Privacy Policy

1. Introduction

This Privacy Policy describes how SortMyEntries, operated by Vedant Konde (Sole Proprietor/Founder), based in Mumbai, Maharashtra, India, collects, uses, stores, shares, and protects your personal information when you use our platform, website (www.sortmyentries.in), mobile applications, and related services.

By accessing or using the Services, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in accordance with applicable laws including the Information Technology Act, 2000, IT Rules 2011, and the Digital Personal Data Protection Act, 2023.

2. Information We Collect

2.1 Information You Provide

Account Registration: Full name, mobile number, email address, password (encrypted), date of birth, gender (optional), and profile photograph (optional).

Identity Verification: Government-issued photo identification (Aadhaar, PAN, Passport, Driving License, Voter ID), photograph for identity matching, and address proof if required.

Delivery Information: Shipping address, PIN code, and delivery instructions.

Payment Information: Credit/debit card details (processed via third-party gateways), UPI ID, bank account details for refunds, billing address, and transaction history.

Communications: Customer support inquiries, feedback, survey responses, and correspondence with the Company.

2.2 Automatically Collected Information

Device Information: Device type, operating system, unique identifiers, mobile network information, and browser type.

Usage Information: Pages accessed, time spent, search queries, events viewed and booked, clickstream data, and referral sources.

Location Information: IP address-based approximate location, GPS location (with consent), and city/region for recommendations.

Card Usage: Transactions, entry scans, credit balance history, and activation records.

2.3 Cookies and Tracking

We use cookies and similar technologies to maintain sessions, remember preferences, analyze usage, and deliver relevant content. You can manage cookie preferences through your browser settings.

3. How We Use Your Information

3.1 Primary Purposes

• Creating and managing your Account
• Processing identity verification
• Issuing and managing your SortMyEntries Card
• Processing event bookings and payments
• Facilitating entry at event venues
• Providing customer support
• Generating booking confirmations and receipts

3.2 Secondary Purposes

• Personalization and event recommendations
• Analytics and service improvement
• Security and fraud prevention
• Marketing communications (with consent)

3.3 Legal Purposes

• Compliance with applicable laws
• Responding to legal processes
• Enforcing our Terms of Service
• Tax and accounting compliance

4. Information Sharing

4.1 Service Providers

We may share information with trusted third-party providers for payment processing, cloud hosting, communication services, analytics, card manufacturing, and delivery services. These providers are contractually obligated to protect your information.

4.2 Event Organizers

When you book an event, we share your name, booking details, and contact information (if required). We do not share complete identity documents, payment card details, or unrelated booking history.

4.3 Legal Disclosures

We may disclose information when required by law, to respond to legal processes, enforce our Terms, protect rights and safety, or address fraud and security issues.

5. Data Security

We implement industry-standard security measures including:

• Encryption: AES-256 for data at rest, TLS 1.3+ for data in transit
• Access Controls: Role-based access, multi-factor authentication for admin access
• Infrastructure: Secure cloud hosting, firewalls, intrusion detection
• Payment Security: PCI-DSS compliant payment gateways, tokenization

In the event of a data breach, we will notify affected users within 72 hours and take immediate remedial action.

6. Data Retention

Data Category	Retention Period
Account Information	Duration of Account + 3 years
Transaction Records	7 years (legal requirement)
Identity Documents	Verified and deleted within 90 days
Card Usage Data	Duration of Account + 3 years
Communication Records	3 years
Analytics Data	2 years (aggregated/anonymized)

7. Your Rights

You have the right to:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Withdraw Consent: Withdraw consent for processing at any time
• Object: Object to processing based on legitimate interests
• Portability: Receive your data in a structured format

To exercise these rights, contact us at vedant@sortmyentries.in with subject "Privacy Rights Request." We will respond within 30 days.

8. Marketing Communications

Transactional communications (booking confirmations, security alerts, service updates) cannot be opted out of.

Marketing communications (promotions, newsletters) can be opted out via unsubscribe links, account settings, or by contacting us. Opt-out requests are processed within 7 days.

9. Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect information from children under 13. Users between 13-18 must have parental consent. If you believe a child has provided information, contact us immediately.

10. International Transfers

Your data is primarily stored in India. When transferred internationally through service providers, we ensure adequate protection through contractual safeguards and equivalent security measures.

11. Changes to This Policy

We may update this Policy periodically. Material changes will be communicated via email, platform notices, or in-app notifications. Continued use after changes constitutes acceptance.

12. Grievance Officer

For privacy complaints, email us with subject "Privacy Complaint." We will acknowledge within 24-48 hours and respond with resolution within 30 days.