Privacy Policy

How the Suncity Residents Welfare Association collects, uses and protects your information

Last updated: 12 October 2026 Applies to: visitors and registered residents

In short: we collect only what we need to run the Association's website and community services. We do not sell your data, we do not show your details to the public, and resident-only information is visible only to verified residents and the Association's administrators. You can ask us to see, correct or delete your information at any time.

1. Who we are

Suncity Residents Welfare Association ("the Association", "we", "us") is the resident body of Suncity, Gurugram, and runs this website. For the personal data described below, the Association decides why and how the data is used and is responsible for it. This policy should be read with our Terms of Use.

2. What we collect

What we collect depends on how you use the website.

When you...	We collect
Browse public pages	Technical details such as IP address, browser and device type, pages requested, and date and time (standard server records).
Register as a resident and log in	Your name, email address, phone number, flat/block number, your login credentials (stored in a protected form, never as plain text), verification status, and login activity.
Raise an issue or comment	The text you submit, linked to your resident account, along with the date and the responses given.
Place a classified listing through the Association	The listing text, location, and the contact name, phone and email you want shown with it (these are visible to the public), plus a billing record (invoice number, payment status and date) where a fee applies. We do not collect card or bank details through this website.
Send an advertising enquiry ("Book this space")	Your name, organisation, mobile number, email (if given), your description, and your IP address and browser details to help prevent misuse. These are seen only by the Association's administrator and are not published or shared with other residents or advertisers.
Use the contact form	Your name, email, phone (if given), subject, message, the date, and your IP address and browser details to help prevent misuse.
Open residents-only documents	Your resident session is checked so that only verified, active residents can open them.
See or click an advertisement	That the advertisement was viewed or clicked, with your IP address and browser details, for counting and to detect fraudulent clicks.
Fail to log in repeatedly	The username tried, IP address and time, so that we can block guessing attacks.

Administrators and office-bearers who manage the website are also recorded in an activity log (what was changed, when, and from which IP address) so that changes can be traced.

We do not knowingly collect sensitive information such as government ID numbers, bank or card details, or health information. Please do not post such details in issues, comments, listings or messages.

3. Why we use it

to create, verify and manage resident accounts, and make sure resident-only material reaches residents only;
to receive, route and respond to issues, complaints, suggestions and queries;
to publish notices, circulars, documents, financial statements and classifieds for the community;
to contact you about your account, your issue or Association business, including by email and, in future, by messaging services where you have given your number;
to keep the website secure, prevent misuse and fraud, and investigate incidents;
to count advertisement views and clicks, and report them to the advertisers who support the website;
to keep records the Association is expected to keep, and to meet legal obligations; and
to maintain and improve the website.

We process your data on the basis of your consent (for example when you register or submit a form), and for the legitimate purposes of running the resident body and complying with the law. You can withdraw consent as explained in section 9.

We do not use your data for automated decisions about you, and we do not sell, rent or trade it.

4. Who can see your information

The public can see only public pages (such as news, gallery, governing body information and published classifieds). Contact details placed in a classified listing are public, so give only what you are happy to share.
Verified residents can see resident-only material, such as financial statements, and issues and comments that are shown to residents. When you post an issue or comment, other verified residents may see your name and flat details together with it, depending on the visibility chosen.
The Association's administrators (data entry operators, managers and the administrator) can see the data needed for their role. Access is restricted by role: for example, only the administrator can manage users and settings.
Service providers who host the website or provide email or messaging services act for us and may handle data only to provide those services.
Authorities and courts where we are required by law, or where needed to protect the safety of residents or the rights of the Association.

We do not publish residents' phone numbers or email addresses to other residents or the public unless you choose to include them in a listing or post.

5. Cookies and similar technology

The website uses a session cookie to keep you logged in and to protect forms against forgery. These are essential for the website to work and are removed when you log out or your session expires. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but resident login will then not work.

6. Advertisements

Advertisements on this website are placed directly by the Association for local sponsors. We record views and clicks (with IP address and browser details) for counting and fraud prevention, and report only summary figures to advertisers. We do not give advertisers your name, contact details or resident information.

7. How long we keep it

Resident accounts: while you are a resident and your account is active, and for a reasonable period afterwards for record-keeping, unless you ask us to delete it sooner.
Issues and comments: as long as they are needed for the community's records. We may remove personal details from older items.
Contact-form messages: until the matter is closed and for a reasonable period afterwards.
Security, login and activity logs: for a limited period needed for security and audit, then deleted or anonymised.
Financial records and official documents: for as long as the Association's accounting and legal record-keeping requires.

8. How we protect it

We use reasonable safeguards to protect personal data, including password protection for accounts, role-based access for administrators, an approval step for published content, private storage with login checks for the financial statements, and logging of administrative changes. We encourage you to use a strong, unique password and to log out on shared devices. No website can be made completely secure, so we cannot guarantee absolute security.

9. Your rights and choices

Under the Digital Personal Data Protection Act, 2023, and in line with our own practice, you may:

ask for a summary of the personal data we hold about you and how it is used;
ask us to correct inaccurate or incomplete data, or update it;
ask us to delete your data or close your account, unless we must keep some of it by law or for legitimate record-keeping;
withdraw consent for uses that depend on it (this will not affect past lawful use, and some services may no longer be available to you);
raise a grievance with us, and, if it is not resolved, approach the Data Protection Board of India as the law provides; and
nominate another person to exercise your rights in the event of your death or incapacity.

To make a request, write to us at the contact details below from the email address registered with your account. We may ask you to verify your identity first, and will respond within a reasonable time.

10. Children

Resident accounts are for adults. We do not knowingly collect personal data from children under 18 through this website. If a parent or guardian believes a child has given us information, please contact us and we will remove it.

11. Third-party services

The website is hosted with a commercial web hosting provider. Some page elements, such as icons and fonts, may be loaded from external content delivery services, which can see your IP address and browser details when your browser fetches them. The website may also link to other sites; their privacy practices are their own. We do not currently use website analytics or advertising trackers; if that changes, we will update this policy first.

12. If something goes wrong

If we become aware of a personal data breach that affects you, we will take steps to contain it and will inform affected people and the authorities as required by law. Please tell us at once if you suspect your account has been misused.

13. Changes to this policy

We may update this policy when our practices or the law change. The "Last updated" date above will show the current version. For significant changes we will place a notice on the website.

14. Contact and grievances

For any question about this policy, to exercise your rights, or to raise a privacy grievance, contact:

Suncity Residents Welfare Association
Email: billing.srwa@gmail.com
Phone: +91-9416831302
Or use the Contact page.