Privacy Policy
This Privacy Policy explains how BEST EVENTSWALA ("we", "us", "our") collects, uses, shares and protects your personal data when you use our website and portals. It is published in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. Data We Collect
| Category | Examples | When |
|---|---|---|
| Identity & contact | Name, designation, email, phone, company, address, city, pincode, points of contact | Enquiry, order, account creation |
| Business/KYC | Company/business name, GSTIN, PAN, ID and address proofs, bank details documents | Client and vendor account verification |
| Order data | Event type, date, venue, budget, documents, updates, support tickets, payments, ratings | Using the portals |
| Agreement records | Typed name, designation, time, IP address, device information and document fingerprint | Electronic acceptance of documents |
| Account security | Hashed password, encrypted two-factor secrets, login timestamps, IP address | Login & security |
| Website analytics | Approximate location (country, state, city), page visited, referring site, device type. IP addresses are not stored; a daily-rotating anonymous identifier counts unique visits. | Browsing the site |
We do not knowingly collect data from children under 18; our services are for businesses and adults.
2. How We Use Your Data
- To respond to enquiries and provide quotations.
- To create and manage your account, orders, messages and notifications.
- To coordinate event execution with our internal team and assigned vendor partners (see Section 4 for what vendors can see).
- To send transactional emails (enquiry confirmations, order confirmations, password resets).
- To meet legal obligations (tax invoices, accounting, law-enforcement requests).
- To improve our services, prevent fraud and secure the platform.
We send marketing communications only with your consent, and you can opt out at any time.
3. Legal Basis & Consent
We process your data on the basis of your consent (given when you submit a form or create an account) and for legitimate uses permitted under the DPDP Act, such as performing the services you request and complying with law. You may withdraw consent at any time by contacting us; this may limit the services we can provide.
4. Sharing - and What We Never Share
- We do not sell your personal data.
- Clients' contact details are not shared with vendors, and vendors' details are not shared with clients. Vendor partners assigned to an order see only what they need to deliver it - the event date, venue, scope of work and the client's company name - and coordinate through our staff.
- Reviews are published on our website with your name, designation and company only if you consent when submitting them.
- We share data with service providers who help us operate (e.g. cloud hosting on Cloudflare, email delivery), bound by confidentiality.
- We disclose data where required by law, court order, or to protect our legal rights.
5. Cookies & Local Storage
We use browser local storage to keep you signed in (authentication token) and remember basic preferences. We do not use third-party advertising cookies. You can clear local storage in your browser at any time; you will be signed out.
6. Data Security
- All traffic is encrypted in transit (HTTPS/TLS).
- Passwords are stored only as salted cryptographic hashes - we cannot see your password. Staff and administrator accounts are protected with two-factor authentication.
- Documents are stored in private encrypted cloud storage and can only be downloaded by people with access to the related order or account.
- Access to personal data is role-restricted within our team, and admin actions are audit-logged.
7. Data Retention
We retain account and order data for as long as your account is active and thereafter as needed for legal, tax and accounting purposes (generally up to 8 years for financial records under Indian law). Enquiry data from non-customers is retained for up to 24 months.
8. Your Rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you;
- Correct or update inaccurate data (you can edit most details in your account);
- Request erasure of your data, subject to legal retention requirements;
- Withdraw consent and nominate a person to exercise your rights;
- Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.
9. Grievance Officer
- Grievance Officer: BEST EVENTSWALA Support Team
- Email: team@besteventswala.com
- Phone / WhatsApp: +91 79761 32938
- Grievances are acknowledged within 48 hours and resolved within 30 days.
10. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified on the website or by email. The "Last updated" date reflects the current version.