Privacy Policy

1. Scope and Acceptance

This Policy applies to personal data processed through venuefy.in, Venuefy mobile applications, the Venuefy partner portal, WhatsApp or telephone enquiries, forms, emails, social media interactions, events, promotions and other services that link to this Policy (together, the "Services").

By accessing or using the Services, you acknowledge this Policy. Where consent is required by applicable law, we will request it through a clear notice or affirmative action. If you act for a business, venue or another person, you confirm that you are authorised to provide the relevant information.

2. Our Role

For personal data that Venuefy determines the purpose and means of processing, Amazonis IT Services Pvt. Ltd. acts as the data fiduciary or controller, as applicable. Certain technology, payment, communications, analytics and support providers process data for us under contractual or legal safeguards.

Venue partners, photographers, decorators, caterers or other providers listed or contacted through the Services may be independent data fiduciaries/controllers for their own processing. Their privacy practices are governed by their policies and applicable law.

3. Personal Data We Collect

3.1 Information you provide

Identity and contact details: name, mobile number, email address, city, address and account credentials.

Event and enquiry details: event type, preferred location, date, guest count, budget, venue preferences, requirements, messages and feedback.

Booking and transaction details: selected venue or service, booking status, amounts, invoices, payment references, refunds and cancellation information. Payment card or banking credentials may be collected directly by authorised payment processors and are not ordinarily stored by Venuefy.

Partner and business details: venue/business name, authorised representative details, GST or tax information, bank details, pricing, availability, amenities, policies, photographs, videos and documents required for onboarding, verification, contracting or payout.

Verification and KYC information: identity, address, ownership, authorisation, licence or registration documents where necessary for fraud prevention, partner verification, legal compliance or platform integrity.

Communications: calls, emails, chat or WhatsApp messages, support requests, survey responses and complaint records. Calls may be recorded where lawful and after appropriate notice.

3.2 Information collected automatically

Device and technical data such as IP address, device type, browser, operating system, app version, language, time zone, identifiers and security logs.

Usage data such as pages or listings viewed, searches, clicks, referral source, session activity, enquiry actions and feature interaction.

Approximate location inferred from IP address and precise device location only if you grant device permission for a location-based feature.

Cookies, pixels, SDKs and similar technologies as described in Section 9.

3.3 Information from other sources

We may receive information from venue partners, service providers, payment processors, identity or fraud-prevention providers, advertising or analytics partners, public sources, referral partners and social platforms when you interact with Venuefy through them. We combine such information only for legitimate, disclosed and lawful purposes.

4. How We Use Personal Data

Provide, operate, personalise and improve the Services, including venue discovery, recommendations, enquiries, availability checks and booking facilitation.

Create and manage customer and partner accounts; onboard, verify and support venue partners; administer listings, leads, bookings, contracts, commissions and payouts.

Connect customers with relevant venue partners or providers and enable them to respond to requests, prepare quotations, arrange visits and fulfil bookings.

Process or facilitate payments, invoices, commissions, refunds and reconciliations through authorised providers.

Send service messages, booking updates, OTPs, confirmations, reminders, support responses and security alerts.

With consent or as otherwise permitted by law, send offers, recommendations and marketing communications. You may opt out at any time.

Detect, investigate and prevent fraud, misuse, spam, unauthorised access, payment risk and violations of our terms or partner obligations.

Conduct analytics, testing, reporting, service development and quality assurance using aggregated or appropriately de-identified data where feasible.

Comply with law, enforce agreements, respond to lawful requests, resolve disputes and protect users, partners, Venuefy and the public.

5. Grounds for Processing

Depending on the context and applicable law, we process personal data based on your consent; to take steps requested by you or perform a contract; for uses permitted or required by law; to comply with legal obligations; and for legitimate business purposes that do not override your rights. Where processing relies on consent, you may withdraw it as easily as it was given, subject to legal and operational consequences explained at the time.

6. How We Share Personal Data

We do not sell personal data for money. We may disclose personal data only as reasonably necessary to the following recipients:

Venue and service partners: to respond to your enquiry, provide availability or quotations, arrange visits, manage a booking and provide requested services.

Service providers: hosting, cloud infrastructure, database, communications, customer support, identity verification, security, analytics, advertising, document execution, payment and professional advisers, subject to appropriate obligations.

Payment ecosystem participants: payment gateways, banks, card networks and fraud-prevention providers to process transactions and handle disputes.

Legal and regulatory recipients: courts, regulators, law-enforcement agencies, government bodies or other parties where disclosure is legally required or reasonably necessary to protect rights and safety.

Corporate transaction recipients: advisers, investors, lenders or a successor entity in connection with a merger, financing, restructuring, sale or transfer, subject to confidentiality and applicable law.

Other recipients at your direction or with your consent.

Once you directly communicate or contract with a venue or provider, that recipient may use your information to fulfil the request, meet legal obligations, prevent fraud and manage the commercial relationship. Venuefy does not control independent processing by such recipient.

7. Public and Partner-Supplied Content

Reviews, ratings, photographs, venue descriptions, responses or other content you choose to publish may be visible publicly and may identify you depending on the information submitted. Venue partners confirm that they have the rights and permissions required for listing content and personal data supplied to Venuefy.

8. Payments

Payments may be handled by third-party payment processors. Venuefy may receive transaction status, payment reference, amount, method category and limited payer information, but does not ordinarily receive or retain complete card numbers, CVV, UPI PINs or online-banking passwords. Never share OTPs, PINs or passwords with Venuefy staff or partners.

9. Cookies and Similar Technologies

We and authorised partners may use cookies, local storage, pixels and SDKs to keep the Services functional, remember preferences, maintain sessions, prevent fraud, understand performance and, where permitted, measure or personalise marketing. Categories may include strictly necessary, functional, analytics and advertising technologies.

You can manage non-essential technologies through any cookie controls we provide and through browser or device settings. Blocking certain technologies may reduce functionality. For further details, refer to the Venuefy Cookie Policy.

10. Communications and Marketing Choices

We may send transactional messages necessary for enquiries, bookings, account security or partner operations. Promotional email, SMS, phone or WhatsApp communications will be sent with consent or as otherwise permitted by law. You can opt out using the unsubscribe instruction, messaging us, or adjusting available preferences. Opting out of marketing does not stop essential service communications.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining business and transaction records, resolving disputes, preventing fraud, enforcing agreements and satisfying tax, accounting, regulatory or legal requirements. Retention periods vary by data type, relationship and applicable law.

When data is no longer required, we will delete, anonymise or securely isolate it, unless retention is required by law or necessary for the establishment, exercise or defence of legal claims. Backup copies may remain for a limited period and are protected from ordinary use.

12. Data Security

We use reasonable administrative, technical and organisational safeguards appropriate to the nature of the information and risk, which may include access controls, authentication, encryption in transit, logging, monitoring, vendor controls, backups and incident-response procedures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials and promptly reporting suspected unauthorised activity.

13. International and Cross-Border Processing

Our service providers may process or store information outside your state or country. Where personal data is transferred across borders, we use measures required by applicable law and require recipients to protect it consistently with this Policy. Transfers may be subject to restrictions or directions issued by competent authorities.

14. Your Rights and Choices

Subject to applicable law, verification of your request and permitted exceptions, you may have the right to:

request a summary of personal data being processed and information about processing activities or recipients;

request correction, completion or updating of inaccurate or incomplete personal data;

request erasure of personal data that is no longer necessary or where erasure is otherwise required;

withdraw consent and stop consent-based processing, without affecting processing already lawfully completed;

opt out of marketing communications and manage cookie or device permissions;

raise a grievance and, where applicable, escalate a complaint to the relevant authority; and

nominate another individual to exercise applicable rights in the event of death or incapacity, where provided by law.

To protect users and partners, we may request information to verify identity and authority. We may decline or limit a request where permitted by law, including where retention is required, another person's rights would be affected, or the request is fraudulent or manifestly unfounded. We will communicate our response within the period required by applicable law.

15. Account Deletion and Consent Withdrawal

You may request account deletion or withdrawal of consent by contacting us using Section 21. Deletion may prevent us from providing some or all Services. We may retain limited records where required for legal compliance, fraud prevention, dispute resolution, financial reconciliation or enforcement of agreements. Withdrawing consent does not make prior lawful processing invalid.

16. Children's Privacy

The Services are intended for adults capable of entering into a binding transaction. We do not knowingly permit a person under 18 years of age to create an independent booking or partner account, and we do not knowingly process a child's personal data without verifiable consent of a parent or lawful guardian where required. If you believe a child has provided personal data contrary to this Policy, contact us so we can take appropriate action.

17. Automated Tools and Recommendations

We may use rules, analytics or automated tools to sort listings, suggest venues, detect suspicious activity or improve response relevance. These tools support platform operations and recommendations; they do not guarantee availability, suitability, pricing or booking acceptance. Where applicable law provides a right relating to a solely automated decision with significant effects, you may contact us for review.

18. Third-Party Services and Links

The Services may contain links to partner websites, maps, social platforms, payment pages or other third-party services. Their collection and use of information are governed by their own policies. Venuefy is not responsible for third-party privacy practices, security or content, and you should review their notices before providing information.

19. Data Breach and Incident Response

If a personal data breach occurs, we will investigate, contain and remediate it and will provide notices to affected individuals or authorities when and as required by applicable law. Users should immediately report suspicious messages, account access or misuse of personal information associated with Venuefy.

20. Changes to This Policy

We may update this Policy to reflect changes in law, technology, business operations or the Services. The revised version will be posted with an updated effective or revision date. If a change materially affects your rights or how we use personal data, we will provide additional notice or obtain consent where required.

21. Contact and Grievance Redressal

For privacy questions, rights requests, consent withdrawal, account deletion or grievances, contact:

Please describe your request and provide enough information for us to verify and respond. If you are not satisfied with our response, you may use the escalation or complaint mechanism available under applicable law.

22. Relationship with Other Terms

Read this Policy with the Venuefy Terms and Conditions, Cookie Policy, Refund Policy, Cancellation Policy and any notice shown when data is collected. For a specific processing activity, the more specific notice applies to the extent permitted by law.

END OF PRIVACY POLICY