Privacy Policy

Aarambh operates the Aarambh ticketing platform — this website, the attendee app, and the tools our staff use to run an event. Our address for correspondence is Aditya Complex, Shop No.3, Near Shardageeta Vidhyalaya, 2 - Navrang Society, Oppo. Vadwala Hotel, 80 Feet Road, Surendranagar, Gujarat, India. In this policy “we” means Aarambh and “you” means the person whose account it is.

We are the Data Fiduciary for the personal data described below, in the sense the Digital Personal Data Protection Act, 2023 uses that term. This policy tells you what we hold, why we hold it, and what you can make us do about it.

To sell you a ticket we need, and always collect:

• Your mobile number. It identifies your account and is verified by a one-time code we send you by SMS.
• Your bookings. The tickets you buy, the nights they are for, the price you paid, how you paid, and whether the booking was approved.
• Entry records. Which ticket was scanned at the gate, and when. This exists so a ticket cannot be used twice.
• Tickets you share. Including the mobile number you share a ticket to, so the person you sent it to can claim it.

You may also choose to add, and we then store, any of the following. None of them is required to buy a ticket, all of them can be left blank, and you can clear them at any time from your profile:

• Your name and email address.
• Your city, gender, marital status, and a profile photo. These are used only to tailor what the app shows you — which events are put in front of you first. They are not used to make any decision that affects you, are not shared with anyone, and are never used for advertising.

We do not collect your date of birth, your location, your contacts, or your device identifiers. We do not collect payment card or net-banking credentials — see below.

To sell you a ticket, to let you into the venue, and to deal with you about a booking you have made. Entry records exist so that one ticket admits one person once. The optional details exist to personalise what the app shows you, and for nothing else.

The only message the platform sends you today is the one-time code you sign in with. We do not currently send booking confirmations, reminders, event updates or marketing by SMS or email. If we start sending any of those, the notification preferences in your profile will control them, and marketing is off unless you switch it on.

There is no payment gateway. Nothing on this platform takes a card, a net-banking login or a UPI PIN. Payment is handled by people, in one of two ways, and a booking stays “Pending for approval” until one of our administrators has checked it:

• UPI. You scan a static UPI QR code and pay from your own banking or UPI app. The transfer goes bank to bank and we are not part of it. You then send us the payment screenshot on WhatsApp, so that message — and whatever your screenshot happens to show — reaches us, and WhatsApp carries it on its own terms.
• Cash. You bring cash to our office at the address above. This is the office, not the venue where the event happens — they are different places. No payment data is collected at all.

You may also type a payment reference, such as a UPI transaction ID, so we can match your payment to your booking. That reference is stored with the booking.

• An SMS provider receives your mobile number in order to deliver your one-time code. That is the only thing it receives.
• WhatsApp carries your payment screenshot to us, if you choose to pay by UPI. That message is between you and us over WhatsApp’s service.
• Our staff see a booking in order to approve or reject it, and see the name on a ticket at the gate in order to admit you.
• Our hosting provider stores the data on our behalf, on servers in India.

That is the complete list. There is no payment gateway, no analytics provider, no advertising network, no crash-reporting service and no tracking of any kind anywhere in this product. We have never sold personal data and will not.

Your account and your bookings are kept while your account exists, and afterwards only for as long as tax and accounting rules require us to keep a record of a completed transaction.

Deleting your account starts a seven-day grace period, because deletion is irreversible and “I didn’t mean that” usually arrives within a day or two. After it passes, your personal details are erased: your mobile number, name, email, city, gender, marital status and profile photo.

Records of entry at the gate and of completed transactions survive that erasure, because the venue and the tax authorities both need them. They are keyed to an internal identifier that, once your details are erased, no longer carries your name, your number or anything else about you — and they are never used to contact you.

Under the DPDP Act you may:

• See and correct your details. Your profile in the app shows everything you have given us and lets you change it.
• Ask for a summary of what we hold about you. Write to info@aarambhsurendranagar.com and we will send it to you.
• Have your account erased. Profile → Delete account, in the app. It works, on the terms described above. You can also ask us by email and we will do it for you.
• Withdraw consent for anything we asked your consent for, and nominate someone to exercise these rights if you die or become incapable of exercising them yourself.
• Complain — to our grievance officer below, and, if we do not resolve it, to the Data Protection Board of India.

The platform is not designed for children and we do not knowingly create accounts for anyone under 18. We do not ask for a date of birth, so we cannot verify age from what we hold; if you tell us an account belongs to a child we will delete it. There is no behavioural advertising or tracking on this platform, of anyone, so there is none to switch off for a child.

Sign-in is by one-time code — there is no password to leak. Session tokens are held in cookies your browser will not let a script read (see the Cookie Policy). Access to booking and attendee data is restricted to staff who need it for the event they are working on, and administrative actions are written to an audit log. No system is perfectly secure, and we will tell you and the Data Protection Board if a breach affects your data.

This is version 1.0. Every version carries a number and a date at the top, and we keep a record of which version you accepted. If we change it in a way that alters what you agreed to, we will ask you to accept the new version rather than change it quietly underneath you.

For anything about your data, or a complaint about how we have handled it, contact our grievance officer — named under section 13 of the DPDP Act and rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

• Grievance Officer: Ayushi Masiyava
• Email: info@aarambhsurendranagar.com
• Phone and WhatsApp: +91 9316630749 (WhatsApp)
• Post: Aarambh, Aditya Complex, Shop No.3, Near Shardageeta Vidhyalaya, 2 - Navrang Society, Oppo. Vadwala Hotel, 80 Feet Road, Surendranagar, Gujarat, India

We will acknowledge your complaint within 24 hours and resolve it within 15 days of receiving it. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.