This policy applies to all users of the Poinu website, mobile applications, and services (collectively, the “Platform”).
1. Information We Collect
We may collect and process the following categories of personal data:
- Identity Data: Name, date of birth (if required), government-issued ID for verification
- Contact Data: Email address, phone number
- Account Data: Login credentials and account preferences
- Transaction Data: Ticket purchases, refunds, payment history
- Technical Data: IP address, browser type, device identifiers, operating system
- Usage Data: Pages viewed, actions taken, timestamps
- Payment Data: Processed securely via third-party payment gateways (we do not store card details)
2. Legal Basis for Processing (GDPR & India DPDP)
We process personal data based on the following lawful grounds:
- Consent – when you voluntarily provide data or opt into marketing
- Contractual necessity – to complete ticket purchases and provide services
- Legal obligation – compliance with tax, accounting, and regulatory laws
- Legitimate interest – fraud prevention, platform security, and service improvement
Under India’s DPDP Act, processing is done with explicit consent or for legitimate uses as permitted by law.
3. How We Use Your Information
Your personal data is used to:
- Create and manage user accounts
- Process ticket sales, payments, and refunds
- Communicate event updates and important notices
- Provide customer support
- Detect fraud and prevent unauthorized access
- Improve platform performance and user experience
- Meet legal and regulatory requirements
4. Data Sharing & Disclosure
We do not sell personal data. Information may be shared only with:
- Event organizers – for event management and attendee validation
- Payment processors – for secure transaction handling
- Service providers – hosting, analytics, customer support
- Government or legal authorities – when required by law
All third parties are contractually obligated to protect your data.
5. International Data Transfers
If personal data is transferred outside India or the European Economic Area (EEA), we ensure appropriate safeguards, including:
- Standard Contractual Clauses (SCCs)
- Adequate data protection frameworks
6. Data Retention
Personal data is retained only as long as necessary for:
- Service delivery
- Legal, tax, and regulatory compliance
- Dispute resolution and enforcement
After this period, data is securely deleted or anonymized.
7. Your Rights (GDPR & India DPDP)
You have the right to:
- Access your personal data
- Correct inaccurate or outdated information
- Request deletion of personal data
- Withdraw consent at any time
- Object to processing (GDPR)
- Nominate another person to exercise rights (India DPDP)
- File a complaint with a Data Protection Authority
Requests can be submitted through your account or by contacting customer support.
8. Cookies & Tracking Technologies
We use cookies and similar technologies for analytics, functionality, and personalization. Consent is obtained where required by law.
Users may manage cookie preferences through browser settings.
9. Data Security
We implement technical and organizational measures such as encryption, access controls, and secure infrastructure to protect personal data.
Despite best efforts, no system is entirely secure.
10. Children’s Data
Poinu does not knowingly collect personal data from individuals under the age of 13. Where required by law, parental consent is obtained.
11. Policy Updates
This Privacy Policy may be updated periodically. Changes will be posted on this page with a revised date.
12. Contact & Grievance Officer
For privacy-related concerns, data access requests, or grievances, please contact:
Bytevision Technology LLP (operating as Poinu)
Customer Support / Data Protection Contact
2nd Floor, Nongmeibung Old Checkon,
Imphal Municipal Council, Imphal East.
Manipur, 795005, India
WhatsApp: +91 84484 53797
Complaints will be addressed within the timeframes required by applicable law.