Comprehensive Privacy Policy & Data Protection Framework

Welcome to the central Privacy Policy of Finland Infra Advisors Pvt Ltd. As a premier real estate advisory, wealth management, and high-yield investment consulting firm, we recognize that our relationship with our clients is built on a foundation of absolute trust, strict confidentiality, and rigorous data protection. This exhaustive document dictates our protocols for the collection, processing, storage, safeguarding, and controlled disclosure of your personal and financial information when you access our official website (www.finlandinfra.com), utilize our premium advisory services, or interact with our digital ecosystems.

1. Scope of the Policy and Explicit Consent

This Privacy Policy applies universally to all individuals ("Users," "Clients," "Investors," "You") who navigate our website, submit asset inquiries, subscribe to our real estate market reports, engage in property transactions, or communicate with our firm via social media platforms, telephone, or electronic mail. By engaging with Finland Infra Advisors Pvt Ltd, you explicitly consent to the comprehensive data practices described within this framework. If you do not agree with these policies, you must immediately cease utilizing our digital platforms and advisory services.

2. Lexicon and Definitions

To ensure absolute clarity, the following terms are defined as used within this policy:

• Data Controller: Finland Infra Advisors Pvt Ltd, the entity that determines the purposes and means of the processing of personal data.
• Data Processor: Any third-party natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
• PII (Personally Identifiable Information): Any data that could potentially identify a specific individual.
• Processing: Any operation performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, or alteration.

3. Comprehensive Categorization of Collected Data

To provide bespoke, high-yield investment advisory services and ensure compliance with regulatory frameworks (including RERA and Anti-Money Laundering statutes), we systematically collect various tiers of data.

3.1. Personally Identifiable Information (PII)

• Identity Data: Full legal name, marital status, title, date of birth, nationality, and gender.
• Contact Data: Primary residential address, billing address, primary and secondary email addresses, and mobile/telephone numbers.
• Financial & KYC Data: Bank account details, Permanent Account Number (PAN), Aadhar card details, funding requirements, income brackets, and budget parameters strictly necessary for facilitating high-value real estate transactions.
• Profile & Preference Data: Inquiries made, specific property preferences (e.g., commercial leasing in Noida vs. luxury villas in Uttarakhand), transaction history, feedback, and survey responses.

3.2. Non-Personally Identifiable Information (Non-PII) & Telemetry

• Technical Data: Internet Protocol (IP) address, MAC address, browser type and version, browser plug-in types, time zone setting, geolocation data, operating system, and platform configurations.
• Usage Data: Granular web analytics detailing your navigation paths through our website, property portfolios viewed, dwell time on specific pages, clickstream data, and bounce rates.

4. Methodologies of Data Collection

We aggregate your data through multiple, secure, and regulated touchpoints:

• Direct Client Interactions: When you voluntarily fill out digital contact forms, request physical site visits, sign up for real estate newsletters, or correspond directly with our advisory board via phone or email.
• Automated Telemetry: As you interact with our web architecture, we automatically collect Technical and Usage Data through advanced cookies, secure server logs, and tracking beacons.
• Third-Party & Public Sources: We may receive relevant market, credit, and demographic data from verified analytics providers, authorized advertising networks, and public real estate/government registries to better tailor our portfolio offerings.

5. Purpose, Utilization, and Legal Basis for Processing

Your data forms the foundation upon which we engineer personalized wealth creation and property acquisition strategies. We utilize your information strictly based on the following legal grounds:

• Contractual Necessity: To register you as a new client, draft Memorandums of Understanding (MoUs), process property site visits, and execute the legal acquisition or leasing of luxury real estate and commercial assets.
• Legitimate Business Interests: To manage our corporate relationship with you, notify you of critical changes to our terms or privacy policy, and administer/protect our business (including troubleshooting, data analysis, and system maintenance).
• Marketing and Proactive Advisory (Consent): To deliver highly relevant market insights, exclusive high-yield investment opportunities, and commercial property updates.

6. Advanced Cookie Policy and Tracking Technologies

Our digital infrastructure utilizes cookies, web beacons, and advanced tracking pixels to elevate your user experience, analyze traffic patterns, and deliver bespoke digital content.

• Strictly Necessary Cookies: Essential algorithms required for the fundamental, secure operation of our website.
• Analytical/Performance Cookies: Technologies that allow us to recognize and count the number of visitors and map how users navigate our property grids, aiding in UI/UX optimization.
• Targeting & Advertising Cookies: These record your visit to our website, the specific properties you have viewed, and the links you have followed. We use this data to make displayed advertising across third-party networks more relevant to your specific investment portfolio interests.

You retain the ability to configure your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, please be advised that disabling essential cookies may result in certain parts of our website, including dynamic property listings, becoming inaccessible or failing to function as designed.

7. Data Sharing, Disclosure, and Third-Party Transfer

Finland Infra Advisors Pvt Ltd operates on a strict non-disclosure ethos. We do not sell, trade, or rent your Personally Identifiable Information to unauthorized third-party data brokers. Disclosure is rigorously limited to the following controlled scenarios:

• Internal Corporate Affiliates: Selected members of our executive advisory, legal, and financial teams who are bound by legally enforceable strict non-disclosure agreements (NDAs).
• Authorized Service Providers: Trusted third-party entities such as CRM hosting platforms, secure cloud storage providers, payment gateways, and marketing agencies that require specific data fragments to perform designated functions on our behalf.
• Legal and Regulatory Authorities: We will disclose your information without hesitation where mandated by law, court order, subpoena, or to competent regulatory authorities (e.g., UP RERA, Income Tax Department, law enforcement) to protect our legal rights, ensure national security, or prevent fraudulent financial activities.
• Corporate Restructuring: In the event of a merger, acquisition, insolvency, or restructuring of Finland Infra Advisors Pvt Ltd, client data may be transferred to the acquiring entity, strictly under the condition that the new entity adheres to the privacy standards outlined herein.

