(Compliant with the Digital Personal Data Protection Act, 2023 (“DPDP Act”))
1. Controller
Infinity Cooperative Housing Society Ltd., Registered No. PNA/PNA/ (4)/HSG/TC/19515 2018-2019, Survey No. 9 to 14, Hissa No. 1, Plot No. 1 to 11, 15, 17, 18, 20 to 26, and 28 at Keshavnagar- Mundhwa, Pune City, Pune- 411036..
Email: ob@infinitychs.in | DPO: Secretary, Infinity CHS.
2. Personal Data We Process
Identity Data (name, unit No., member ID, PAN/Aadhaar*).
Contact Data (email, phone, correspondence address).
Financial Data (UPI ID, masked card numbers, transaction identifiers).
Usage Data (logs, IP address, browser metadata).
Financial Contribution Data (amount, purpose).
*Submission of Aadhaar is voluntary; alternate ID proof is accepted.
3. Lawful Basis
a. Performance of the Society’s statutory obligations under the MCSA.
b. Consent for optional services and voluntary cultural donations.
c. Legitimate interests in securing the Portal and preventing fraud (Art. 7, DPDP Act).
4. Purpose Limitation
Data is processed solely to:
generate and collect maintenance bills;
issue payment receipts;
maintain statutory registers;
disburse meeting notices and updates;
comply with legal requirements including audits.
5. Data Sharing
We never sell personal data. It may be shared with:
Payment gateway and banking partners (contractually bound processors);
Statutory auditors;
Government authorities when lawfully mandated.
6. Security
We implement encryption in transit and at rest, role-based access controls, and annual vulnerability assessments as required by Section 8 of the DPDP Act.
7. Retention
Financial records are retained for 8 years post-close of the relevant financial year or longer if mandated by law; other data is retained only so long as necessary for the stated purposes.
8. Your Rights
Under Sections 11-16 of the DPDP Act you may request: access, correction, erasure, or grievance redressal. Submit requests to ob@infinitychs.in. We will respond within 15 days.
9. Cross-Border Transfer
Data is stored on servers located in India. Cross-border transfer is currently not undertaken. Should it become necessary, transfers will comply with Section 16 DPDP Act and any government whitelist.
10. Grievance Redressal
Contact the DPO at ob@infinitychs.in. If unsatisfied, you may complain to the Data Protection Board of India once constituted under the DPDP Act.