Privacy Policy
We value your trust and are committed to protecting your personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act). Last updated: October 2026.
DPDP Act 2023 & Data Fiduciary
Tru Dwellings Pvt Ltd ("Company", "we", "our", or "us"), the developer of Tru Aquapolis, acts as a Data Fiduciary in full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, Act No. 22 of 2023) and applicable Karnataka Real Estate Regulatory Authority (RERA) compliance mandates.
This Privacy Policy governs the collection, processing, storage, and protection of digital personal data provided by prospective buyers, investors, channel partners, and visitors ("Data Principals") interacting with our official web portal (truaquapolis.com), sales galleries, digital advertisements, and enquiry systems.
Lawful Grounds for Processing (DPDP Act 2023)
- Consent (Section 6): Digital personal data is processed based on your freely given, specific, informed, unconditional, and unambiguous consent signified by an affirmative action (such as submitting an enquiry, requesting a brochure, or opting in for communications).
- Certain Legitimate Uses (Section 7): Processing necessary for fulfilling your voluntary request for apartment brochures, scheduling site tours, verifying contact credentials, or meeting statutory disclosure obligations under Karnataka RERA Rule 18.
Personal Data We Collect
We adhere strictly to the principle of data minimization. We collect only the personal data reasonably required to assist you with your residential property search and to deliver requested project documentation:
- Direct Identity & Contact Information: Full Name, Primary Mobile Number, Email Address, and City of Residence submitted through our contact, enquiry, or site-visit scheduling forms.
- Property & Purchase Preferences: Preferred unit configuration (3 BHK / 4 BHK), approximate budget range, investment horizon, lake-facing preferences, and preferred site visit date/time.
- Authentication & Verification Data: One-Time Password (OTP) verification session tokens used to validate phone number authenticity. OTP secrets are temporary and never retained in cleartext.
- Technical & Telemetry Data: Anonymized IP addresses, browser specifications, operating system, referral URL, page interaction duration, and clickstream data collected through secure server logs and consent-gated analytical tools.
Service vs. Promotional Communications
In accordance with Section 6 of the DPDP Act 2023, Tru Aquapolis maintains a strict separation between essential service communications and optional promotional marketing:
Mandatory to fulfill your explicit user requests: delivering requested PDF brochures, confirming site-visit appointments, sending OTP verification codes, and direct one-on-one advisory consultations requested by you.
Optional notifications regarding new tower phase launches, construction progress videos, quarterly Whitefield price trends, and exclusive preview invitations via SMS, Email, RCS, or WhatsApp.
Data Security & Retention
We implement technical, organizational, and physical safeguards in accordance with industry benchmarks and DPDP Act standards:
- Transit Encryption: All web traffic and API endpoints are encrypted using TLS 1.3 protocol over HTTPS with HSTS enforcement.
- Access Governance: Personal lead data is restricted strictly to authorized sales relationship managers and compliance officers on a least-privilege basis.
- Data Retention Schedule: Personal contact data collected for purchase enquiries is retained for as long as necessary to facilitate your residential acquisition or until consent is formally erased. Records associated with legal real estate agreements are retained in accordance with statutory RERA Karnataka and Indian Stamp Act mandates (typically up to 5 years following project completion).
- Breach Notification: In the unlikely event of a personal data breach impacting your rights, we will notify both the Data Protection Board of India and affected Data Principals in the manner prescribed by the DPDP Rules.
Rights of Data Principals
Under Chapter III of the Digital Personal Data Protection Act, 2023, you enjoy statutory rights as a Data Principal:
Obtain a summary of personal data being processed, processing activities, and identities of data fiduciaries/processors with whom data is shared.
Correct inaccurate or misleading data, complete incomplete information, or request erasure of data no longer required for its original purpose.
Avail readily accessible redressal of grievances through our designated Grievance Redressal Officer before escalating to statutory boards.
Nominate an individual who shall, in the event of death or incapacity of the Data Principal, exercise your rights under the DPDP Act.
To exercise any of these statutory rights, submit a written request to our Data Protection Desk at privacy@truaquapolis.com. We respond to all verified requests within the statutory timeline.
Designated Grievance Redressal Officer
In compliance with Section 6(2) and Section 13 of the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Redressal Officer are as follows:
Mr. Rajesh Kumar
Grievance Redressal Officer & Data Protection Lead
Tru Dwellings Pvt Ltd
Acknowledgement within 48h; complete resolution within 30 days.
Tru Dwellings Pvt Ltd, Site Sales Gallery, Opp. Varthur Lake, Whitefield Main Road, Bengaluru, Karnataka 560087
Escalation to Data Protection Board of India (DPBI): If you do not receive a resolution from our Grievance Redressal Officer within thirty (30) days or are unsatisfied with the resolution provided, you retain the statutory right to escalate your grievance to the Data Protection Board of India established under the DPDP Act, 2023.
Have inquiries regarding your personal data?
Reach out to our Data Protection Desk or schedule an in-person compliance consultation.