PRIVACY POLICY
> Last updated: 1 July 2026
This Privacy Policy explains how the Student Union Council (“SUC”) of Ramrao Adik Institute of Technology (“RAIT”), Navi Mumbai, collects, uses, stores, and protects your personal data when you use our event ticketing platform (“Platform”). This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (“DPDPA”) and the Information Technology Act, 2000.
// 1. DATA WE COLLECT
We collect the following categories of personal data:
> Full name (from Google, GitHub, or Microsoft OAuth)
> Email address (from Google, GitHub, or Microsoft OAuth)
> Phone number (provided by you during registration)
> Payment transaction IDs and order references (from Razorpay)
> Pass purchase history and event registrations
> We do NOT collect or store any raw payment data such as card numbers, CVV codes, UPI PINs, or bank account details. All payment processing is handled exclusively by Razorpay.
// 2. PURPOSE OF DATA COLLECTION
Your personal data is used solely for the following purposes:
> Event registration and pass delivery
> Payment processing and order verification
> Communication about events, schedule changes, or cancellations
> Entry verification at event venues
> Responding to support requests and grievances
We process your data based on your explicit consent (provided at the time of sign-in and purchase) and for the performance of a contract (your pass purchase), as permitted under the DPDPA, 2023.
// 3. DATA STORAGE & INFRASTRUCTURE
Your data is stored across the following secure infrastructure providers:
> Firebase — Authentication and session management
> Supabase — Primary application database (user profiles, orders, passes)
> Razorpay — Payment processing (card/UPI details remain with Razorpay only)
All services employ industry-standard encryption, access controls, and security certifications. Data is transmitted over HTTPS and stored in encrypted form.
// 4. DATA SHARING
We do NOT sell, rent, or trade your personal data to any third party.
Your data is shared only with the following service providers, strictly for operational purposes:
> Razorpay — For processing payments
> Firebase (Google, GitHub, Microsoft) — For authentication services
> Supabase — For database hosting
We may disclose data if required by law, court order, or government authority under applicable Indian regulations.
// 5. COOKIES
We use minimal cookies, limited to:
> Firebase authentication session cookie (essential for login functionality)
> We do NOT use tracking cookies, advertising cookies, or analytics cookies that profile user behaviour across websites.
// 6. YOUR RIGHTS
Under the Digital Personal Data Protection Act, 2023, you have the right to:
> Access the personal data we hold about you
> Request correction of inaccurate data
> Request erasure/deletion of your personal data
> Withdraw consent for data processing
> Lodge a grievance with the Data Protection Board of India
Self-Service Data Erasure (Real-Time)
We provide a self-service tool to permanently delete your data in real-time. You can trigger this at any time by navigating to your Profile page and clicking the Delete My Info button. This irreversibly purges your user profile, registrations, order logs, and access records from our active databases.
To exercise any other rights, contact us at contact@nmhorizon.in with your request. We will respond within 30 days.
// 7. DATA RETENTION
> Personal data is retained for a period of 1 year after the event for which the data was collected.
After the retention period, your personal data will be securely deleted or anonymised, unless retention is required by applicable law. Transaction records may be retained longer for accounting and legal compliance purposes.
// 8. SECURITY MEASURES
We implement the following security measures to protect your data:
> HTTPS encryption for all data in transit
> Encrypted storage at rest
> Server-side token verification for API access
> Role-based access controls for administrative functions
> Regular security reviews and updates
While we strive to protect your data, no system is 100% secure. We cannot guarantee absolute security but take reasonable and appropriate measures as required under the Information Technology Act, 2000.
// 9. CHILDREN’S PRIVACY
This Platform is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information promptly.
// 10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically. Continued use of the Platform after any changes constitutes acceptance of the updated policy.
// 11. GRIEVANCE OFFICER
In accordance with the Information Technology Act, 2000 and the DPDPA, 2023, the designated Grievance Officer for this Platform is:
> Name: Grievance Officer, SUC RAIT
> Email: contact@nmhorizon.in
> Address: Student Union Council, Ramrao Adik Institute of Technology, Nerul, Navi Mumbai, Maharashtra 400706, India
Grievances will be acknowledged within 48 hours and resolved within 30 days.
// 12. CONTACT
For any privacy-related questions or requests, contact us:
> Email: contact@nmhorizon.in
> Organisation: Student Union Council, RAIT
> Address: Ramrao Adik Institute of Technology, Nerul, Navi Mumbai, Maharashtra 400706, India