REAL CONTRACTORS
www.realcontractors.in A platform by Sunosys Backend Business Solutions Limited Liability Partnerships .
PRIVACY POLICYCompliant with: Digital Personal Data Protection Act, 2023 | DPDP Rules, 2025 | IT Act, 2000Effective Date Version Last Updated01 June 2026 1.0 June 2026
Mandatory Notice (DPDP Act, 2023 — Section 5) Before you use, register on, or provide any personal data to Real Contractors (www.realcontractors.in), please read this Privacy Policy carefully.
By creating an account, submitting a form, or continuing to use this platform, you confirm that you have read, understood, and freely consent to the collection, processing, and use of your personal data as described in this Policy. You may withdraw consent at any time — details are in Section 9.
1. About Us — Who is the Data Fiduciary?
Legal Name : Sunosys Backend Business Solutions LLP
Brand / Platform : Real Contractors — www.realcontractors.in
Registered Office : Sr no 82/1/7,Aashirwad Building,Near Yug Honda Showroom ,BRT Road,Adarsh Nagar,Kalewadi Pimpri , Pune 411017, Maharashtra, India
LLP NO : ACQ-7150
PAN : AFRFS9790R
Grievance Officer :Ravikiran Mandlik, CEO — support@realcontractors.in
Mob: 8805307661
Data Protection Email support@realcontractors.in
2. Scope of This Policy:
This Policy applies to all personal data collected, stored, processed, or shared by Real Contractors through:
• The website www.realcontractors.in and any subdomains
• Mobile applications (when launched)
• WhatsApp, email, SMS, and telephone communications with the platform
• Offline interactions with our team for onboarding, verification, or support
This Policy applies to all categories of Data Principals (as defined under the DPDP Act, 2023), including:
• Contractors and sub-contractors registering on the platform
• Builders, developers, and project-giving companies
• Visitors browsing the website without registration
• Team members or agents submitting data on behalf of an organisation
3. What Personal Data We Collect
We collect only the data that is necessary for the specified purposes described in Section 4. The following categories of personal data may be collected:
3.1 Contractor / Service Provider DataCategory Data Collected BasisIdentity Full name, PAN, Aadhaar (masked), photograph Consent + Legal obligation (KYC)Contact Mobile number, email address, WhatsApp number ConsentBusiness Trade name, GSTIN, trade category, years of experience, work photos Consent + Contract performanceLocation City, district, pin code, service area ConsentFinancial Bank account details (for payout/settlement), subscription payment data Contract performanceEligibility Score 100-point platform score derived from submitted data Legitimate use
3.2 Builder / Developer / Client DataCategory Data Collected BasisIdentity Contact person name, designation, company name ConsentContact Email, mobile number, office address Consent + ContractProject Project details, location, budget range, timeline Contract performance
3.3 Technical / Automatic Data
• IP address, browser type, device information, operating system
• Pages visited, time spent, click-through patterns (analytics)
• Cookies and similar tracking technologies (see Section 12)
• Login timestamps, session data, error logs
4. Why We Collect Your Data — Purpose of Processing
Under the DPDP Act, 2023, we process personal data only for specified, clear, and lawful purposes.
Your data is used for the following purposes:
# Purpose Data Used Legal Basis
1 Contractor registration, profile creation, and onboarding Identity, contact, business, location data Consent
2 Eligibility scoring and tier classification (Starter / Pro / Elite) Business data, experience, documents Consent
3 Connecting contractors with builders and project opportunities Profile, contact, location data Contract
4 Payment processing for subscriptions and membership fees Financial data, PAN Contract
5 GST invoicing and tax compliance Name, GSTIN, address Legal obligation
6 Sending platform notifications, leads, and service updates Email, mobile, WhatsApp Consent
7 Customer support, grievance resolution, and dispute handling Any relevant submitted data Legitimate use
8 Platform improvement, analytics, A/B testing Technical / anonymised data Legitimate use
9 Identity verification and fraud prevention PAN, Aadhaar (masked), photos Legal obligation
10 Compliance with RBI, GST, and court/regulatory orders As required by law Legal obligation.
Data Minimisation Commitment :
We collect only the minimum data necessary for each purpose. We do not collect sensitive personal data (such as caste, religion, or health information) unless explicitly required by law and separately consented to.
5. Legal Basis for Processing (DPDP Act, 2023 — Sections 4, 5, 6, 7):
We rely on the following legal bases for processing your personal data:
• Consent (Section 6) — You have given free, specific, informed, and unambiguous consent through a clear affirmative action (such as ticking a checkbox or clicking 'I Agree'). Consent is granular — given per purpose and can be withdrawn at any time.
