Privacy Policy

SHATA EVENTS PVT LTD - Privacy Policy

Last Updated: May 6, 2025

1. Introduction and Scope

Welcome to SHATA EVENTS PVT LTD ("SHATA," "we," "our," or "us"). We are committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, process, share, and protect Personal Data when you use the SHATA mobile application ("App") and associated services (collectively, the "Platform"), whether you are a customer booking services ("Customer") or a registered service provider ("Partner").

SHATA EVENTS PVT LTD is registered at C-131, SY. NO. 9, Bandlaguda Jagir, Sun City, Near Keerthi Richmond Villas, Hyderabad, 500086, Telangana, India. This Policy is framed in compliance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable laws.

By accessing or using the Platform, you signify your understanding and acceptance of this Privacy Policy and consent to the processing of your Personal Data as described herein. If you do not agree with this Policy, please do not use the Platform.

2. Definitions

Capitalized terms used but not defined herein shall have the meanings ascribed to them in the applicable SHATA Terms and Conditions (for Customers or Partners).

Consent: Any freely given, specific, informed, and unambiguous indication of the Data Principal's wishes by which they, by a clear affirmative action, signify agreement to the processing of their Personal Data for the specified purpose.

Data Fiduciary: Any person who alone or jointly with others determines the purpose and means of processing of Personal Data. For this Policy, SHATA EVENTS PVT LTD is the Data Fiduciary.

Data Principal: The individual to whom the Personal Data relates (i.e., you, the Customer or Partner user).

Data Processor: Any person who processes Personal Data on behalf of a Data Fiduciary. Our Partners may act as Data Processors when handling Customer data for service delivery.

DPDP Act: The Digital Personal Data Protection Act, 2023, and any rules or regulations issued thereunder.

Personal Data: Any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act. This includes information you provide and information collected automatically.

Processing: In relation to Personal Data, means an operation or set of operations performed on Personal Data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.

3. Information We Collect (Personal Data)

We collect Personal Data necessary to provide and improve our Platform and services. The types of Personal Data we collect depend on whether you are a Customer or a Partner:

(a) Information Collected from Customers:

  • Identity & Contact Data: Name, email address, phone number, delivery address (for event location).
  • Booking Data: Event type, event date(s), location details, specific service requirements, communication history with Partners via the Platform, booking history.
  • Payment Data: While we facilitate payments, we typically use third-party payment gateways. We may collect transaction IDs and summaries but generally do not store full credit/debit card numbers or bank account details (these are handled by the secure payment processor).
  • Feedback & Rating Data: Reviews, ratings, and feedback you provide about Partners and services.
  • Technical & Usage Data: IP address, device type, operating system, browser type, App version, pages visited, features used, time spent on the App, crash reports (collected automatically).
  • Location Data: Approximate location based on IP address or precise location if you grant permission (e.g., to find nearby Partners or verify event location).

(b) Information Collected from Partners:

  • Identity & Business Data: Business name, contact person name, email address, phone number, registered business address, PAN, GSTIN, bank account details (for settlement), business licenses/permits/registrations.
  • Service Listing Data: Service descriptions, categories, pricing, service area, photos, videos, portfolio details, personnel details (names, roles for ID cards/uniforms).
  • Booking Management Data: Responses to leads/bookings, communication history with Customers via the Platform, event schedules, real-time photos/videos of ongoing events uploaded via the Platform.
  • Performance Data: SHATA Score, customer ratings and reviews, lead acceptance/cancellation records, compliance records.
  • Technical & Usage Data: IP address, device type, operating system, browser type, App version, pages visited, features used, time spent on the App, crash reports (collected automatically).
  • Financial Data: Joining Fee payment status, Service Fee calculations, settlement records.

4. How We Use Your Information

We process your Personal Data for specific, legitimate purposes based on your Consent or other lawful grounds under the DPDP Act. These purposes include:

  • Providing Platform Services: Registering users, creating and managing accounts, listing Partner services, facilitating Bookings between Customers and Partners, processing payments, providing customer/partner support.
  • Communication: Sending booking confirmations, reminders, updates, support messages, promotional offers (with consent/opt-out), responding to inquiries.
  • Platform Improvement: Analyzing usage patterns to understand user needs, improve App functionality and user experience, develop new features, troubleshoot issues.
  • Personalization: Tailoring content and service recommendations based on your preferences and usage history.
  • Safety & Security: Verifying user identity, preventing fraud, monitoring for prohibited activities, ensuring compliance with our Terms and Applicable Laws (including POSH Act compliance support).
  • Performance Monitoring (Partners): Calculating SHATA Scores, managing ratings, ensuring compliance with Service Standards.
  • Legal & Compliance: Complying with legal obligations, responding to lawful requests from authorities, enforcing our Terms and Conditions, resolving disputes.
  • Marketing & Promotions: Sending information about SHATA services, promotions, or events (you can opt-out at any time).

