PRIVACY POLICY

Effective Date: February 18, 2026

Times Internet Limited ("Times" or "We" or “Us” or “Our”) respects your privacy and is committed to protecting it through Our compliance with this Privacy Policy. This Privacy Policy describes: TIL is the Data Fiduciary for most of the personal data described in this Policy, and in some cases it acts only as a Data Processor on behalf of a third party, as explained in this Policy.

• The types of information We may collect or that you may provide when you download and register with, access or use, or transact with the access the ToiHomes website at www.toihomes.com or associated mobile application (each, an App and together, Apps, any associated content, material, or functionality contained on the ToiHomes or associated mobile applications, all interactive features, applications, widgets, blogs, social networks and social network pages, and other online or wireless offerings that post a link to this Privacy Policy, whether accessed via computer, mobile device or other technology or any associated content, material, or functionality contained on the Times Application (collectively, the “Platforms”). The Platform is owned, developed and managed by Times.
• Our practices for collecting, using, maintaining, processing, accessing, storing, protecting and disclosing that information.
• Your rights under applicable law, including your rights under Indian Data Privacy laws.

This Privacy Policy must be read in conjunction and together with the Terms of Use of the particular Platform you are using, available at: www.toihomes.com/terms-of-services. This Privacy Policy applies only to personal information that you provide or that We collect via our Platform and services available herein (the “Services”).

This Privacy Policy does not apply to information that We collect through websites not under our control, including websites you may access through our Platforms, or information that you provide to or is collected by any third party. Please note that links from our Platforms, website may take you to external websites which are not covered by this policy. These third parties may have their own privacy policies, which We encourage and recommend that you read their privacy policies before you access, use, or download from such sites or before providing information on or through them. We will not be responsible for the content, function, or information collection policies of these external websites or liable for such third parties and their privacy practices nor do we endorse them.

By accessing, downloading, using the Platform(s) that we operate, which has a direct link to this Policy, you agree to be governed by the Privacy Policy of the Company.

By agreeing to this Privacy Policy, you represent that you shall not access our Services by means of any mechanism or technology which conceals your actual geo-location or provides incorrect details of your location (for example, use a virtual private network (VPN) to access our Services). We shall not be responsible or liable for any processing or collection of your information if you use these mechanisms to access our Platforms and Services.

You agree and acknowledge that We shall not be liable and will not be held responsible for any losses whatsoever, ever direct, indirect, incidental or consequential, including without limitation any losses due to online fraud. In case of any fraud, you can file a complaint with such third party directly for redressal.

The Website is not intended for users under 18 years of age, and We do not knowingly collect personal information from individuals under 18. If We learn that We have collected or received personal information from a user under 18, We will delete that information.

1. Information We Collect

We collect your personal information where it is necessary for us to provide you with a service at your request, such as when you contact us, submit an inquiry form for property details, express interest in real estate projects, or access the content on the Platform(s). We have discussed the manners of our collection of information, herein in greater detail for your reference:

A. Information Submitted to Us

When you register on our Platform, submit an inquiry form, or engage with our Services,You may voluntarily provide us information about you while using our services. such as by doing the following, some of the following categories of information are collected directly by us, and some are provided by you directly for the performance of certain functions:

• Filling out inquiry forms or lead capture forms on property listings
• Enquiring about real estate projects, properties, or services
• Scheduling site visits or requesting callbacks
• Initiating and maintaining correspondence with us

This information may include but not be limited to the following:

• Identification information such as your name and email
• Single Sign On (SSO) Registration: You may register on Our Sites using Times Internet Limited (“TIL”) SSO login. During registration, We ask that you provide basic personal information from you to continue to interact with you and to continue providing you the Services. Information that We collect includes but are not limited to the following, Mobile number; Email Address; Name. You may also refer to Our SSO Policy, here, for more details regarding the personal information processed while registering on the Sites. We do not collect gender or date of birth at registration or through SSO login, whether directly or via TIL SSO, consistent with Section 9 (Children’s Privacy) of this Policy.
• Contact information such as email address, mobile number, full name, Professional or organizational details (if applicable)
• Identification documents: such as Aadhaar, , PAN, , etc. These are collected only by our CRM team after a transaction is underway, for KYC or home-loan facilitation purposes.
• Property preferences such as budget range, preferred location, Property-related queries, questions, or communications sent via contact forms, property type (apartment, villa, etc.), configuration requirements (2BHK, 3BHK, etc.),
• Content: Text, images, videos, or documents shared during property listings, discussions, or service interactions;
• Financial information such as budget range, investment capacity, home loan requirements (where voluntarily provided by you for relevant services). We do not process online payments on the Platform; any financial or income details are collected only by our CRM team.
• Your correspondence and interactions with our representatives, including, Email exchanges, chat transcripts, or call logs, Inquiries or complaints submitted through online forms; and Responses to surveys, feedback requests, or promotional communications.
• Reviews, testimonials, comments, feedback, or suggestions provided through our platforms; and
• Additional information relevant to your use of our Platforms and Services, such as your preferences for communication (calls, chats, SMS, WhatsApp, email), survey responses and feedback,
• Any other details voluntarily provided in relation to your property or service inquiry

Such data is retained to ensure service quality assurance, regulatory compliance (including RERA and consumer protection norms), and to improve our customer support experience.

