1. Who We Are
This Privacy Policy describes how [INSERT REGISTERED LEGAL ENTITY NAME], trading as EPIC, processes personal information through https://wedplanners.in/. Effective date: [INSERT DATE]. Privacy contact: [INSERT EMAIL]; business address: [INSERT].
2. Personal Information We Collect
Depending on how you use the Platform, we may collect your name, contact details, city, wedding date, guest count, budget range, service preferences, enquiries, vendor/business details, account credentials, communications, reviews and uploaded photographs. If payments are enabled, we may receive transaction status and references; payment-card details should be processed by the designated payment provider, not claimed to be stored by us unless actually true. We may collect IP address, device/browser information, cookies and usage logs.
3. Sources and Purposes
We obtain information directly from you, through your Platform interactions, vendors when needed for an enquiry, and service providers. We use it to respond to enquiries, connect you with requested vendors, manage accounts, facilitate bookings/payments where enabled, provide customer support, prevent fraud, secure the Platform, meet legal obligations, improve functionality and send promotional communications where lawful consent or another valid legal basis applies.
4. Notice and Consent
We provide clear, purpose-specific notices at relevant collection points and seek consent where required. Optional marketing should use a separate unticked choice, and withdrawing consent should be as easy as giving it. Withdrawal does not retrospectively invalidate prior lawful processing and may affect services dependent on the relevant data. We will implement applicable DPDP Act and Rules obligations as their provisions commence.
5. Sharing of Information
We share enquiry details with the vendors you select or ask us to contact; they may act as independent controllers/data fiduciaries for their own services. We may use contracted hosting, communications, analytics, security and payment service providers under appropriate safeguards. We may disclose information where legally required or for legitimate legal claims. We do not represent that personal data is never shared, because requested vendor introductions require sharing. We do not sell personal information without a lawful basis and appropriate notice.
6. Cookies and Analytics
Essential cookies support site operation and security. Optional analytics, preference or advertising technologies should be disclosed in a cookie notice and enabled only with any consent required by applicable law. Users can manage cookies in browser settings and through [INSERT COOKIE PREFERENCE LINK, IF IMPLEMENTED].
7. Retention and Deletion
We retain data only as necessary for disclosed purposes, valid consent, disputes, security and applicable statutory retention requirements. Actual retention periods or criteria must be published for enquiry records, accounts, vendor records, payment records and logs after confirming operational and legal needs. We securely delete or de-identify information when retention is no longer justified, subject to legal exceptions and applicable phased DPDP requirements.
8. Security and Breach Response
We apply reasonable technical and organisational safeguards appropriate to the information and risks, including access controls, secure transmission, vendor oversight and incident response. No internet service is entirely risk-free. We will make breach notifications to affected individuals and authorities as and when required under applicable law.
9. Your Choices and Rights
You may request access to or correction of relevant personal information, withdraw applicable consent, opt out of marketing, request deletion where legally available, and raise a grievance. Additional rights under the DPDP Act, including nomination, will be supported when the relevant provisions take effect. Contact [INSERT PRIVACY EMAIL] and provide sufficient details to verify the request. We will respond within applicable statutory timelines.
10. Children
The Platform is intended for adults planning wedding services. We do not knowingly solicit children’s personal data. If processing a child’s information becomes necessary, we will apply the age-related and verifiable parental-consent requirements in force at that time. Contact us if you believe a child has supplied personal information improperly.
11. International Processing
Some service providers may process information outside India. We will make such transfers only where permitted by applicable Indian law and any notified restrictions, with appropriate contractual and security measures. Do not state that all data remains in India unless verified.
12. Third-Party Sites and Vendor Privacy
Independent vendors and linked websites may have their own privacy notices. Review their practices before sharing additional personal details or making direct payments. We remain responsible for our own processing obligations.
13. Changes to This Policy
We may update this Policy to reflect legal, operational or technical changes. The current version and effective date will be published here, and material changes communicated when legally required.
14. Grievance and Privacy Contact
Data/privacy contact: [INSERT NAME OR DESIGNATION], [EMAIL], [POSTAL ADDRESS]. Grievance Officer (where applicable): [INSERT NAME, CONTACT AND DETAILS]. We will provide the request/complaint channel and response period required by applicable law. When the relevant DPDP provisions commence, we will publish the prescribed rights and grievance process, including any applicable escalation route.