5. Legal Basis for Processing

We process your Personal Data based on the following grounds under the DPDP Act:

  • Consent: For most processing activities, particularly those involving optional features, marketing communications, or sensitive data (if any), we rely on your explicit Consent, obtained at the time of data collection or account registration. You have the right to withdraw your Consent at any time.
  • Legitimate Purposes: We may process certain Personal Data for specified legitimate purposes where you voluntarily provide your data, such as fulfilling the services you requested (e.g., processing a booking, settling payments), enforcing our rights, preventing fraud, or ensuring network security.
  • Compliance with Law: We may process Personal Data to comply with legal judgments or obligations under Indian law.

6. Data Sharing and Disclosure

We do not sell your Personal Data. We may share your Personal Data only in the following circumstances:

  • Between Customers and Partners: We share necessary information (e.g., Customer contact details, event requirements with the chosen Partner; Partner profile, availability with the Customer) to facilitate Bookings and service delivery.
  • Third-Party Service Providers: We engage trusted third parties to perform functions on our behalf (e.g., payment processors, cloud hosting providers, analytics providers, communication services). These providers only have access to Personal Data needed to perform their functions and are contractually obligated to process it securely and only for the purposes specified by us, in compliance with the DPDP Act.
  • Legal Requirements: We may disclose Personal Data if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of SHATA, our users, or others.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your Personal Data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our App of any change in ownership or uses of your Personal Data.
  • With Consent: We may share your Personal Data with other third parties with your explicit Consent.

7. Data Storage and Retention

  • Storage Location: Your Personal Data is primarily stored and processed on secure servers located within India.
  • Retention Period: We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your relationship with us (e.g., maintaining your account), and as required to satisfy any legal, regulatory, accounting, or reporting requirements. We will cease to retain Personal Data or anonymize it once the purpose is fulfilled and retention is no longer necessary. Retention periods are determined based on the nature of the data and the purposes of processing.

8. Data Security Measures

We implement appropriate technical and organizational security measures (such as encryption, access controls, firewalls) designed to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access, commensurate with the risks involved in the processing and the nature of the Personal Data. However, no method of transmission over the Internet or electronic storage is 100% secure.

9. Your Rights as a Data Principal (Under DPDP Act)

You have the following rights regarding your Personal Data:

  • Right to Access Information: You have the right to obtain confirmation about the processing of your Personal Data, access your data, and receive a summary of the processing activities.
  • Right to Correction and Erasure: You have the right to request correction of inaccurate or incomplete Personal Data and erasure of Personal Data that is no longer necessary for the purpose it was collected for, subject to legal retention requirements.
  • Right to Grievance Redressal: You have the right to register grievances with our designated Grievance Officer regarding any issues related to the processing of your Personal Data.
  • Right to Nominate: You have the right to nominate another individual who can exercise your rights on your behalf in case of your death or incapacity.
  • Right to Withdraw Consent: Where processing is based on Consent, you have the right to withdraw your Consent at any time. Withdrawal will not affect the lawfulness of processing based on Consent before its withdrawal.

To exercise these rights, please contact our Grievance Officer using the details provided in Section 12. We will respond to your request in accordance with the timelines stipulated under the DPDP Act. Please note that exercising certain rights (like erasure or withdrawal of consent for essential processing) may affect our ability to provide you with the Platform services.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect Personal Data from children under 18. If we become aware that we have inadvertently collected Personal Data from a child under 18 without verifiable parental consent, we will take steps to delete such information.

11. Cookies and Tracking Technologies

We may use cookies, pixels, and similar technologies to collect Technical & Usage Data, enhance user experience, analyze trends, and administer the Platform. You can manage your cookie preferences through your browser or device settings.

12. Grievance Officer

In accordance with the DPDP Act, the contact details of our Grievance Officer are provided below. You may contact the Grievance Officer for any queries or grievances regarding this Privacy Policy or the processing of your Personal Data:

Name: [Insert Name of Grievance Officer]

Designation: Grievance Officer

Email: info@theshata.com

Address: SHATA EVENTS PRIVATE LIMITED, C-131, SY. NO. 9, Bandlaguda Jagir, Sun City, Near Keerthi Richmond Villas, Hyderabad, 500086, Telangana, India

We will acknowledge your grievance promptly and resolve it within the timelines prescribed under the DPDP Act.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on the App or through other communication channels. Your continued use of the Platform after the effective date of the revised policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically.

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts in Hyderabad, Telangana.

15. Consent

By registering an account, using the App, or otherwise providing your Personal Data, you explicitly consent to the collection, processing, use, storage, and disclosure of your Personal Data as described in this Privacy Policy and in accordance with the DPDP Act.