Such data/content may be used for customer engagement, quality monitoring, internal training, service improvement, dispute resolution, or publication (where consented). You acknowledge that any content submitted publicly (such as reviews or testimonials) may be visible to other users and you agree not to share confidential or proprietary information through such submissions.

By submitting such information, you represent and warrant that all data provided is true, accurate, complete, and current to the best of your knowledge. We rely on this information to respond to your inquiries, provide appropriate services, and maintain accurate records for lawful business purposes.

B. Information Collected Automatically

When you access browse, or interact with our Website, mobile application, or any other digital platform (collectively referred to as the “Platforms”), We may automatically collect certain information about your device usage patterns, and browsing behavior. This information is collected through the use of cookies, web beacons, pixel tags, SDKs, and other similar tracking technologies. This help us to distinguish you from other users of our Platforms and recognize you when you return on our Platform, improve platform functionality, enhance user experience, ensure security, and analyze site performance and usage trends and streamline your online experience. When you visit our Platforms, we may collect the following information:

i. Device and Network Identifiers

• Your Internet Protocol (IP) address, device's serial number, Cookies ID, or other unique device identifiers (Android Advertiser ID, iOS IDFA ID, or other similar identifiers)
• Information about the general geographical location of your device (including country, state, city, and pin code etc. as inferred from your IP address or device settings)

ii. Technical and System Information

• Details about the hardware and software that you are using to access the our Platforms including your computer/device name, your operating system, browser type and version, application version, operator name, screen size, CPU speed, and connection speed and specifications,
• System diagnostics and error logs to help us identify technical issues and optimize compatibility

iii. Usage and Activity Data

• URL visited, pages viewed, and time stamps indicating when you accessed or exited particular pages
• Details of your visits to our Platforms and the resources that you access, including, but not limited to, traffic data, location data, web logs and other communication data generated during your interaction with our Platforms
• Your activity logs on the Platform(s) - showing the sections of the Platform, pages you accessed, which property listings you viewed, which projects you show interest in, and which links clicked, and actions performed

iv. User Interaction Data

• Details regarding your interactions such as properties browsed, projects saved or bookmarked, inquiry forms submitted, brochures or other materials downloaded
• Engagement metrics, including frequency and duration of visits, navigation paths, and preferences selected during your session.

This information is collected through Google Analytics/Firebase, Meta Pixel, Microsoft Clarity, Google Tag Manager, and GrowthRx (an internal Times Internet Limited analytics platform). This automatically collected information enables to maintain and improve the security, integrity, and performance of our Platforms; provide personalized user experiences and recommend relevant listings or services; conduct data analytics and understand usage trends to enhance functionality and usability; detect, prevent, and investigate fraud, abuse, or unauthorized access; and comply with applicable legal, regulatory, or contractual obligations. You may manage or disable these technologies through your browser or device settings, though doing so may affect certain functionalities of the Platforms.

C. Information We Collect About You From Other Sources

In addition to information, you provide directly or that we collect automatically, we may also obtain certain information about you from legitimate third-party sources. Such information is collected and processed for the purposes set out in this Privacy Policy. We may collect information about you from the following types of sources and may include the below:

• Publicly available information: We may collect limited information that you have made publicly accessible such as content shared on public websites, online directories, or verified social media accounts. This may include the relevant public profile information, which may include your profile picture, age, gender, location and any other pertinent information from such social media account which is necessary for verification of your identity, fraud prevention, or service authentication This may also include updates about your property inquiries, interest in specific projects, or related transaction details required to facilitate our services.
• Social Media Interactions: We also receive information from you when you interact with our pages, Apps, groups, accounts, or posts on social media platforms or campaigns (for example, by liking, commenting, following, or messaging), we may receive information such as your public profile name, engagement metrics, and communication history. Such information may be used for customer engagement, community management, and service improvement.
• Business Partners and Affiliates: We may receive information from our business affiliates, subsidiaries, partner builders, project partners, or joint-venture entities in relation to property listings, marketing collaborations, or service integration or promotional offers.
• Third-Party Service Providers: The information received from these third-party sources may include but is not limited to contact details (such as name, email, or phone number); Demographic and professional information; Service-specific details (e.g., property interests or inquiry status); and Analytical or engagement metrics. We may obtain limited information from third party service providers such as analytics platforms, advertising networks, CRM systems, cloud hosting partners or customer identity verification agencies, communication management service providers etc. Such data assists us in improving our services, evaluating performance, communication management, compliance, and customer support and ensuring platform security.
• Marketing and Lead Providers: We may receive information from third-party marketing or lead generation companies where you have consented to share your data. The information may include your contact details, property preferences, and location of interest, which help us tailor our communication and connect you with relevant real-estate offerings For example, when you submit your details through a lead form on Facebook or Instagram, Meta shares your name, email, mobile number, and stated property interest with us. Our marketing alliance partners/agencies share lead-quality feedback with us as part of campaign management.
• Social or Professional Networks: We may receive publicly available information from professional networks or community networking platforms (such as business directories, professional associations, or industry forums) where you have shared public profile details. This data may be used for professional communication and service facilitation.

