Policies
Privacy Policy
How we collect, use, and protect your personal data.
← Back to home
Last updated: [DATE]
Replace [BRACKETED] placeholders and have this reviewed by a lawyer. This template reflects India's Digital Personal Data Protection (DPDP) Act, 2023; adapt as your processing changes.
The InfinityZ, operated by [LEGAL COMPANY NAME] ("we", "us"), respects your privacy. This policy explains what personal data we collect when you visit our website or book tickets, and your rights over it.
1. Data we collect
- Booking details: name, email address, phone number, chosen date/slot and ticket quantity.
- Payment data: processed securely by our payment gateway, Razorpay. We do not store your full card number or CVV on our servers.
- Usage data: device/browser info and cookies used to run and improve the site and measure traffic.
2. How we use your data
- To process bookings, issue tickets/QR passes, and provide support.
- To send booking confirmations and service messages (email/SMS/WhatsApp).
- With your consent, to send offers and newsletters (you can opt out anytime).
- To meet legal, tax (GST), and accounting obligations.
3. Sharing
We share data only as needed with: our payment gateway (Razorpay); ticketing partners you book through (e.g. BookMyShow, District); communication and analytics providers; and authorities where required by law. We do not sell your personal data.
4. Storage & security
Personal data is encrypted in transit (HTTPS) and protected with access controls. We retain data only as long as necessary for the purposes above or as required by law, then delete or anonymise it.
5. Your rights (DPDP Act, 2023)
- Access, correct, or update your personal data.
- Withdraw consent and request erasure, subject to legal retention needs.
- Nominate another person to exercise your rights.
- Raise a grievance with our Grievance Officer (below) and, if unresolved, with the Data Protection Board of India.
6. Cookies
We use essential cookies to run the site and optional analytics cookies. You can control cookies through your browser settings.
7. Children
Bookings are made by adults. We do not knowingly collect data from children without verifiable parental consent, in line with the DPDP Act.
8. Grievance Officer
[GRIEVANCE OFFICER NAME]
[LEGAL COMPANY NAME], [REGISTERED ADDRESS]
Email: [PRIVACY EMAIL] · Phone: [PHONE]