ZAPPY EVENTS — PRIVACY POLICY

1. INTRODUCTION

ZappyEvents Tech Private Limited (“Zappy”, “we”, “us”, or “our”) values your trust and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, process, and protect your information when you access or use:

• The Zappy website
• The Zappy mobile application
• Our event booking, vendor, and corporate solutions
• Any digital services operated by Zappy

By using our Platform, you agree to this Privacy Policy and consent to the processing of your personal data in accordance with the applicable Indian privacy regulations.

2. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to:

• Users booking personal events
• Parents/guardians booking events for their children
• Corporate clients
• Vendors/Partners, service providers, artists, entertainers
• Individuals interacting with our Platform or customer care

3. ELIGIBILITY

You must be 18 years or older to create an account or use our booking services.

Parents/guardians may provide limited details (e.g., child name & age) solely for event preparation.

4. WHAT DATA WE COLLECT

We collect only what is necessary to deliver our services effectively.

4.1 Information You Provide to Us

For Customers:

• Full name
• Phone number
• Email address
• Residential or event venue address
• Event details (date, type, theme, guest count)
• Child’s name and age (for kids’ events only)
• GST details for corporate billing
• Photos/videos if shared with us voluntarily

For Vendors & Partners:

• Name, business name
• Phone number & email
• Address
• Aadhar/PAN
• Bank account details (for payouts)
• Service offerings, pricing, availability

4.2 Automatically Collected Data (Non-Personal)

Through Google Analytics, we collect:

• Page visits
• Time spent on pages
• Traffic sources
• User interaction patterns

We do NOT collect:

• IP address
• Device identifiers
• Hardware or OS information
• Sensitive health or medical information

5. HOW WE USE YOUR INFORMATION

We use your data for the following purposes:

5.1 To Provide and Improve Event Services

• Process and confirm bookings
• Coordinate with vendors, artists, and event staff
• Plan and customize your event
• Enable payments and refunds
• Provide customer support
• Handle corporate event planning

5.2 Communication

We may contact you using:

• Phone calls
• SMS / WhatsApp (via Msg91)
• Email
• App push notifications

To provide:

• Booking confirmations
• Event updates
• Vendor arrival details
• Payment status
• Support and escalations

5.3 Vendor Management

We process vendor data to:

• Verify identity
• Manage payouts
• Allocate bookings
• Ensure service quality
• Maintain event safety

5.4 Marketing (Optional & Consent-Based)

Media consent section 11 to apply for use in Marketing :

• Social media
• Websites
• Ads
• Brochures
• Sales proposals

You may also withdraw consent anytime by emailing support@zappyeventz.com.

5.5 Legal & Safety Obligations

We may use or disclose data to:

• Prevent fraud or misconduct
• Enforce Terms & Conditions
• Comply with law enforcement or government directives
• Protect safety of guests, vendors, and event staff

6. LEGAL BASIS FOR PROCESSING (DPDPA 2023)

We process personal data based on:

• Your consent
• Fulfillment of a contract (event booking)
• Legitimate interests (fraud prevention, vendor allocation)
• Legal compliance
• Corporate governance and accounting rules

You may also withdraw consent anytime by emailing support@zappyeventz.com..

7. HOW WE SHARE YOUR DATA

Zappy never sells your data.

7.1 Event Vendors & Partners

We share:

• Name
• Phone number
• Venue address
• Event details

Only as necessary to execute your booking.

7.2 Third-Party Service Providers

Zappy uses several third party, industry standard providers and all third parties operate under contractual confidentiality and data protection obligations.

7.3 Legal Situations

We may share data to:

• Respond to subpoenas, court orders
• Address fraud, cyber threats
• Protect Zappy, its users, or its partners
• Meet regulatory compliance requirements

8. HOW WE STORE & PROTECT YOUR DATA

Your data is stored securely on cloud infrastructure with:

• Encryption in transit
• Access controls
• Firewall protection
• Secure APIs
• Vendor compliance checks
• Regular audits

While we use industry-standard controls, no system is completely immune from vulnerabilities.

9. DATA RETENTION

10. User Rights under Indian Data Privacy Regulations

You have the right to:

• Access your personal data
• Correct inaccurate information
• Withdraw consent
• Request deletion of data
• Know how your data is processed
• File grievances with Zappy

To exercise these rights, email:

support@zappyeventz.com

11. MEDIA (PHOTOS & VIDEOS) CONSENT

During the course of an event, ZappyEvents Tech Private Limited (“Zappy”), or its authorized vendors, photographers, and partner teams, may capture photographs, videos, or other media (“Event Media”) as part of the event experience.

By booking and participating in an event with Zappy, you acknowledge and consent to the following:

11.1 Capture of Event Media

Zappy and its approved vendors may capture Event Media that may include you, your family members, guests, and participating children, unless you specifically opt out in advance.

11.2 Purpose of Use

Zappy may use Event Media for the following purposes:

• Marketing and promotional activities
• Website galleries and portfolios
• Social media posts and stories
• Online/offline advertisements
• Case studies, brochures, and sales materials
• Showcasing event quality to prospective customers

Zappy will not use Event Media in any way that is defamatory, harmful, or violates personal dignity.

11.3 Opt-Out Rights

If you do not wish for your or your family’s images to be captured or used:

• You must inform Zappy before the event through WhatsApp or email
• You may also withdraw consent anytime by emailing suppor@zappyeventz.com.

Upon receiving an opt-out request:

• Zappy will instruct all vendors to avoid capturing identifiable images of the restricted individual(s).
• Zappy will stop using Event Media for future publications.
• Media already published publicly may continue to remain on platforms where removal is not feasible.

11.4 Vendor Handling of Event Media

Zappy vendors and partners:

• Are authorized to capture Event Media solely for service delivery
• Must comply with customer opt-out instructions
• May use Event Media in their own portfolios only with Zappy’s prior approval

11.5 Ownership of Media

All Event Media captured during Zappy events may be used and stored by Zappy for legitimate business purposes, unless the customer has opted out.

Zappy respects all opt-out and withdrawal requests.

12. COOKIES AND TRACKING

We use cookies for:

• Website performance measurement
• Understanding popular pages
• Improving user experience

We do not use:

• Behavioural advertising
• Device fingerprinting
• IP-based profiling

13. DATA BREACH & INCIDENT RESPONSE

In the rare event of a breach:

• We will take immediate remedial steps
• Notify affected users (if required by law)
• Report the incident to authorities as mandated
• Strengthen our security controls

14. INTERNATIONAL DATA TRANSFERS

Some anonymized analytics or cloud storage may involve global servers (AWS, Google Analytics).

Zappy ensures transfers comply with applicable laws and safeguards.

15. LINKS TO THIRD-PARTY SITES

We are not responsible for:

• Content
• Privacy practices
• Security

of external websites linked from our Platform.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Policy periodically. Any changes will be posted with a revised “Effective Date”. Continued use of the Platform constitutes acceptance of the updated Policy.

17. GOVERNING LAW & JURISDICTION

This Privacy Policy is governed by and interpreted in accordance with the laws of India.

For any dispute arising out of or relating to this Privacy Policy, the courts at Lucknow, Uttar Pradesh shall have exclusive jurisdiction.

Users accessing or using the Platform consent to the personal jurisdiction of such courts and waive any objection to the same.