Referrals: We may collect information about you from referrals, such as friends, family members, or colleagues who recommend our services or share your details for contact purposes. This list of third-party sources is illustrative is not exhaustive. and, in specific instances, we may need to collect or verify additional data for the purposes set out in this policy.

D. Information We Receive About You From Other Sources

In addition to information, you submit directly or that we collect automatically, sometimes we may also receive information about you from legitimate third-party sources where you have given your consent to other websites, services or third parties to provide information to us. Such sources may include:

i. Affiliates and Authorized Service Partners

We may receive personal and transactional information about you from our affiliates, subsidiaries, and authorized service partners who assist us in providing end-to-end brokerage, advisory, or home-financing services. This may include updates about your property enquiries, loan application status, eligibility verification results, or interaction details shared as part of collaborative service delivery. These partners include, without limitation:

• Real estate developers, partner builders, and project partners who share details relevant to your selected property or inquiry;
• Advertising, analytics, or marketing partners that help us assess campaign performance or customer engagement trends; and
• Customer Relationship Management (CRM) service providers or lead management platforms assisting in accurate record maintenance and response tracking.

All such data may be used for legitimate business purposes such as service facilitation, communication management, lead tracking, and user support.

ii. Third-Party Integrations

We may receive limited information, such as lead status, processing stage, or service-related updates, from our integrated partner Easiloan through a secure API interface. This exchange enables us to manage partnership workflows and ensure the smooth processing of user inquiries related to home loans or financing assistance. Loan provider shall be a separate Data Fiduciary under the DPDP Act for the data it processes on its own behalf, and we share your identity and other information with the loan provider only with your additional, explicit consent, given specifically for that purpose.

We do not receive or store any sensitive financial information (e.g., credit score, account details) directly from such partners unless explicitly authorized and consented to by you.

iii. Other Business Partners and Data Processors

We may, from time to time, receive additional information about you from other business collaborators with whom we jointly provide certain products or services. This includes, but is not limited to:

• Property developers, partner builders and brokers engaged in shared listings;
• Legal, valuation, or documentation service providers who support the property transaction process;
• Technology or hosting providers facilitating digital service delivery and analytics.

Whenever we receive information about you from these third parties, we will only use it in such manner that is already communicated to you, as per this Policy, and for such defined purposes only. We may further collect additional analytics reports, information from other services, websites, who work together with us.

E. Cookies, Web Beacons, and Similar Tools and Third-party Information Collection

To enhance user experience, ensure the proper functioning of our Platforms, and improve our marketing and analytical capabilities, we and our authorized third-party partners may use various tracking technologies, including cookies, web beacons (also known as clear GIFs or pixel tags), scripts, and software development kits (SDKs). These technologies enable us to automatically collect certain information about your interactions with our Website, mobile applications, and digital communications.

i. Web Beacons and Pixel Tags:

We may use Web Beacons, tracking pixels, and similar technologies to track your online usage patterns in an anonymous manner, without collecting your personally identifiable information to understand user engagement and improve our communications. For instance, we may also use web beacons embedded in our emails that we send to users who have opted in to receive email from us, to determine whether our recipients have opened those emails and/or clicked on links in those emails or interacted with our content.

We use this information to inter-alia deliver our web pages to you upon request, to tailor our Platform(s) to the interests of our users, to measure traffic within our Platform(s), to improve the load performance and quality, functionality and interactivity of our Platform(s), optimize user experience. These technologies also assist in determining the geographic distribution of our users in aggregate form without identifying individual users and also let advertisers know the geographic locations from where our users come without personally identifying the users.