• Contract Performance (Section 7(a)) — Processing is necessary to perform the contract you have with us (e.g., delivering your membership, processing payments, connecting you with leads).
• Legal Obligation (Section 7(b)) — We process data to comply with applicable laws, including the Income Tax Act, GST laws, RBI regulations, and court orders.
• Legitimate Use / Vital Interests (Section 7(c)–(f)) — In limited cases, such as fraud detection, platform security, and anonymised analytics for improving services.
6. How We Share Your Data :
We do not sell your personal data. We may share it only in the following limited circumstances:
6.1 With Builders, Developers, and Project-GiversYour contractor profile (name, trade category, service area, eligibility score, contact info) is shared with registered builders and developers on the platform who are seeking contractors. This is the core function of the marketplace and is covered by your consent and the contract you enter into at registration.
6.2 With Service Providers and Data ProcessorsService Provider Type Purpose SafeguardPayment Gateway (Razorpay) Payment processing and settlement Data Processing Agreement in placeCloud Hosting (AWS / GCP / Azure) Website and database hosting Contractual safeguards + encryptionSMS / WhatsApp Provider OTP and platform notifications Limited to communication data onlyEmail Service Provider Transactional emails, invoices Limited to email and nameAnalytics (Google Analytics) Anonymised platform usage analytics IP anonymisation enabledVerification Partners (if applicable) Background verification for premium tiers Separate consent obtained
6.3 With AuthoritiesWe may disclose personal data to government authorities, regulators, courts, or law enforcement agencies when required by applicable Indian law, court order, or regulatory direction — including under the Income Tax Act, GST law, or any order from MeitY / Data Protection Board of India.
7. How Long We Retain Your Data :
We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. Once the purpose is fulfilled and no legal obligation requires retention, data is deleted or anonymised.
Data Category Retention Period Reason
Active contractor / builder profiles Duration of account + 3 years post-deletion Dispute resolution, platform integrity
Payment and transaction records 8 years from date of transaction Income Tax Act, GST law
KYC / identity documents 5 years from account closure RBI / regulatory obligation
Communication logs (email, WhatsApp) 2 years Customer support, legal claims
Consent records 7 years from consent given/withdrawn DPDP Rules, 2025 — Rule on records
Technical / server logs 1 year Cybersecurity, IT Act compliance
Anonymised analytics data Indefinite No personal data retained
Inactive Account ErasureFor accounts with no activity for 3 consecutive years, we will send a 48-hour advance notice to your registered email/mobile before initiating data erasure, in line with DPDP Rules, 2025 requirements for large platforms.
8. Your Rights as a Data Principal (DPDP Act, 2023 — Sections 11–14)
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights. All requests are responded to within 30 days (or as specified by the Data Protection Board):
Your Right What It Means Response Timeline
Right to Access (Sec 11) Request a summary of what personal data we hold about you and how it is being processed. 30 days
Right to Correction (Sec 12) Request correction of inaccurate or incomplete personal data we hold about you. 30 days
Right to Erasure (Sec 12) Request deletion of your personal data, subject to legal retention requirements. 30 days
Right to Grievance Redressal (Sec 13) Raise a complaint with our Grievance Officer. If unresolved, escalate to the Data Protection Board of India. 90 days max
Right to Nominate (Sec 14) Nominate another individual to exercise your data rights in the event of your death or incapacity. On request
Right to Withdraw Consent Withdraw your consent at any time. Withdrawal does not affect the legality of processing done before withdrawal. Immediate effect.
To exercise any of these rights, write to us at: support@realcontractors.in
9. Consent — How We Collect It and How You Can Withdraw It
9.1 How We Obtain Consent
• Registration forms: A clearly worded checkbox (not pre-ticked) linking to this Privacy Policy
• Marketing communications: A separate opt-in checkbox for SMS, WhatsApp, and email marketing
• Cookies: A cookie consent banner on first visit with granular options (essential, analytics, marketing)
• Verification: An explicit consent screen before collecting PAN / Aadhaar for KYC
9.2 How to Withdraw Consent
You may withdraw consent at any time. Withdrawal is as easy as giving consent:
• Email: Send a withdrawal request to support@realcontractors.in with subject 'Consent Withdrawal — 8805307661'
• Account Settings: Use the 'Privacy & Consent' section in your dashboard (when feature is available)
• WhatsApp: Send 'STOP' to our registered WhatsApp Business number
• Email unsubscribe: Click 'Unsubscribe' in any marketing email
Effect of Withdrawal:
Withdrawing consent will not affect the lawfulness of processing done before withdrawal. However, it may limit your ability to use certain features of the platform that depend on that data. We will cease processing for the withdrawn purpose within 7 working days.
