Privacy Policy
Effective date: 18 October 2026. This Privacy Policy explains how Aerocity Varanasi collects, uses, shares and protects personal data when you use aerocityvaranasi.com, fill in our forms, contact us on phone or WhatsApp, or see our ads on other websites and apps. It applies to visitors in India and in every other country.
In short: we collect what you send us in forms and basic data about how you use the site. We use it to answer you, run the marketplace and, only with your permission, to measure visits and show you relevant ads through Google, Meta, Microsoft and LinkedIn. We do not sell your personal data for money. You can change your cookie choices at any time from Cookie settings in the footer.
1. Who we are
Aerocity Varanasi is a venture of SEO Marketing Agency, founded by Vishal Garg. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary, and for the EU and UK GDPR we are the controller of your personal data.
- Address: Main Road, In front of Swastik Dharm Kata, Industrial Area Phase 1, Ramnagar, Chandauli, Uttar Pradesh 221110, India
- Email: dm.vishalgarg@gmail.com
- Phone and WhatsApp: +91-9711593877
2. Personal data we collect
Data you give us
- Listings: name or firm name, mobile number, district, listing details, prices, product catalogues, photos, and registration numbers you choose to add (UP-RERA, VDA, GSTIN, IEC).
- Enquiries and quotes: name, mobile number, email if given, district, purpose and message. This includes requests for property, hotels, tours, car rental, tickets, transport, cargo shipping, equipment and labour hire, loans, the investors help desk and digital services.
- Booking details: travel dates, number of guests, pickup and drop points, and for tickets, the passenger names and ages needed by the airline or Indian Railways.
- Payments: the amount, reference number and payer name you share with us. Card, UPI and PayPal payments are processed by your bank or the payment provider. We do not receive or store full card numbers, CVV or UPI PINs.
- In-person services at Ramnagar: money transfer, AEPS and bill payments are carried out on our partner bank's systems, which collect the KYC data that banking rules require (such as Aadhaar authentication). We do not keep copies of biometric data.
Data collected automatically
- Device and usage data: IP address, approximate location (city or region from the IP address), browser, device type, operating system, language, pages viewed, links clicked, referring website and date and time of visits.
- Advertising data: when you arrive from an ad, the ad click identifier in the link (such as gclid, fbclid, msclkid or li_fat_id), the campaign and whether you later sent an enquiry (a "conversion").
- Cookies and similar technologies: see section 6.
Data from other sources
- Public registers you point us to, such as UP-RERA, GST and DGFT, to check listings.
- Aggregated reports from advertising and analytics platforms. These normally do not identify you.
- Partners you ask us to connect with (for example a transporter, hotel, bank or freight forwarder) may share the status of your request with us.
We do not ask for, and you should not send us, sensitive data such as health information, religious beliefs, caste, sexual orientation, passwords or bank PINs.
3. How we use your data and our legal basis
- To provide what you ask for: publish your listing, answer your enquiry, send quotes, make bookings and connect you with sellers, buyers or service partners. Basis: your consent and the steps needed to perform a contract with you.
- To run and secure the website: keep it working, prevent spam, fraud and fake listings, and fix errors. Basis: legitimate uses allowed under the DPDP Act and our legitimate interests under GDPR.
- Analytics: count visits and see which pages and services are useful, using Google Analytics. Basis: your consent.
- Advertising and remarketing: show ads for our services in India and abroad on Google Search, YouTube, partner websites, Facebook, Instagram, Bing, LinkedIn and similar networks, including to people who visited our site, and measure which ads lead to enquiries. Basis: your consent.
- Marketing messages: send offers or updates by WhatsApp, SMS, email or calls. Basis: your consent, which you can withdraw at any time. Reply STOP or tell us.
- Legal duties: keep tax and accounting records, respond to lawful requests from courts, police and regulators, and protect our legal rights. Basis: legal obligation.
We do not use your data for automated decisions that have legal or similarly significant effects on you.
4. Advertising across the world
We advertise on these platforms. Each one runs only after you choose Accept all or turn on Advertising in Cookie settings.
- Google (Google Ads, Google Analytics 4, Google Tag). We use Google Consent Mode, so until you agree Google tags do not set advertising or analytics cookies. How Google uses data from sites that use its services
- Meta (Facebook and Instagram ads, Meta Pixel). Meta Privacy Policy
- Microsoft Advertising (Bing, UET tag). Microsoft Privacy Statement
- LinkedIn (LinkedIn Ads, Insight Tag). LinkedIn Privacy Policy
What these tags do: record that your browser visited our pages or sent an enquiry, so the platform can report how our ads perform, show our ads to people who visited before (remarketing), and find similar audiences. We send the platforms the type of enquiry (for example "Cargo shipping"), not your name, phone number or message.
Customer lists: if you have agreed to receive marketing from us, we may upload your email address or phone number to Google Customer Match or Meta Custom Audiences, in hashed (scrambled) form, to show you our ads or to exclude you from them. You can ask us to stop at any time.
Ad choices: besides our Cookie settings, you can control ads through Google My Ad Center, Meta ad preferences, Microsoft ad settings, LinkedIn ad settings, Your Online Choices (EU/UK), the Digital Advertising Alliance (US) and the Network Advertising Initiative.
Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of advertising cookies and of "sale" or "sharing" of personal data for targeted advertising.
We do not target ads at children, and we do not use sensitive categories of data to target ads.
5. Who we share your data with
- Other users: buyers see the contact details you choose to show on paid listings. Sellers receive the enquiries sent to their listing.
- Service partners you ask us to connect with: transporters, freight forwarders and customs brokers, hotels, tour and car operators, airlines and Indian Railways (for tickets), banks and finance companies (for loans), equipment owners and labour contractors. They get only what they need to serve your request and use it under their own privacy policies.