We require our partners to inform users on their privacy policy page that the webpage uses website beacons placed on our website. This option will only be recorded in your current browser and will not be recorded in your user history.

ii. Cookies

Cookies are small text files stored on your device that help us recognize you and remember your preferences when you visit our Platforms. Cookies allow us to (i) facilitate seamless navigation and improve functionality, (ii) Analyze user behavior and usage trends, (iii)Measure the effectiveness of advertisements, marketing campaigns, and promotional activities, and (iv) Personalize your experience based on your browsing behavior and preferences.

Specifically, we use: (i) strictly necessary session cookies for the ToiHomes web app, which cannot be disabled as the Platform cannot function without them; (ii) Google Analytics/Firebase for traffic and audience analytics; (iii) Meta Pixel and Google Ads/remarketing tags for conversion tracking and interest-based advertising; and (iv) Microsoft Clarity and Google Tag Manager for session analytics and tag management. Categories (ii) to (iv) are subject to the cookie-consent banner and can be declined. You can manage or disable cookies through your browser settings. However, doing so may affect certain functionalities or features of our Platforms.

For detailed information on how we use cookies, the categories of cookies deployed, and how you can control or opt out of them, please refer to our [Cookie Policy-Please insert the link].

iii. Analytics and Performance Tools

We may utilize third-party analytics services and partners who deploy cookies or web beacons on our behalf. These partners help us measure website traffic, analyze user behavior, track conversions, and evaluate the effectiveness of advertisements or content displayed to you. Our partners may also use aggregated or anonymized information for their independent analytics purposes, in compliance with applicable privacy laws and contractual safeguards.

iv. Third-Party Marketing Tags

Certain authorized advertising or marketing partners may place their own tracking technologies on our Platforms to serve you more relevant property listings, offers, or promotional content based on your browsing activity. We require all such partners to disclose their data collection practices within their own privacy policies and to comply with applicable data protection and consent requirements.

v. Advertising based on our Custom Audiences

From time to time, we provide third-party companies (e.g., Meta, Google) with your personal information to request that such companies create custom or lookalike audiences (i.e., past customers or customers likely to be interested in our offerings because they share characteristics similar to our existing customers). This enables us to target our advertising efforts more effectively to those who may be interested in products and services. Web Beacons. Pages of the Website may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit Times, for example, to count users who have visited those pages and for other related app statistics (for example, recording the popularity of certain app content and verifying system and server integrity).

vi. Third-party Information Collection

FWhen you use the Website or its content, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include: advertisers, social media platforms, ad networks and ad servers, analytics companies, your mobile device manufacturer, your mobile service provider, etc. These third parties may use tracking technologies to collect information about you. The information they collect may be associated with your personal information or they may collect information, including data about your online activities over time and across different websites, apps and other online services websites. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

vii. User Choices and Consent

Where required under applicable law, we will seek your consent before using or storing cookies and similar technologies on your device. You may choose to accept or reject cookies and tracking technologies by adjusting your browser or device settings. Your choice will apply to your current browser and device session and may not persist across multiple sessions unless you configure your settings accordingly. For more information on managing cookies and tracking technologies, please visit our [Cookie Policy- Please insert the link].

2. PURPOSE OF COLLECTION OF INFORMATION AND USAGE

We collect and process information (including Personal Information) to ensure the effective functioning of our Platforms, provide and improve our Services, fulfil our contractual, legal and regulatory obligations and for the purposes as outlined below including but not limited to:

