Data Privacy Policy

Legislative Framework & Data Fiduciary

This policy applies to all personal information collected via our website (irecexpo.com), registration kiosks, turnstile scanners, and related digital services.

The Data Fiduciary responsible for processing your personal data is the International Real Estate Congress (IREC) 2026 Secretariat, operating in partnership with the National Association of Realtors - India (NAR-India) and the Hyderabad Realtors Association (HRA), having its operational secretariate at the HITEX Exhibition Centre, Hyderabad, Telangana, India.

Personal Data We Collect

When you initiate or complete priority registration for IREC 2026, we collect only the necessary data required to curate your VIP experience:

• Identity & Contact Credentials: Full legal name, direct mobile telephone number, and official email address.
• Residence & Origin Data (Optional): Country of residence and current city of residence (e.g., Hyderabad, Mumbai, Bangalore, Dubai, London, Singapore).
• Acquisition Preferences (Optional): Target property country, target acquisition city/locality (e.g., Kokapet, Neopolis, Jubilee Hills), asset category of interest (Sky Mansions, The Villa Collection, Vacation Homes, Farmstead), and expected investment timeframe.
• Referral & Invitation Codes (Optional): Specific invitation serial codes provided by exhibiting developers, accredited Channel Partners, or host associations.
• Technical Telemetry: Anonymised IP addresses, browser fingerprint, session verification states, and OTP transmission logs for audit and turnstile entry reconciliation.

Purpose of Processing & Lawful Basis

Your personal data is processed strictly under lawful, explicit grounds under Section 4 and Section 6 of the DPDP Act 2023 for the following purposes:

1. Generation of VIP Priority Access Passes: To create your individual, cryptographic QR access pass for frictionless entry at HITEX Exhibition Centre turnstiles.
2. Identity & Fraud Prevention: To authenticate attendee identity via two-factor mobile One-Time Password (OTP) verification and eliminate fraudulent or bot registrations.
3. Curated Developer Previews: Where you have stated portfolio preferences (e.g. Ultra-Luxury Sky Mansions or Gated Villas), to facilitate private developer introductions and coordinate confidential site visit scheduling.
4. Concierge Communications: To transmit your pass confirmation, timetable guides, speaker itineraries, floor maps, and post-expo transaction lookbooks.

Voluntary Consent & Electronic Communications (TRAI Compliance)

By ticking the mandatory consent checkbox during priority registration, you provide clear, affirmative, informed, and unambiguous voluntary consent for IREC 2026 to communicate with you regarding your registration and attendance.

TRAI & Telecom Compliance: In accordance with the Telecom Regulatory Authority of India (TRAI) guidelines and the Telecom Commercial Communications Customer Preference Regulations (TCCCPR), your registration constitutes an explicit transactional opt-in to receive pass credentials, OTP codes, schedule alerts, and curated property advisories via WhatsApp (via certified Meta Business API providers including MSG91), Email, SMS, and telephone calls, exempt from National Do Not Disturb (DND) restrictions.

Data Sharing Limitations & Developer Vetting

5.1 Certified Developers Only: Your contact and acquisition preferences are only shared with accredited, participating property developers relevant to your stated portfolio interest. Every exhibiting developer is bound by contract to utilize attendee information solely for IREC 2026 advisory coordination and to observe confidentiality standards.

5.2 Statutory Disclosures: We may disclose personal information if required to do so by applicable Indian law, court order, regulatory direction from the Telangana Real Estate Regulatory Authority (TS RERA), or law enforcement agencies.

Data Storage, Encryption & Security Measures

We employ industry-standard technical and organizational security protocols to safeguard your personal data:

• Encryption in Transit & at Rest: All data transmitted between your browser and our servers is secured with 256-bit SSL/TLS 1.3 encryption.
• Restricted Administrative Access: Access to registration data is strictly compartmentalized and guarded by multi-factor administrative authentication and role-based permissions.
• Tamper-Evident QR Encryption: VIP access QR codes contain digitally signed payloads preventing counterfeiting or unauthorized data extraction.

Your Rights as a Data Principal (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, you enjoy the following statutory rights regarding your personal information:

• Right to Access Information: You may request a summary of the personal data processed by us and identities of third-party developers with whom data has been shared.
• Right to Correction & Erasure: You may at any time request the correction of inaccurate or misleading data, or the complete erasure of your registration profile.
• Right to Withdraw Consent: You have the right to withdraw your consent easily at any time by sending an email to privacy@irecexpo.com or replying "STOP" to our WhatsApp notifications. Upon withdrawal, your records will be archived and excluded from all future communications.
• Right of Grievance Redressal: You have the right to accessible grievance redressal through our designated Grievance Officer.

Grievance Officer & Official Contact Information

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the name and contact details of our designated Grievance Officer are set out below: