Privacy Policy

1. What we collect

• Visitors who send an enquiry: your name, phone number, email (optional), event date, number of guests and your message.
• Venue owners and their staff: name, email, phone, password (stored only as a secure hash), the venue's details and photos, the calendar, and records of plan payments.
• Guests of a venue entered by the venue in its own booking and accounts system are processed on the venue's behalf; the venue decides what is collected.
• Technical data: security logs of sign-ins and changes. For enquiries we keep only a one-way scrambled form of your IP address to stop spam; we do not store the address itself.

We use only the cookies needed to keep you signed in and to protect forms. We do not use advertising or tracking cookies.

2. Why we use it

• To pass your enquiry to the venue you chose, so they can contact you.
• To run venue accounts: sign-in, listings, calendars, payments and receipts.
• To send service emails (verification, password reset, enquiry alerts, payment receipts and renewal reminders).
• To keep the service secure, prevent abuse and meet legal and tax obligations.

By sending an enquiry you consent to us sharing those details with that venue for that purpose. We never sell personal data.

3. Who we share it with

• The venue you send an enquiry to.
• Service providers that help us run the service, under contract and only for that purpose: hosting, email delivery, and the payment gateway when online payments are used.
• Authorities, where the law requires it.

4. How long we keep it

• Enquiries: for as long as the venue's account is active, then up to 12 months.
• Owner accounts: until the account is closed, then up to 12 months.
• Payment and invoice records: as long as tax law requires (currently up to 8 years).

5. How we protect it

Data is encrypted in transit, passwords are hashed, sensitive identity numbers are encrypted, access is limited by role, and every change is logged. No system is perfectly secure; if a breach affects you, we will inform you and the authorities as the law requires.

6. Your rights

You can ask us to:

• tell you what personal data we hold about you and how it is used;
• correct or update it;
• erase it, unless we must keep it by law;
• withdraw consent (this does not affect what was done before);
• nominate someone to exercise these rights on your behalf.

For an enquiry already sent to a venue, you can also contact that venue directly.

7. Grievance Officer

[Grievance Officer name], Grievance Officer — [venues@grostage.com]. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

8. Children

The service is meant for adults. We do not knowingly collect data from children under 18.

9. Changes

We will post changes on this page and update the date above. Significant changes will be emailed to account holders.

10. Contact