• User Identification and Authentication: To help us identify verify, and authenticate users when user log into the Platform, to validate credentials; to maintain account integrity; and to ensure secure, authorized access to Services, user accounts for ensuring network security and to map a specific user profile with property inquiries;
• Facilitating Property Search and Related Services: To facilitate and enhance your property search experience, match property preferences with relevant real estate projects, listings, or developers, and connect you with relevant real estate projects partners, sales representatives, or developers;
• To Process Inquiries and Facilitate Transactions: When you submit an inquiry form, your contact information, inquiry details, preferences, budget information, and any other information you provide will be shared with our sales team, brokerage representatives, and relationship managers; the relevant property partner builder or their authorized representatives and sales team; partner financial institutions for home loan services (if you request such services); other service providers engaged by us or partner to fulfill the transaction and services (such as legal advisors, documentation services, site visit coordinators). This data sharing is integral to the brokerage services provided by us to facilitate property transactions and fulfill our brokerage obligations.
• Enhancement of User Experience: To improve, personalize, and enhance the layout, structure, and functionality of our Platforms, ensuring a seamless and user-friendly experience and enhance the quality of services. This includes analyzing website usage, user interactions, and behavioral trends to optimize performance and content;
• Personalization and Recommendations: To personalize your browsing experience on the Platform(s), and recommend properties, projects, and real estate content to users they might be interested in based on your preferences, browsing history and previous interactions on the Platform. Delivering tailored content, recommendations, and advertisements based on user behavior, preferences, and location
• Location-Based Services: For providing location-based property recommendations such as deliver localized property listings, project information, and recommendations based on geographical location. To enable advertisers and partners to understand the general geographic location of our users (such as city or region), without revealing any personally identifiable information
• Performance of a contractual and legal obligation: To perform our contractual obligations arising from user inquiries, bookings, or other transactions; to manage and facilitate property-related engagements; and to comply with applicable legal, regulatory, or reporting requirements.
• Communication and Engagement: To communicate with you regarding property inquiries, site visits, project updates, feedback, to send service-related notifications; and to respond and provide resolution to any queries related to your use of Services, complaints and/or requests related to use of our services; Running surveys, polls, contests, and collecting feedback to improve services.
• Marketing, Advertising and Promotional Activities: To provide you with news, special offers, general information, commercial communications about real estate projects, properties, and services along with marketing information, feedback and surveys; To personalize on-site content and advertisements according to your interests though internal and external platforms like Facebook Pixel, Google Ads, and Data Management Platforms (DMPs)
• Inquiry Routing and Service Facilitation: To process and route your inquiry requests to our sales team or authorized project partners/developers for further assistance, engagement, and service fulfillment.
• Legal Compliance and Policy Updates: To comply with statutory and regulatory obligations; cooperate with lawful requests or investigations; and notification of any changes in the terms of use, privacy policy or other related policies.
• Service Improvement and Analytics: To conduct internal analysis, usage monitoring, and performance assessments, to troubleshoot issues or problems with the Platform or Services and for maintain adequate backs-ups to ensure high availability, and aid in disaster recovery; to enhance product features; to facilitate EMI calculations, property comparisons, and to develop other tools or utilities such as property comparison, and search filters; to share non-personally identifiable usage data (in aggregated form) with trusted advertising and analytics partners to improve audience targeting and reporting accuracy, to analyze user behavior, generate reports, and optimize user experience.
• New and Related Services: To offer, integrate any other new or related products, services developed by us, our affiliates, subsidiaries and/or third party partners in alignment with user interests, managing feeds for web, mobile, and app platforms to provide real-time updates and other content.

3. DATA SHARING WITH 3RD PARTIES

We may share your personal and non-personal information with our trusted partners or third parties service providers, for legitimate business purposes, including meeting the obligations agreed to between you and us, enhance user experience.

A. Intra-Group Sharing:

We may use and/or disclose your information with the Company-controlled businesses, affiliates, subsidiaries and other entities within the Times group of companies. This enables us to operate our business effectively, improve services, and provide you with a seamless experience across our group platforms.

We operate a centralized data system to enhance collaboration and operational efficiency among its various commonly owned group companies, some of which may be expressly branded as Times Group companies, while others may utilize independent brands. This platform consolidates user data, such as personal information and subscription details, from different services offered by affiliated companies. The purpose of this data sharing is to enable cross- selling and upselling opportunities, improve customer insights, and streamline service offerings across all affiliated entities. By pooling data into a shared system, an affiliate company delivers personalized services and targeted marketing, thereby increasing customer engagement, retention, and revenue growth. This intra-group sharing is limited to purposes consistent with why you provided your information to us in the first place, in line with our obligations as a Data Fiduciary under the DPDP Act, including the principle of purpose limitation.

The types of data shared with the centralized data system include personal identifiers such as names, phone numbers, email addresses, dates of birth, and location details. It also includes information about subscription plans, such as whether they are paid, free, or trials, along with the start and end dates of those plans (if applicable). Additionally, the platform tracks user behavior, including whether the customer is a repeat user and the specific services or plans they subscribe to. This shared data allows affiliated companies to analyze customer preferences and usage patterns, enabling them to offer complementary services and personalized recommendations.

This intra-group data sharing initiative improves the customer experience by offering more tailored services, supports business development through targeted marketing, and enhances operational efficiency across Times group entities. We maintain a commitment to addressing legal and privacy considerations to ensure compliance and uphold user trust.

B. Sharing with Third-Party Partners and Service Providers

We may share your information with third party business partners, service providers including but not limited to analytics providers, advertising networks, technology partners, social networks, real estate developers, financial service providers, project partners, brokerage partners, CRM service providers, and any other third parties for below mentioned purposes:

• To assist them to reach out to you in relation to property inquiries, loan / financial assistance for property purchases, project details, site visits, and follow-up communication (including marketing and sales)
• To process your inquiry/requests for property information and schedule site visits
• To send e-mails, instant messages, social media messages, SMS messages, and WhatsApp messages for property-related communication and managing lead generation, marketing, and follow-up activities
• Providing analytics, recommendation, and ad-tech services (including cookies, pixels, beacons, and mobile identifiers) ad tech services, analytic services, including but not limited to click stream information, browser type, time and date, information about your interactions with property listings, advertisements and other content, including through the use of cookies, beacons, mobile ad identifiers, and similar technologies
• To serve advertisements on our Platforms, affiliate websites, and any other digital platform available on the internet. However, the privacy policy of such digital platform shall be applicable upon the processing of information on such third party digital platform
• To assist real estate developers and project partners in reaching out to you with relevant property offerings and marketing campaigns

Among our service providers, we engage 3rd parties as our CRM and lead-management platform, and for AI-assisted outbound calling for lead management and support. We do not sell your personal data for monetary consideration. We also engage a cloud/hosting provider for hosting and storage of platform data; all such data is stored in India, subject to a data processing agreement and encryption in transit. We do not use any payment gateway, as we do not process online payments on the Platform. Where you consent to WhatsApp or SMS communication, we use WhatsApp Business and SMS gateway providers to deliver that communication.

C. Sharing for Legal, Security, or Corporate Transactions

We may further be required to share your personal information in certain exceptional circumstances; this would be where we believe that the disclosure is:

• Required by the law, or in order to comply with judicial proceedings, court orders or legal or regulatory proceedings (including from government or law enforcement authorities in India, and where applicable), limited in each case to the minimum data necessary to comply with the request
• Necessary to protect the safety of our employees, our property or the public
• Necessary for the prevention or detection of crime, including exchanging information with other companies or organizations for the purposes of fraud protection
• Proportionate as part of a merger, business, or asset sale, in the event that this happens we will share your information with the prospective seller or buyer involved.
• We reserve the right to disclose information if We believe disclosure is necessary or appropriate to protect our rights, property, or safety or that of our customers, users, contractors or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction

D. Use of Analytics and Behavioral Tracking Technologies

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of properties/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

We may also use analytics tools such as Google Analytics, Meta Pixel (Facebook Pixel), and similar technologies to track user behavior, measure campaign effectiveness, and deliver targeted advertisements.

The Website will also allow you to intentionally interact with third parties, such as those whose products or services are made available through the Website. We do not necessarily control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.

4. DATA RETENTION

We retain your personal information for as long as necessary for the purposes for which it was collected including to provide our Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods for records will also be based on the type of record, the nature of the activity and product and service that the same is associated with, linked to.

We retain your information till such period that is required for the purposes of us meeting your requests on our Platforms, following up on property inquiries, facilitating ongoing communication regarding real estate projects, and in compliance with the applicable laws, statutory requirements.

We may continue to retain your data for a longer period where retention is:

• Required under applicable laws, regulations, tax, or accounting requirements;
• Necessary to establish, exercise, or defend legal claims;
• Required for legitimate business purposes such as maintaining business records, preventing fraud, or ensuring continuity of service; or
• Based on your continued engagement with our Platforms, including ongoing property inquiries, communication regarding real estate projects, or related transactions.

Where you have requested deletion of your data, we will take reasonable steps to delete or anonymize your Personal Information, unless we are required to retain it to comply with legal or contractual obligations.

We periodically review the information we hold and securely delete or anonymize Personal Information that is no longer necessary for any lawful business or legal purpose. As a general framework: account data is retained for the life of your active account; lead and inquiry data is retained for the sales plus a limited follow-up period; and analytics data is retained per each tool’s default settings.

5. DATA PRINCIPAL/SUBJECT RIGHTS

We respect your rights in relation to your personal data and are committed to ensuring transparency and control over how your information is used and processed. In accordance with the Digital Personal Data Protection Act, 2023, you are entitled to exercise the following rights as a Data Principal:

1. Right to Access: You have the right to access your personal data
2. Right to Correction: You have the right to correct or updating any inaccurate or incomplete personal data
3. Right to Withdraw Consent: Where processing is based on your consent, You have the right to withdraw your consent at any time. Please note that withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
4. Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent, subject to our legal and regulatory obligations to retain certain data
5. Right to Grievance Redressal: You have the right to raise any concerns, complaints, or grievances in connection with the processing of your personal data. We will acknowledge and address your grievance within the timeframes prescribed under applicable law.
6. Right to Nominate: You have the right to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

If you require any further information about your rights as explained below, or if you would like to exercise any of your rights, please reach out to us by writing to the Grievance Officer of the Company. enforce legal rights, or resolve disputes

However, we may maintain limited backup copies of your information, to the extent necessary to comply with our legal obligations enforce legal rights, or resolve disputes.

6. INFORMATION SECURITY

We take commercially reasonable technical, physical, and organizational steps to safeguard any information you provide to us designed to protect it from unauthorized access, loss, misuse, or alteration. Specifically, we use role-based access control restricted to authorised personnel, encryption in transit, multi-factor authentication for administrative access, and audit logging of access to systems holding personal data. We are formalizing a documented information security management framework as part of our ongoing compliance program.

