Privacy Policy & Data Protection

1. Data Fiduciary Identity & Scope

This Privacy Policy explains how Pravariq Events ("We", "Us", or "Data Fiduciary"), an elite division of Pravariq Group founded by Sameer Chaturvedi, collects, processes, stores, and protects personal data obtained through `https://weddings.pravariq.in`, direct WhatsApp concierge dialogues, video advisory sessions, and contract intakes.

We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDPA) and as a Data Controller under the General Data Protection Regulation (GDPR).

2. Categories of Personal Data Collected

Depending on your engagement with our platform, we collect the following categories of data:

• Identity & Contact Information: Full name, telephone/WhatsApp number, email address, country of residence, and family representative designations.
• Wedding & Logistics Parameters: Target wedding date, guest headcount, preferred heritage cities (Jaipur, Udaipur), budget bracket, accommodation needs, and aesthetic vision.
• Communication Records: Transcripts of emails, WhatsApp consultation dialogues, Google Meet scheduling records, and consultation dossiers.
• Technical & Telemetry Data: IP address (extracted for anti-bot protection and rate-limiting via reverse proxy), browser type, device information, and anonymized interaction metrics gathered via Google Analytics (subject to cookie consent).

3. Purpose of Processing & Lawful Basis

We process your personal data strictly for legitimate commercial and advisory purposes:

• Consultation Intake & Calendar Scheduling: Facilitating direct advisory dialogues with Sameer Chaturvedi via WhatsApp, Google Meet, or tele-briefing (Lawful Basis: Consent & Contractual Pre-steps).
• Venue Feasibility & Buyout Mathematical Modeling: Calculating palace accommodation capacity, F&B minimum spends, and Sitapura artisan scenography budgets tailored to your celebration.
• Compliance & Anti-Fraud Security: Enforcing rate-limiting safeguards, bot-honeypot quarantines, and preventing denial-of-service abuse of our consultation scheduling infrastructure.

Strict Non-Monetization Commitment: Pravariq Events never sells, rents, trades, or commercially leases your personal data, guest lists, or family contact details to advertising brokers, hotel chains, or external lead aggregators.

4. International Diaspora (NRI) & Cross-Border Transfers

For clients originating from the United States, United Kingdom, European Union, United Arab Emirates, and Canada:

• Your personal data is transferred to and securely processed in India, where Pravariq Events maintains its operational headquarters.
• Cloud services utilized for appointment notifications and calendar sync (Google Workspace, Hostinger transactional SMTP) operate with enterprise-grade encryption (TLS/SSL in transit, AES-256 at rest) in compliance with international standard contractual clauses.

5. Data Retention & Erasure

We retain consultation inquiries for a maximum period of twenty-four (24) months following the planned wedding season to maintain advisory records and historic budget projections. Where a formal Wedding Planning Mandate is executed, financial and billing records are retained for seven (7) years in compliance with statutory Indian taxation and auditing obligations (Income Tax Act, 1961 and GST regulations). Upon expiration of the retention window, data is securely and permanently purged.

6. Your Statutory Rights

Under applicable data protection legislation (including DPDPA 2023, GDPR, and CCPA), you are entitled to exercise the following rights:

• Right of Access & Summary: Request a copy of all personal data held regarding your inquiry.
• Right to Correction & Completion: Request update or rectification of inaccurate contact parameters.
• Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your intake dossier, subject to statutory tax retention exemptions.
• Right to Withdraw Consent: Revoke consent for processing at any time without affecting past lawful processing.
• Right to Nominate: Under DPDPA Section 14, designate an individual who, in the event of death or incapacity, shall exercise your data principal rights.

To exercise any of these rights, contact our Data Protection and Grievance Desk at pravariq@gmail.com.