Skip to content
Enquire Now
Legal

Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how Aasti Infrastructure Solutions Pvt. Ltd. (“Aasti”, “we”, “us”, “our”) collects, uses, shares, stores and protects your personal data when you visit aastiinfra.com (the “Website”), contact us, or use our services. We are the Data Fiduciary for personal data processed through this Website.

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), and, to the extent they continue to apply, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).

1. Personal data we collect

We collect only the personal data needed for the purposes described in this Policy.

1.1 Data you give us

  • Enquiry and consultation forms: name, mobile / phone number, email address, company name, investor type, budget range, preferred locations and property types, investment horizon and objective, project details (type, location, size, stage) and any message you choose to send.
  • Site visit requests: name, contact details, project of interest and preferred date and time.
  • Developer / partner enquiries: company name, contact person, contact details and project information.
  • Communications: information you share with us by phone, email or WhatsApp.

We do not ask for passwords, bank account, credit / debit card or other payment instrument details, biometric data, or health information through this Website. Please do not send such information through our forms or WhatsApp.

1.2 Data collected automatically

  • Technical data: IP address, browser type, device type, operating system, pages visited, referring page and date / time of visit, collected through server logs and security tools.
  • Cookies: see Section 10.

2. Purposes for which we use your personal data

  • To respond to your enquiry, arrange consultations and site visits, and provide the information or services you request.
  • To prepare proposals and deliver construction, engineering, advisory or marketing services you engage us for.
  • To share relevant project information with you, where you have asked for it.
  • To send you market reports, guides or updates, only where you have opted in. You can unsubscribe at any time.
  • To keep the Website secure, prevent fraud and spam, and improve Website performance.
  • To comply with applicable law, legal process and requests from government authorities.

3. Legal basis: consent and legitimate uses

We process your personal data on the basis of your consent, given through the consent checkbox on our forms, or for legitimate uses permitted under Section 7 of the DPDP Act — for example, where you voluntarily provide your personal data for a specified purpose and have not indicated that you do not consent, or where processing is required to comply with law.

When we ask for consent, we provide a notice that explains what data we collect and why, in clear and plain language. You may access this notice and Policy in English; on request we will make reasonable efforts to provide it in another language listed in the Eighth Schedule to the Constitution of India.

4. Withdrawing consent

You may withdraw your consent at any time, as easily as you gave it, by writing to info@aastiinfra.com or by replying “STOP” to our WhatsApp messages or using the unsubscribe link in our emails. Withdrawal does not affect processing carried out before withdrawal. After withdrawal, we will stop processing your personal data, and cause our processors to stop, within a reasonable time, unless retention is required by law.

You may also manage consent through a Consent Manager registered with the Data Protection Board of India, once such services are available.

5. Who we share your personal data with

We do not sell your personal data. We share it only as follows:

  • Service providers (Data Processors) who help us operate the Website and our business — for example, website hosting, email delivery, customer relationship management (CRM), WhatsApp Business messaging and analytics providers — under contracts requiring them to protect your data and use it only on our instructions.
  • Developers and project owners — only where you ask us for details of, or a site visit to, a specific project and you consent to us sharing your contact details with that developer for that purpose.
  • Professional advisers such as advocates, chartered accountants and auditors, under a duty of confidentiality.
  • Government and regulatory authorities, courts or law enforcement agencies, where required by law.
  • A successor entity in the event of a merger, acquisition or restructuring, subject to this Policy.

6. Transfer of personal data outside India

Some of our service providers may store or process data on servers located outside India. Any such transfer will be made in compliance with Section 16 of the DPDP Act and will not be made to any country or territory restricted by the Central Government.

7. How long we keep your personal data

We keep personal data only for as long as needed for the purpose for which it was collected, and then erase it, unless a longer period is required by law. In general:

  • Enquiries that do not lead to an engagement: up to 36 months from our last interaction with you, after which they are erased.
  • Client engagement records: for the duration of the engagement and thereafter as required under applicable tax, company and other laws.
  • Logs of processing and security logs: for at least the minimum period required under the DPDP Rules.

Where the DPDP Rules require, we will inform you at least 48 hours before erasing your personal data due to inactivity, so that you can tell us if you wish us to keep it.

8. How we protect your personal data

We take reasonable security safeguards, as required by Section 8(5) of the DPDP Act and Rule 8 of the SPDI Rules, to prevent personal data breaches. These include encryption of data in transit (HTTPS / SSL), access controls limited to authorised personnel, password and access management, regular software updates, backups, logging and monitoring of access, and contractual safeguards with our processors.

No method of transmission over the internet or electronic storage is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and each affected person without delay, in the manner required under the DPDP Rules, including a description of the breach, its likely consequences, the measures we are taking and how you can protect yourself.

9. Your rights as a Data Principal

Under the DPDP Act you have the right to:

  • Access information — a summary of the personal data we process about you, the processing activities, and the identities of other Data Fiduciaries and Processors with whom it has been shared (Section 11).
  • Correction, completion, updating and erasure of your personal data (Section 12).
  • Grievance redressal — to have your complaint addressed by us (Section 13).
  • Nominate another person to exercise your rights in the event of death or incapacity (Section 14).
  • Withdraw consent at any time (Section 6).

To exercise these rights, write to our Grievance Officer (Section 12 below) from the email address or phone number you used with us, so that we can verify your identity. We will respond within the period prescribed under the DPDP Rules and in any event within 90 days.

You also have duties under Section 15 of the DPDP Act, including not to provide false information, not to impersonate another person, and not to register false or frivolous complaints.

10. Cookies

Our Website uses essential cookies required for security and basic functionality (for example, remembering that you have dismissed the cookie notice). If we enable analytics or advertising cookies, we will do so only with your consent, and you can disable them through your browser settings. Blocking essential cookies may affect how the Website works.

11. Third-party links and WhatsApp

Our Website contains links to third-party websites and services, including WhatsApp, LinkedIn, Facebook, Instagram, YouTube and X. When you use them, their own privacy policies apply. When you message us on WhatsApp, WhatsApp (Meta) processes your data under its terms; we use the messages you send only to respond to you.

12. Grievance Officer and contact

In accordance with the DPDP Act and Rule 5(9) of the SPDI Rules, the contact details of our Grievance Officer are:

Grievance Officer
Aasti Infrastructure Solutions Pvt. Ltd.
Hyderabad, Telangana, India
Email: info@aastiinfra.com
Phone: +91-9121-428-429
Working hours: Monday – Saturday, 9:30 AM – 6:30 PM

We will acknowledge your grievance promptly and resolve it within the time prescribed by law (and in any case within one month for grievances under the SPDI Rules).

13. Complaints to the Data Protection Board of India

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India after exhausting our grievance redressal process, in the manner prescribed under the DPDP Act and Rules.

14. Children’s personal data

Our Website and services are intended for adults. We do not knowingly collect personal data of children (persons below 18 years of age) without verifiable consent of a parent or lawful guardian, and we do not track, behaviourally monitor or target advertising at children. If you believe a child has provided us personal data, please contact us and we will erase it.

15. Changes to this Policy

We may update this Policy to reflect changes in law or our practices. The updated version will be posted on this page with a new “Last updated” date. Where changes are material, we will notify you where reasonably possible.

16. Governing law

This Policy is governed by the laws of India. Subject to the jurisdiction of the Data Protection Board of India, the courts at Hyderabad, Telangana shall have exclusive jurisdiction.

WhatsApp