We try to ensure that all information you provide to us is transferred securely via the website (always check for the padlock symbol in your browser, and “https” in the URL, to ensure that your connection is secure).

All information you provide to us is stored on secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Although we take reasonable security precautions, no computer system or transmission of information can ever be completely secure or error-free, and you should not expect that your information will remain private under all circumstances. The Company will not be liable for any damages of any kind arising from the use of the Platform, including, but not limited to any indirect, incidental, special, consequential or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly or any loss of data, use, good-will, or other intangible losses.

Unfortunately, the transmission of information via the internet and mobile platforms is not completely secure. Although We do our best to protect your personal information, We cannot guarantee the security of your personal information transmitted through our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures We provide.

If you receive a suspicious email on our behalf, We suggest you do not reply to it and do not open any attachments, click on links contained in the e-mail or provide any information in response to it. You can report suspected fraud involving us by sending an e-mail to Grievance Officer at contact@toihomes.com. Please include the word "phishing" in the subject line of your e-mail and provide as much information as possible about the fraudulent activity or message. We do not send e-mails requesting a user for payment information, username or passwords. However, We may verify the user name, password etc. provided by you from time to time.

The safety and security of your information (including personal information) can also depend on you. For example, where We have given you (or where you have chosen) a password for access to certain parts of the Website, you are responsible for keeping this password confidential. You should not share your password with anyone.

7. CROSS-BORDER TRANSFERS

Our core Platform data is stored in India. Your limited personal data may be transferred outside India by our analytics and advertising vendors — principally Google, Meta, and Microsoft, whose processing infrastructure may be located outside India.

We shall comply with our legal and regulatory obligations in relation to your Information, including having a lawful basis for transferring Personal Information and putting appropriate safeguards in place to ensure an adequate level of protection for the Personal Information. We will also ensure that the recipient in such alternate country is obliged to protect your Information at a standard of protection comparable to the protection under applicable laws. Our lawful basis for such transfer will be either on the basis of consent or one of the safeguards permissible by laws.

8. THIRD-PARTY LINKS AND INTEGRATIONS

Our Platforms may contain links to third-party websites, applications, or services (“Third-Party Sites”) that are not operated or controlled by us. These Third-Party Sites may include, but are not limited to, real estate project websites, developer portals, payment gateways, loan providers, social media platforms, and analytics tools.

When you click on a link or interact with a Third-Party Site, you may be redirected outside our Platform. Please note that:

• Independent Privacy Practices: The data handling, privacy, and security practices of such Third-Party Sites are governed solely by their respective privacy policies. We do not control, endorse, or assume responsibility for the content, accuracy, or activities of any such external websites.
• Information Sharing: Certain integrations or embedded tools (such as Google Maps, YouTube API services, Meta Pixel, or Microsoft Clarity) may collect or process data directly from you in accordance with their own policies. By using such features, you agree to the terms and privacy practices of those providers.
• User Discretion Advised: We strongly recommend that you review the privacy statements of every Third-Party Site you visit or engage with before submitting any personal or sensitive information.

We disclaim any responsibility for the privacy practices or content of Third-Party Sites and shall not be liable for any loss, damage, or misuse of data arising from your use of such external links or integrations.

9. REAL ESTATE REGULATORY DISCLOSURES

Consistent with our Terms of Use, Times Internet Limited is registered as a real estate agent under the Real Estate (Regulation and Development) Act, 2016 (“RERA”). TIL's RERA registration details are published at www.toihomes.com/rera-information and may be independently verified with the relevant state RERA authority. Listed projects carry their own separate project-level RERA registration numbers, shown on the listing.

Property listings and broker credentials are verified through a combination of manual review and automated checks before publication. Where property information is supplied by a listing developer or Partner Builder, this is disclosed on the listing, and you are encouraged to verify it independently before making a decision, consistent with our Terms of Use.

10. CHILDREN PRIVACY

You must have attained the age of majority to be able to use and access our Services. If you are a minor in your jurisdiction, your registration and use of our Services must be with the supervision of an adult. Our audience is inherently adult (buyers, renters, and investors in residential real estate); we do not collect date of birth at signup, and registration relies on a self-declaration of adulthood. We do not permit ad targeting or profiling of under-18 users, our analytics and advertising SDKs are configured for a general adult audience, and our app store listings declare an adult (18+) target audience, verified at each release.

As a parent or legal guardian, please do not allow your minors under your care to submit Personal Information to us. In the event that such Personal Information of a minor is disclosed to us, you hereby consent to the processing of the minor's Personal Information and accept and agree to be bound by this Privacy Policy and take responsibility for his or her actions.