- Our service providers (processors): website hosting, FormSubmit (formsubmit.co, which emails form submissions to our team), WhatsApp and email providers, Google Maps (links), payment providers such as your UPI app, bank and PayPal, and the advertising and analytics platforms listed in section 4.
- Authorities: courts, police, tax and other government bodies when the law requires it, or to protect the rights and safety of users and the public.
- Business transfer: if Aerocity Varanasi is merged, sold or restructured, your data may pass to the new owner under this policy.
We do not sell personal data for money. Under some US state laws (such as California's CCPA/CPRA), letting advertising platforms collect data through cookies for cross-context behavioural advertising can count as "selling" or "sharing". You can opt out at any time through Do Not Sell or Share My Personal Information in the footer, by turning off Advertising in Cookie settings, or with GPC.
6. Cookies and similar technologies
Cookies are small files stored in your browser. We also use your browser's local storage. We group them as follows:
- Essential (always on): your language choice (av-lang) and your cookie choice (av-consent), stored in local storage, and security cookies from our hosting provider. The site cannot work properly without them.
- Analytics (only with consent): Google Analytics cookies such as _ga and _ga_*, which normally last up to 2 years. They tell us how many people visit and which pages they use.
- Advertising (only with consent): Google (_gcl_au, _gcl_aw and cookies on doubleclick.net and google.com), Meta (_fbp, _fbc), Microsoft (_uetsid, _uetvid, MUID) and LinkedIn (li_sugr, bcookie, lidc, UserMatchHistory). These usually last from 1 day to 13 months, or as set by each platform.
You can change your choice any time from Cookie settings in the footer. You can also block or delete cookies in your browser settings. If you block essential storage, some features such as the Hindi language setting may not be remembered.
7. International data transfers
We are based in India, but some of our service providers (such as Google, Meta, Microsoft, LinkedIn and FormSubmit) store or process data in other countries, including the United States and countries in the European Union. The DPDP Act allows such transfers except to countries restricted by the Government of India. When we transfer personal data of people in the EEA, UK or Switzerland, we rely on adequacy decisions, the EU–US Data Privacy Framework where the provider is certified, or Standard Contractual Clauses offered by the provider.
8. How long we keep data
- Listings: while the listing is live and up to 12 months after it ends.
- Enquiries, quotes and bookings: up to 24 months after our last contact, so we can handle follow-ups and disputes.
- Invoices and payment records: as long as Indian tax and accounting laws require, generally up to 8 years.
- Marketing consent: until you withdraw it.
- Analytics data: up to 14 months in Google Analytics.
- Advertising cookies: as described in section 6.
After these periods we delete or anonymise the data.
9. How we protect your data
The website uses HTTPS encryption. Access to enquiries and listings is limited to our team, protected by account sign-in. We work only with providers that maintain reasonable security safeguards. No method of transmission or storage is completely secure. If a personal data breach is likely to affect you, we will inform you and the authorities as required by law, including the Data Protection Board of India.
10. Your rights
Everyone: you can ask us what personal data we hold about you, ask us to correct, complete, update or delete it, and withdraw consent for marketing, analytics or advertising at any time. Withdrawing consent does not affect processing that happened before.
India (DPDP Act, 2023): you have the right to a summary of your personal data and how it is processed, to correction, completion, updating and erasure, to grievance redressal, and to nominate another person to exercise your rights if you die or become incapable. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
European Economic Area, UK and Switzerland (GDPR, UK GDPR): you also have the right to restrict processing, to data portability, and to object to processing based on legitimate interests and to direct marketing at any time. You can complain to your local data protection authority, or in the UK to the Information Commissioner's Office (ICO).
California and other US states (CCPA/CPRA and similar laws): you have the right to know what personal data we collect, use and disclose; to delete and correct it; to opt out of the sale or sharing of personal data and of targeted advertising; and not to be treated differently for using these rights. In the last 12 months we have collected identifiers (name, phone, email, IP address, cookie IDs), commercial information (enquiries and bookings), internet activity, approximate location and inferences for advertising, from the sources and for the purposes in sections 2 and 3. We do not use or disclose sensitive personal information for purposes that require a right to limit. You may use an authorised agent to make a request.
Other countries (including Canada, Australia, the UAE, Saudi Arabia, Singapore and Brazil): we will honour similar requests as required by your local law.
How to make a request: email dm.vishalgarg@gmail.com or WhatsApp +91-9711593877 with "Privacy request" and what you want us to do. We may ask you to confirm your identity, for example by replying from the mobile number you used. We reply within 30 days, or sooner if your local law requires.
11. Children
Aerocity Varanasi is meant for adults. We do not knowingly collect personal data from anyone under 18 years of age without verifiable consent from a parent or lawful guardian, and we do not track children or target ads at them. If you believe a child has sent us personal data, contact us and we will delete it.
12. Links to other websites
Our pages link to hotel, airline, railway, government, bank and partner websites. They have their own privacy policies, and we are not responsible for how they handle your data.
13. Changes to this policy
We may update this policy when our services, advertising partners or the law change. The effective date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you on the website or ask for your consent again.
14. Contact and Grievance Officer
Grievance Officer: Vishal Garg, Aerocity Varanasi
Main Road, In front of Swastik Dharm Kata, Industrial Area Phase 1, Ramnagar, Chandauli, Uttar Pradesh 221110, India
Email: dm.vishalgarg@gmail.com · Phone and WhatsApp: +91-9711593877
We acknowledge grievances within 48 hours and aim to resolve them within 30 days.
Questions? Email dm.vishalgarg@gmail.com or WhatsApp +91-9711593877. You can change cookie choices from Cookie settings at the bottom of aerocityvaranasi.com.
AEROCITY VARANASI