8. Data Security and Infrastructure Resilience

We deploy a formidable, multi-layered cybersecurity infrastructure to prevent unauthorized access, accidental loss, illicit alteration, or unauthorized disclosure of your data. Our defense protocols include:

• Cryptographic end-to-end encryption (SSL/TLS 1.3) for all data transmitted through our web portals.
• Deployment of secure, enterprise-grade firewalls and isolated server environments with strict Identity and Access Management (IAM) policies.
• Routine cybersecurity audits, penetration testing, and vulnerability assessments of all digital assets.
• Strict "Principle of Least Privilege" access restrictions for our employees and third-party contractors handling client data.

While we implement these aggressive, commercial-grade safeguards to shield your personal information, it must be acknowledged that no internet-based transmission or electronic storage vault can be guaranteed to be 100% impenetrable. We cannot warrant absolute digital invulnerability, and any data transmission you undertake is at your own inherent risk.

9. Data Breach Notification Protocol

In the highly unlikely event of a severe data breach that compromises your Personally Identifiable Information, Finland Infra Advisors Pvt Ltd has an established incident response plan. We will notify you and any applicable regulatory body of a breach where we are legally required to do so, providing details of the breach, the potential impact, and the mitigation steps we have instantly deployed.

10. Data Retention and Erasure Policy

We will only retain your personal data for the duration reasonably necessary to fulfill the explicit purposes for which it was initially collected. This includes the satisfaction of any ongoing legal, regulatory, tax, accounting, or corporate reporting requirements. In the event of a formal complaint or a credible prospect of litigation regarding our advisory services, we reserve the right to retain your data for an extended legal hold period. Once the data is no longer required operationally or legally, it is systematically and securely permanently deleted or irreversibly anonymized.

11. Your Comprehensive Data Rights

Finland Infra Advisors Pvt Ltd deeply respects your autonomy over your personal data. Depending on your specific legal jurisdiction, you possess the following enforceable rights:

• Right to Access: You may formally request a digital copy of the personal data we actively hold about you.
• Right to Rectification: You may request the immediate correction of any incomplete, outdated, or inaccurate data in our ledgers.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data when there is no longer a valid business or legal reason for us to continue processing it.
• Right to Restrict Processing: You may ask us to suspend the processing of your personal data in certain scenarios (e.g., if you want us to establish the data's accuracy).
• Right to Opt-Out: You possess the absolute right to ask us to cease sending you marketing messages, newsletters, or property alerts at any time by following the opt-out links present in our communications, or by contacting our Grievance Officer directly.

12. Protection of Minors (Children's Privacy)

The advisory services and real estate investment portals provided by Finland Infra Advisors Pvt Ltd are strictly intended for a mature, adult audience (individuals aged 18 and older). We do not knowingly solicit, collect, or maintain personal information from minors. If we are made aware that we have inadvertently collected personal data from a child under the legal age of consent without verification of parental consent, we will take immediate steps to permanently remove that information from our servers.

13. Third-Party Links and External Portals

Our digital platforms, including property brochures and investment grids, may contain outgoing links to external websites, developer project portals, payment gateways, or banking institutions that are not operated, governed, or controlled by our firm. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We strongly recommend reading the privacy notices of every external website you visit. Finland Infra Advisors Pvt Ltd bears zero liability for the content, security protocols, privacy policies, or actions of third-party domains.

14. Policy Modifications, Versioning, and Updates

The real estate sector, digital security landscape, and international data laws are continuously evolving. Consequently, Finland Infra Advisors Pvt Ltd reserves the unassailable right to amend, update, or overhaul this Privacy Policy at our sole discretion, at any time, without prior direct notice. Any modifications will be promptly posted on this specific URL, accompanied by an updated "Document Version" and "Effective Date." We strongly encourage our clients, investors, and website visitors to review this policy periodically. Your continued use of our website and advisory services following the publication of any modifications constitutes your formal, legally binding acceptance of the updated terms.

15. Dispute Resolution, ADR, and Governing Law

In the event of any legal dispute, controversy, or claim arising out of or relating directly to this Privacy Policy or data handling practices, the Parties shall strictly adhere to a mandatory two-step Alternative Dispute Resolution (ADR) mechanism. This clause survives the termination of any client relationship.

• Step 1: Amicable Mediation & Negotiation. The Parties commit to entering into negotiations in good faith to reach an equitable settlement. If the dispute is not resolved within thirty (30) calendar days of a formal written notice of dispute, the matter shall be escalated.
• Step 2: Binding Arbitration. The dispute shall be referred to and finally resolved by a sole arbitrator appointed exclusively by Finland Infra Advisors Pvt Ltd. The arbitration proceedings shall be conducted entirely in the English language. The official seat and venue of arbitration shall be Noida, Gautam Buddha Nagar, Uttar Pradesh. The arbitrator's award shall be final, conclusive, and binding on both parties, and the parties shall bear the costs of the proceeding as determined by the arbitrator.

Governing Law & Jurisdiction: This Privacy Policy, and any disputes arising from it, are governed fundamentally by the laws of the Republic of India, including the Information Technology Act, 2000, and its subsequent rules. Subject strictly to the binding arbitration clause detailed above, exclusive jurisdiction shall vest in the competent state and federal courts located in Gautam Buddha Nagar, Noida.

16. Grievance Redressal Mechanism

In accordance with the Information Technology Act, 2000, and the rules made thereunder, if you have any discrepancies, grievances, or questions regarding the processing of your information, you may contact our designated Grievance Officer using the details below: