Privacy Policy

Last updated: 18 June 2026 · Version: 2026-06

This Privacy Policy explains how Sonaris Realty, a sole proprietorship and the digital identity of Nagpal Properties ("Sonaris", "we", "us", "our"), collects, uses, shares and protects your personal data when you use sonaris.in ("the Site"). We are the data fiduciary for that data and follow India's Digital Personal Data Protection Act, 2023 (DPDP Act).

In plain terms

We collect the details you give us when you enquire, save a shortlist, or list a property — mainly your name, mobile number and email — and we use them to help you buy, sell or rent property in Sonipat. We may contact you (mostly by call or WhatsApp) about properties or matches that fit what you told us you want, but we keep that relevant and you can opt out. We do not sell or rent your contact details to other brokers or marketers. You can view, correct or delete your data at any time. This summary is for convenience only — the full policy below governs.

1. What data we collect

• Information you give us: your name, mobile number and email when you enquire, save a shortlist, or submit a property or requirement; the details of your enquiry/requirement (budget, area, property type, message); and, if you add them to your /me profile, your date of birth and preferences.
• Verification & consent data: we send a one-time password (OTP) to your mobile to verify it, and store the verification status and your consent (the time you accepted our Terms and this Policy, and the version) — not the OTP beyond its short validity.
• Property submissions: if you submit a property, the details and any photos you provide. These remain unverified, owner-supplied information until our team confirms them with you.
• Automatically collected data: basic device, browser and usage information, cookies/identifiers, and analytics (pages viewed, approximate location from your IP, referring source).
• Security signals: information from our bot-protection tool to prevent automated abuse.

We do not ask for sensitive financial information (bank/card details, passwords) through the Site — please don't enter such information in free-text fields.

2. Why we use your data

• To respond to your enquiry and help you buy, sell or rent property in Sonipat.
• To verify your mobile number and prevent fraud, spam and abuse.
• To run features you use — shortlists/favorites, requirement submissions, your /me profile.
• To tell you about relevant properties or matches (see section 3).
• To understand and improve the Site (analytics) and keep it secure.
• To keep records of transactions and meet legal, tax or regulatory obligations.

Our legal bases are your consent (recorded when you verify your number and accept our Terms) and the need to provide the service you asked for. You can withdraw consent at any time (section 7).

3. Telling you about matches — and how to opt out

Where you've shared your details and what you're looking for, we may contact you — mainly by call or WhatsApp, and sometimes by SMS or email — about properties, price changes or matches that fit your requirement. You agreed to this when you accepted our Terms and this Policy. We keep it limited and relevant; we do not spam, and we do not sell or share your details with other brokers or marketers. You can opt out at any time by telling us on a call or WhatsApp. Opting out of match updates does not stop us replying to a specific enquiry you've made.

4. Who we share data with

We do not sell, rent or trade your contact details. Your information is used by Sonaris Realty / Nagpal Properties to serve you. The only others who handle your data are:

• Service providers (processors) who run the Site on our behalf, strictly for the purposes below:

• Transaction counterparties: to progress a deal you've asked us to help with, we share only what's needed with the relevant owner/seller, buyer/tenant, or a service such as a loan or registry facilitator.
• Legal/authorities: where required by law, court order, or to protect rights and safety.

5. Where your data is stored

Your core data is stored in India (our database region is ap-south-1, Mumbai). Some service providers (for example hosting, analytics or error monitoring) may process limited technical data on servers outside India; where they do, we rely on the provider's safeguards and share only what's necessary.

6. How long we keep it

We retain your personal data on secure servers and never make it public. We keep your contact details (name, mobile, email) for as long as you remain a registered contact/user of the Site, so we can help you and recognise you when you return. Where an enquiry or lead becomes closed or cold, we archive the enquiry activity but keep your contact record. We keep transaction and other records for as long as the law requires. You can delete your data at any time (section 7), and we'll honour that except for records we must keep by law.

7. Your rights under the DPDP Act

You can:

• Access the personal data we hold and a summary of how we process it.
• Correct, complete or update inaccurate or incomplete data.
• Erase your personal data when it's no longer needed.
• Withdraw consent at any time.
• Nominate someone to exercise your rights in case of death or incapacity.
• Raise a grievance with our Grievance Officer (section 11), and escalate to the Data Protection Board of India if unresolved.

Self-serve delete: if you've verified your mobile, you can delete your own data from the /me page — this removes or anonymises your contact, shortlist and session and de-attributes your enquiries, except records we must keep by law. To exercise any other right, contact our Grievance Officer; we'll respond within the timelines required under applicable law.

8. Cookies and analytics

We use cookies to keep the Site working (for example, remembering your verified session and shortlist) and to measure usage (Google Analytics 4; privacy-friendly Vercel analytics). We don't currently show a cookie-consent banner; you can control cookies in your browser, though disabling some may affect features like staying signed in to your shortlist.

9. Security

We take reasonable technical and organisational measures — access controls, encryption in transit, bot protection, and restricting who can see your contact details (only our team). No system is perfectly secure, but we work to protect your data and will notify you and the Data Protection Board of India of a breach as required by law.

10. Children

The Site is intended for adults (18+) transacting in property. We do not knowingly collect data from children. If you believe a child has provided us data, contact our Grievance Officer and we'll delete it.

11. Grievance Officer & contact

• Grievance Officer: Shreshth Nagpal
• Email: shreshth@sonaris.in (general queries: info@sonaris.in)
• Phone/WhatsApp: +91 94160 57015
• Address: Shop 193-194, Main Market Phase 2, Sector 14, Sonipat, Haryana 131001

12. Changes to this policy

We may update this policy as our practices or the law evolve. We'll post the updated version here with a new "Last updated" date and version, and — where the law requires — ask for your consent again.