ConsentKit DPDP
Free readiness check Book a demo

For developers, builders and channel partners

DPDP compliance for real estate developers

Real estate sales run on leads from portals, ads and channel partners, followed by calls, site visits, KYC and loan paperwork. Much of that data changes hands without the buyer knowing. ConsentKit shows each buyer where their data goes and records their choices.

Check your project’s readiness See where DPDP applies
Bought lead lists
High risk
Channel partner sharing
Needs a basis
Full compliance
13 May 2027
greenfieldresidency.inEnquire now

Greenfield Residency asks for your consent

Choose how we may use your details. You can change this anytime.

Withdraw consent anytime
Consent logRecording

    Where the DPDP Act touches a property sale

    A buyer’s data can pass through portals, call centres, brokers, banks and lawyers before possession. Pick a stage to see what applies.

    What changes for your business on 13 May 2027

    The Act applies to developers, brokers and channel partners alike. These are the common gaps.

    Every lead needs a lawful sourceSections 4 and 6

    Processing personal data needs consent or a legitimate use. Bought lists rarely have either.

    Source tracking on every lead, with consent records attached.

    Tell buyers about channel partnersSections 5 and 6

    Sharing a lead with brokers and channel partners is a separate purpose. Buyers should know and choose.

    A partner-sharing consent that your CRM checks before assigning leads.

    Stop calls when askedSection 6(4)

    A buyer who says “don’t call me” has withdrawn consent. That must reach your call centre and every partner.

    Withdrawal sync to your CRM, dialler and partner portal.

    KYC documents need strong protectionSection 8(5) and Rule 6

    PAN, Aadhaar and income documents are prime targets. Encrypt them and log access.

    Encrypted document storage and access logs.

    Buyers can ask what you holdSections 11 to 14

    Buyers can request access, correction and erasure, and raise grievances.

    A request portal with identity checks and deadlines.

    Delete leads that went nowhereSection 8(7) and Rule 8

    Leads that never converted and old visitor data should be deleted once their purpose ends.

    Retention rules for leads with a deletion log.

    A plan around your launches

    Fix lead capture before your next launch campaign, then clean up the back office.

    1. Map lead sources

      List portals, ad forms, call centres, channel partners and data brokers.

    2. Fix forms and CRM

      Add notices to every lead form and consent checks to partner assignment.

    3. Secure KYC and loans

      Encrypt KYC storage and limit bank sharing to the buyer’s choice.

    4. Clean up and train

      Delete stale leads and train sales teams and partners.

    For every kind of real estate business

    Templates for how you sell.

    Residential developers

    High lead volume and channel partners.

    Commercial developers

    Corporate tenants and leasing data.

    Plotted and township projects

    Long sales cycles and many brokers.

    Brokerages

    Buyers and sellers on both sides.

    Co-living and rentals

    Tenant KYC and police verification.

    Facility managers

    Resident data after handover.

    DPDP compliance for real estate near you

    Local guidance and onboarding in these cities, with support from our team in Kolkata.

    Related sectors

    Housing societiesResident registers, visitor logs, CCTV and gate apps.Banks, NBFCs and fintechKYC, credit checks, recovery calls and sector-specific retention.InsuranceProposal forms, claims data and sharing with brokers and TPAs.

    Questions developers are asking

    For the full picture, read our DPDP Act guide or compliance checklist.

    Can we still buy lead lists?

    Only if the people on them gave valid consent for you to contact them, or another lawful basis applies. Most bought lists can’t show that, which makes them risky.

    Can we share leads with channel partners?

    Yes, if the buyer knows and agrees. Record that consent and bind partners by contract to the same rules.

    What about leads from property portals?

    Portals collect consent under their own terms. Check what the buyer agreed to, and show your own notice when you first contact them.

    How long can we keep buyer KYC?

    As long as tax, registration and anti-money-laundering rules require. Leads and rejected applications should go when their purpose ends.

    Are channel partners responsible too?

    Yes, for data they hold as fiduciaries. When they act on your instructions they are your processors, and you remain responsible.

    Get your sales process ready before May 2027

    The readiness check takes about ten minutes and gives you a gap report built for real estate.

    Check your project’s readiness Book a demo