Legal
Privacy Policy
How we collect, use, store, and protect your personal information when you use our website or submit an enquiry.
Last updated: 07/04/2026 · This policy applies to goldworth.in and all associated web services operated by Goldworth.
01
Introduction — Who We Are
Goldworth (“we”, “us”, “our”) is a mandate-based real estate firm located in Navi Mumbai, Maharashtra, India. We connect home buyers, property investors, and real estate developers with curated residential projects across Navi Mumbai.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website (goldworth.in) or use any of our online services. Please read it carefully — your privacy matters to us.
By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy.
02
What Data We Collect
Data you give us directly
- Enquiry / contact form: Full name, mobile number, email address, enquiry type (buying / developer partnership / channel partner / general), message, and the specific project you are interested in (if applicable).
- Newsletter signup: Email address only.
- Project-specific enquiry form: Same fields as the contact form, pre-filled with the project name you enquired about.
Data collected automatically
- Server logs: IP address, browser type, pages visited, and timestamps — collected automatically by our web server for security and operational purposes. We do not use this data for profiling or targeting.
- Session data: Temporary session information may be stored by our web framework (Next.js) to serve pages correctly. No persistent tracking cookies are set.
Data we do NOT collect
- Payment card details or any financial information
- Government ID numbers, Aadhaar number, or PAN
- Precise geolocation data
- Sensitive Personal Data or Information (SPDI) as defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 — such as passwords, biometric data, or health information
03
How We Collect Data
We collect personal data through the following means:
- Forms on our website — the contact page, project detail enquiry forms, and the newsletter signup.
- Automatic server logs generated when you browse our pages.
We do not use cookies for advertising, retargeting, or cross-site tracking. We do not purchase or obtain personal data from third-party data brokers or marketing lists.
04
Why We Collect Data — Purpose and Legal Basis
We only collect data for specific, legitimate purposes. The table below sets out what we collect, why, and the legal basis under the Digital Personal Data Protection Act, 2023 (DPDPA).
| Data | Purpose | Legal Basis (DPDPA 2023) |
|---|---|---|
| Enquiry form data | To respond to your property enquiry, connect you with the right project, and follow up as appropriate | Consent — you submit the form voluntarily |
| Newsletter email | To send you property updates, new listings, and market news from Goldworth | Consent — you opt in voluntarily |
| Server logs | Website security, diagnosing technical issues, preventing abuse | Legitimate use — necessary for the operation of our services |
We will not use your data for a purpose other than the one for which it was collected. We will not use your enquiry data for unrelated marketing without your explicit consent.
05
How We Store and Protect Your Data
Data storage (current stage)
- Enquiry form submissions are received by our web server and immediately dispatched to our secure business email inbox via encrypted SMTP (TLS/SSL on port 465). We do not retain raw form submissions in an open database on the server.
- Newsletter email addresses are stored in a secured file on our server, accessible only to authorised personnel.
- No personal data is stored in client-side browser storage (localStorage, sessionStorage, or persistent cookies).
Security measures
- All data is transmitted over HTTPS using TLS encryption
- Email is dispatched via encrypted SMTP (TLS/SSL) to prevent interception in transit
- Server access is restricted to authorised personnel with secure credentials
- No payment data is collected or stored
- Subscriber data is protected by server-level access controls
We operate on a principle of data minimisation — we only collect what we need and retain it only as long as necessary for the stated purpose.
06
How Long We Keep Your Data
We retain personal data only for as long as necessary. The table below sets out our retention periods:
| Data type | Retention period |
|---|---|
| Enquiry emails (in our inbox) | Up to 3 years, after which they are reviewed and deleted unless an active business relationship exists |
| Newsletter email addresses | Until you unsubscribe or request deletion |
| Server logs | Up to 90 days, then automatically overwritten |
When retention periods expire, data is securely deleted or anonymised so it can no longer be linked to an individual.
07
Do We Share Your Data?
We do not sell, rent, or trade your personal data. Full stop.
We may share data only in the following limited and necessary circumstances:
Email service provider
Your enquiry data passes through our SMTP mail server (hosted on Hostinger) to deliver it to our inbox. Hostinger processes this data as a data processor under a service agreement. They do not use it for their own purposes.
Real estate developers (project-specific enquiries only)
If you enquire about a specific project, we may share your contact details with the relevant developer or project team for the sole purpose of arranging a site visit or providing project-specific information. We will only do this where it is directly relevant to your stated enquiry.
Legal requirement
We may disclose data if required to do so by a valid court order, applicable Indian law, or a regulatory authority. We will notify you of such disclosure where we are legally permitted to do so.
Business transfer
In the unlikely event of a merger, acquisition, or sale of business assets, personal data held by Goldworth may form part of the transferred assets. We will notify affected individuals before their data becomes subject to a different privacy policy.
08
Your Rights Under Indian Law (DPDPA 2023)
Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal (the individual whose personal data is being processed):
Right to access information
You may request a summary of what personal data we hold about you and how it is being used.
Right to correction and erasure
You may ask us to correct inaccurate or incomplete data, or erase data we no longer need for the purpose for which it was collected.
Right to withdraw consent
You may withdraw consent at any time — for example, by unsubscribing from our newsletter or asking us to stop follow-up communications. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Right to grievance redressal
You have the right to raise a grievance with our Grievance Officer (see Section 13). We will acknowledge it within 48 hours and aim to resolve it within 30 days.
Right to nominate
You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
Right to approach the Data Protection Board
If your grievance is not resolved to your satisfaction, you may escalate to India's Data Protection Board of India once it is constituted and operational under the DPDPA.
To exercise any of these rights, contact us using the details in Section 13. There is no fee for making a request.
09
Cookies and Tracking
Current status
We do not set any persistent tracking or advertising cookies. Our website may use essential session cookies set by the Next.js framework to serve pages correctly. These are temporary and expire when you close your browser. They contain no personally identifiable information.
Analytics
We do not currently use Google Analytics, Meta Pixel, or any third-party analytics, advertising, or retargeting service. If we add analytics in the future, this policy will be updated and a cookie consent banner will be displayed before any tracking begins.
How to control cookies
You can manage or delete cookies through your browser settings. Note that disabling all cookies may affect how some pages load or function.
10
Third-Party Links
Our website may contain links to third-party websites — for example, Google Maps embeds, developer project websites, or social media profiles. These third parties operate under their own privacy policies. We are not responsible for the content or data practices of external sites and encourage you to read their privacy policies before sharing any personal information with them.
11
Children's Privacy
Our services are intended for adults aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If you believe that a minor has submitted personal data through our website, please contact us immediately using the details in Section 13 and we will delete it without delay.
12
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we do, we will update the “Last updated” date at the top of this page.
We encourage you to review this policy periodically. For significant changes that affect how we use your data, we will make reasonable efforts to notify you — for example, by displaying a notice on our homepage. Continued use of our website after changes take effect constitutes your acceptance of the revised policy.
13
Contact & Grievance Officer
For all data privacy enquiries, access requests, correction or deletion requests, or complaints, please contact us. As required under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address your concerns:
Grievance Officer
[GRIEVANCE OFFICER NAME]
Goldworth
Sector 19A, Nerul, Navi Mumbai – 400 706
Navi Mumbai, Maharashtra, India
Response times
- Grievance acknowledgement: within 48 hours
- Resolution: within 30 days of receiving your grievance (as required by Indian law)
If your concern is not resolved to your satisfaction after contacting our Grievance Officer, you may escalate your complaint to the Data Protection Board of India once it becomes fully operational under the DPDPA 2023.
Questions about our privacy practices?
We're happy to help. Reach out and we'll respond within 24 hours.