However, if the Company is notified that the personal data of individuals below the age of majority has been collected by Us, without user or parental consent, We shall take all necessary steps to delete such information from our servers. As a parent or legal guardian, you are encouraged to reach out to the Grievance Officer, for redressal of any complaints in relation to collection of children data. If we become aware that we have collected personal data from someone under 18, we will close the associated account and delete the data promptly.

11. GRIEVANCE REDRESSAL

If you have any complaints, concerns with regards to the use, storage, deletion, and disclosure of your personal information provided to Us, you may reach out to the designated Grievance Officer. The Grievance Officer appointed by TOI Homes is Mr. Arunav Sharma who can be contacted at contact@toihomes.com.

You can also write to:

Address:
Times Internet Limited
391, Udyog Vihar, Phase - III,
Gurgaon, Haryana 122002, India
Ph: 0124-4518550

Please ensure that you do not share any feedback communication with an unauthorised member of the Company; the Company will not be responsible for the resolution of your query, in such case. If you choose to write to Us, you must address such communication to "Grievance Officer" and provide the following information:

• Your identification details – Name, ToiHomes ID, if applicable
• Details of your specific concern(s)
• Clear statement as to whether the information is personal information or sensitive personal information
• Your address, telephone number or e-mail address
• A statement that you have a good-faith belief that the information has been processed incorrectly or disclosed without authorization, as the case may be
• A statement, under penalty of perjury, that the information in the notice is accurate, and that the information being complained about belongs to you

The Company may reach out to you to confirm or discuss certain details about your complaint and issues raised.

Contact Information:

For any questions or concerns regarding this Privacy Policy, please contact us at contact@toihomes.com

12. CHANGES TO THE PRIVACY POLICY

We may update, revise, or modify this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

Whenever we make material changes, we will:

• Post the updated version on our Platform with a revised “Last Updated” date;
• Take reasonable steps to notify you of any significant changes, such as by email, in-app notifications, or prominent notice on our website (where applicable).

Your continued use of our Platform after any such modifications constitutes your acknowledgment and acceptance of the revised Privacy Policy.

We encourage you to periodically review this page to stay informed about how we are protecting your information.

This version was last updated on August 20 2026 and historic versions can be obtained by contacting us.

UNITED STATES STATE PRIVACY NOTICES

ToiHomes primarily operates in, and is directed at, India, including NRI and overseas buyers. This addendum is provided because a limited amount of personal data — collected through analytics and advertising tools such as Google Analytics, Google Ads, and Meta Pixel — is processed by vendors on U.S. infrastructure, and because residents of U.S. states may from time to time access the Platform. It supplements, and does not replace, the rest of this Policy, and applies only to the extent U.S. state law applies to our processing of your information.

A. California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”), gives you the following rights over your personal information:

• Right to know the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and third parties involved.
• Right to delete personal information we have collected from you, subject to certain exceptions (for example, information we need to complete a transaction or comply with a legal obligation).
• Right to correct inaccurate personal information.
• Right to opt out of the “sale” or “sharing” of your personal information.
• Right to limit the use of sensitive personal information, though we do not collect sensitive personal information in the CCPA sense.
• Right to non-discrimination for exercising any of these rights.

We do not sell your personal information for money. However, our use of Meta Pixel and Google Ads for interest-based advertising may constitute “sharing” under the CCPA’s definition of cross-context behavioral advertising, even without a monetary exchange. You can opt out of this sharing by declining advertising cookies in the cookie-consent banner, or by enabling the Global Privacy Control signal in a supporting browser, which we will honor as an opt-out request.

To exercise your CCPA rights, contact us using the details in the Grievance Redressal section of this Policy. We will verify your request using the information reasonably available to us, and you may designate an authorized agent to make a request on your behalf.

B. Virginia, Colorado, Connecticut, Utah, and Other Comprehensive State Privacy Laws

If you are a resident of a state with a comprehensive privacy law — including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), or another state that has since enacted a comparable law — you generally have the right to: confirm whether we process your personal data and access it; correct inaccuracies; request deletion; obtain a portable copy of your data; and opt out of targeted advertising, the sale of personal data, or profiling in furtherance of decisions producing legal or similarly significant effects. Where your state’s law provides a right to appeal our response to your request, we will provide instructions for doing so at the time we respond.

C. How to Exercise Your Rights Under This Addendum

You can exercise any of the rights described in this addendum by contacting the Grievance Officer at the details in the Grievance Redressal section, or by declining advertising cookies through the cookie-consent banner for opt-out-of-sharing requests. We do not currently respond to browser “Do Not Track” signals other than the Global Privacy Control mechanism described above, as there is no common industry standard for interpreting Do Not Track signals.