office	3rd Floor, 302, Venkat Surabhi Plaza, Hitech City Main Road, Surya Enclave, HITEC City, Hyderabad – 500081, Telangana, India

2.  Scope

This Policy applies to personal data we collect:

• Through our Website (forms, cookies, analytics tools)
• When you request a quote or proposal for our facility management services
• When you apply for employment with us
• When you communicate with us by email, phone, or any other channel

This Policy does not apply to personal data we process on behalf of our clients (such as Resident Welfare Associations or Management Committees) in our capacity as a Data Processor. Such data is governed by separate agreements with those clients.

3.  Information We Collect

We collect the following categories of personal data:

3.1  Information you provide directly

• Contact & Enquiry Data: Name, email address, mobile number, company/organisation name, designation, message content
• Property & Service Data: Property type (residential/commercial), size, location, city, and any service requirements you share
• Career Data: Resume/CV, employment history, educational qualifications, references, and any other information you submit through our Careers page

3.2  Information collected automatically

• Technical Data: IP address, browser type and version, operating system, device identifiers, referring URLs
• Usage Data: Pages visited, time spent on pages, links clicked, and other interaction data collected via cookies and similar technologies (see Section 10)

4.  Purposes of Processing

We process your personal data for the following specified and lawful purposes:

• To respond to your service enquiries and provide information about our facility management offerings
• To prepare and send quotations, proposals, and contractual documentation
• To evaluate job applications and communicate with candidates
• To manage and improve our Website and user experience
• To analyse Website traffic and usage patterns (in aggregated/anonymised form where possible)
• To comply with applicable legal, regulatory, and tax obligations
• To establish, exercise, or defend legal claims

We will not process your personal data for any purpose materially different from those listed above without obtaining fresh consent or relying on another lawful basis.

5.  Lawful Basis & Consent

We process your personal data on the basis of your consent under Section 6 of the DPDP Act, which is obtained when you:

• Voluntarily submit a contact, quote, or careers form
• Accept our cookie banner
• Otherwise voluntarily share your personal data with us

Your consent is free, specific, informed, unconditional, and unambiguous. Where applicable, we may also process personal data for legitimate uses as permitted under Section 7 of the DPDP Act (for example, to comply with a legal obligation or to respond to a medical emergency).

Withdrawal of Consent

You may withdraw your consent at any time by writing to our Grievance Officer at the contact details in Section 14. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal. Please note that withdrawing consent may limit our ability to respond to your enquiry, process your job application, or provide services to you.

6.  Data Sharing and Third-Party Processors

We do not sell your personal data.

We share personal data only with the following categories of recipients, acting as our Data Processors under written agreements that require them to maintain confidentiality and reasonable security safeguards:

• Zoho Corporation Pvt. Ltd. — for CRM, lead management, and email communications
• Google LLC (Google Analytics) — for Website analytics
• GoDaddy.com, LLC — for Website hosting and related infrastructure services
• Professional advisors — including auditors, legal counsel, and tax consultants, where necessary

We may also disclose personal data:

• When required by law, regulation, court order, or government request
• To protect the rights, property, or safety of PropSquare, our clients, or others
• In connection with a merger, acquisition, restructuring, or sale of business assets, subject to appropriate confidentiality obligations

7.  Cross-Border Data Transfers

Our primary data storage is on servers located in India. However, certain Data Processors (such as Google Analytics and GoDaddy) may process or store data on infrastructure outside India. Where such transfers occur, we ensure they are conducted in compliance with the DPDP Act and any restrictions notified by the Central Government of India from time to time, and that appropriate contractual safeguards are in place.

8.  Data Retention

We retain personal data only for as long as necessary for the purposes set out in this Policy or as required by law:

Category	Retention Period
Lead and enquiry data	24 months from last interaction
Career applications (unsuccessful)	12 months from application date
Career applications (selected candidates)	Retained as part of employee records per applicable law
Website analytics data	As per Google Analytics default retention settings (currently 14 months)
Records required for tax, audit, or statutory compliance	As required under applicable Indian law

You may request earlier deletion of your data by contacting our Grievance Officer, subject to any overriding legal retention obligations.

9.  Security Safeguards

We implement reasonable technical and organisational security safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (HTTPS/TLS)
• Access controls and role-based permissions for internal systems
• Regular review of vendor security practices
• Employee confidentiality obligations and training
• Periodic audits of data handling practices

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10.  Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to function properly and to understand user behaviour. The cookies currently deployed are:

Cookie / Technology	Provider	Purpose	Type	Duration
_ga, _gid, _gat	Google Analytics	Website traffic analysis	Third-party	Up to 2 years
Session cookies	PropSquare	Maintaining session state	First-party	Session

You can manage cookies through your browser settings — most browsers allow you to block, delete, or be notified about cookies. Disabling cookies may affect the functionality of the Website. For more information on managing cookies, see allaboutcookies.org.

11.  Your Rights Under the DPDP Act, 2023

As a Data Principal, you have the following rights in respect of your personal data:

• Right to access — Obtain a summary of personal data we hold about you and the processing activities undertaken
• Right to correction and erasure — Request correction of inaccurate or incomplete data, updating of data, or erasure of data that is no longer necessary for the purpose for which it was collected
• Right to grievance redressal — Have your grievances addressed by our Grievance Officer (see Section 14)
• Right to nominate — Nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity
• Right to withdraw consent — Withdraw your consent at any time, as described in Section 5

To exercise any of these rights, please email our Grievance Officer at the address in Section 14 with the subject line “DPDP Request — [Your Request Type]”. We will respond within the timeframes prescribed by the DPDP Act.

If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India established under the DPDP Act.

12.  Children’s Data

Our Website and services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children (defined as individuals below 18 years of age) without verifiable parental consent. We do not engage in behavioural tracking, profiling, or targeted advertising directed at children.

If you believe we have inadvertently collected personal data from a child without appropriate consent, please contact our Grievance Officer and we will take steps to delete such data.

13.  Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Act and applicable rules. Notifications will include the nature of the breach, the data affected, the measures taken, and recommended actions for affected individuals.

14.  Grievance Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our handling of your personal data, please contact:

Name	Mohammed Fayaz Uddin
Designation	Grievance Officer, PropSquare LifeSpaces Management Pvt. Ltd.
Email	marketing@propsquares.com
Phone	+91 62819 51110
Postal Address	3rd Floor, 302, Venkat Surabhi Plaza, Hitech City Main Road, Surya Enclave, HITEC City, Hyderabad – 500081, Telangana, India
Response Time	Acknowledgement within 72 hours; substantive response within DPDP Act timelines

15.  Language Availability

This Privacy Policy is published in English. A copy may be made available in Hindi, Telugu, or any of the other 22 languages specified in the Eighth Schedule to the Constitution of India upon written request to the Grievance Officer.

16.  Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Last Updated” date at the top of this Policy indicates when it was most recently revised. In the event of material changes, we will provide reasonable notice through our Website or by direct communication where appropriate. Your continued use of the Website following any changes constitutes acceptance of the revised Policy.

17.  Contact Us

For any general queries about our services or this Policy: