This Privacy Policy explains how [to be added in Admin › Settings] ("Shubho Milan", "we") collects, uses, shares and protects personal data when you use our website and mobile apps, and the rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.
1. Data we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, mobile number, email | To create your account and sign you in with an OTP |
| Wedding plan details | Event names, dates, city, venue, guest count, budget | To send enquiries and get accurate quotations |
| Booking & payment records | Quotations, bookings, invoices, payment status, refunds | To provide bookings, invoices and refunds, and to meet tax and accounting law |
| Messages & reviews | Messages with Vendors, reviews and photos you upload | To run enquiries and show verified reviews |
| Vendor business data | Business name, owner details, PAN, GSTIN, bank account, documents, photos | To verify Vendors, list their services and pay them |
| Device & usage data | IP address, device type, app version, pages viewed, crash logs | Security, fraud prevention, fixing problems and improving the Platform |
We do not collect your full card number, UPI PIN or net-banking password; these are handled by our payment partner. We use your device location only if you allow it, to suggest your city.
2. Consent and legitimate uses
We process personal data with your consent (given when you sign up, send an enquiry or make a booking) or for legitimate uses allowed by the DPDP Act, such as completing a booking you asked for or complying with law. You can withdraw consent at any time; this does not affect processing already done, and some services may stop working without the data they need.
3. Who we share data with
- Vendors you enquire with or book: your name and event details. Your phone number is shared only after a booking is confirmed.
- Service providers who process data for us: payment gateway, SMS/WhatsApp/email providers, cloud hosting in India, customer support tools. They may use data only to provide their service to us.
- Authorities where required by law, court order, or to prevent fraud or protect safety.
We do not sell personal data.
4. How long we keep data
- Account and wedding plan data: while your account is active, and deleted or anonymised within 90 days after you close it.
- Booking, invoice and payment records: for the period required by tax and accounting law (generally 8 years).
- Security logs: up to 1 year.
5. Your rights
Under the DPDP Act you can:
- get a summary of the personal data we hold about you and how it is processed;
- ask us to correct, complete, update or erase your personal data;
- withdraw consent;
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us and, if not resolved, with the Data Protection Board of India.
To use these rights, write to support@vivaahsetu.in or use the account deletion page. We may verify your identity with an OTP before acting.
6. Security
Data is encrypted in transit (HTTPS) and sensitive data such as bank and identity details is encrypted at rest. Staff access is role-based, uses two-factor authentication and is logged.
7. Children
The Platform is for adults. We do not knowingly collect personal data of children under 18 except as part of a wedding plan created by a parent or guardian.
8. Cookies
See our Cookie Policy.
9. Contact and grievances
Grievance Officer: Grievance Officer, Grievance Officer, [to be added in Admin › Settings], [to be added in Admin › Settings]. Email: support@vivaahsetu.in. Phone: +91 99999 99999.