10. Data Security Safeguards (DPDP Rules, 2025 — Rule 6) :
We implement reasonable security safeguards to prevent unauthorised access, disclosure, alteration, or loss of personal data. These include:
• Encryption — All data in transit is encrypted using TLS 1.2 or higher (HTTPS). Sensitive data at rest (PAN, Aadhaar references) is encrypted using AES-256
• Access Controls — Role-based access control (RBAC) — only authorised team members access personal data on a need-to-know basis
• Audit Logs — Access logs to personal data are retained for a minimum of 1 year as per DPDP Rules, 2025
• Penetration Testing — Annual security audits and vulnerability assessments of the platform
• Data Processor Agreements — All third-party processors are contractually bound to implement equivalent security safeguards (DPDP Rules, 2025 — Rule 6)
• Backup & Recovery — Automated backups of user data with disaster recovery procedures.
11. Personal Data Breach Notification (DPDP Rules, 2025 — Rule 7) :
In the event of a personal data breach affecting your data, we will:
Stage Timeline Action
1 Immediately upon detection Notify the Data Protection Board of India (DPBI) with initial report: nature of breach, categories of data affected, likely consequences, and steps taken.
2 Within 72 hours File comprehensive follow-up report to DPBI with full investigation findings, root cause, and corrective measures.
3 Within 72 hours Notify all affected Data Principals in plain language: what data was exposed, what protective steps to take, and how to contact us.
4 Post-incident Publish a summary of the incident and remediation steps on the platform (where appropriate for transparency)
Penalty for failure to notify: Up to ₹200 crore per incident under the DPDP Act. We take breach reporting seriously.
12. Cookies and Tracking Technologies :
We use cookies and similar technologies on www.realcontractors.in. You are given a choice at first visit through our Cookie Consent Banner.
Cookie Type Default Purpose
Essential / Functional Always active Login sessions, security tokens, language preferences. Cannot be disabled.
Analytics Opt-in Google Analytics (IP anonymised) — understand how users navigate the platform.
Marketing / Remarketing Opt-in Meta Pixel, Google Ads conversion tracking. Only active with your explicit consent.
You can change your cookie preferences at any time via the 'Cookie Settings' link in the footer of our website.
13. Children's Data :
The Real Contractors platform is intended for adults (18 years and above) engaged in construction and real estate business. We do not knowingly collect personal data from individuals under 18 years of age.If we become aware that a minor has registered, we will promptly delete their account and all associated data. If you believe a minor has registered on our platform, please notify us immediately at support@realcontractors.in.
14. Cross-Border Data Transfers :
We primarily process and store data within India. However, certain third-party service providers (such as cloud hosting and analytics providers) may process data on servers located outside India.
All cross-border transfers are conducted in compliance with the DPDP Act, 2023, which permits transfers to countries not restricted by the Government of India. We ensure all international processors are bound by contractual obligations equivalent to those required under Indian law.
15. Grievance Redressal Mechanism :
We have designated a Grievance Officer as required under the IT Act, 2000, Consumer Protection (E-Commerce) Rules, 2020, and DPDP Act, 2023:
Grievance Officer Name : Ravikiran Mandlik
Designation : Director
Email : support@realcontractors.in
Phone : 8805307661
Address : Sunosys Backend Business Solutions LLP, Aashirwad Building, Near Yug Honda Showroom, BRT Road, Adarsh Nagar,Kalewadi Pune, Maharashtra.
Response Timeline Complaints acknowledged within 48 hours; resolved within 30 days (90 days maximum per DPDP Act)
If your grievance is not resolved satisfactorily within 30 days, you may escalate to the Data Protection Board of India (DPBI) once constituted under the DPDP Act, 2023.
16. Changes to This Privacy Policy :
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes:
• We will update the 'Last Updated' date at the top of this Policy
• We will notify registered users via email and/or an in-platform notification at least 15 days before the changes take effect
• For significant changes affecting your consent basis, we will seek fresh consent before processing continues under the new terms.
Continued use of the platform after the effective date of changes constitutes acceptance of the updated Policy.
17. Contact Us : For any questions, requests, or concerns regarding this Privacy Policy or your personal data:
Sunosys Backend Business Solutions LLP
Platform: Real Contractors | www.realcontractors.in
Email: support@realcontractors.in
Grievance Officer: Ravikiran Mandlik | 880530761
Registered Office: Sr no 82/1/7,Aashirwad Building,Near Yug Honda Showroom ,BRT Road,Adarsh Nagar,Kalewadi Pimpri , Pune 411017, Maharashtra, India