Privacy Policy
This Privacy Policy is drafted under the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023). It explains what data we collect, why, how we use it, who can see it, and what rights you have. Please read it carefully.
Campusmeet as Data Fiduciary
Under the DPDP Act, 2023, Campusmeet Technologies Private Limited is the Data Fiduciary — the entity that determines how your personal data is collected and used. We are legally responsible for how your data is handled, including by any third-party services we use.
Data Fiduciary contact: campusmeetoffice@gmail.com
Flat No. 107, Aditya Apartment, Bhasta Flaiya, DNH, Silvassa — 396230
Third-Party Services We Use
To operate the Platform, we use the following third-party services. Each service handles data in accordance with its own published privacy policy. Campusmeet uses these services under their standard terms and does not enter into separate bilateral data processing agreements with them.
- Easebuzz Payment gateway. Processes your payment transaction. Campusmeet never sees your card or bank credentials. Governed by Easebuzz's own privacy policy at easebuzz.in.
- Google Analytics Website analytics. Receives anonymised usage data — pages visited, session duration, device type, geographic region. No personally identifiable student data is sent to Google Analytics. Governed by Google's privacy policy at policies.google.com/privacy.
- Email provider Used to send booking confirmations and ticket details to your registered email address.
- WhatsApp Business Used to send ticket confirmations to your phone number where you have provided it. Governed by WhatsApp's privacy policy at whatsapp.com/legal.
- Cloud hosting Microsoft Azure, AWS, or Hostinger — used to host and operate the Platform. Platform data is stored in encrypted form on these servers.
Campusmeet limits the data sent to each third-party service to the minimum necessary for the described purpose. We do not send personally identifiable student data to analytics or hosting services.
What Personal Data We Collect
We collect only what is necessary for the Platform to function.
From students / ticket buyers
| Data | Why we collect it |
|---|---|
| Full name | Ticket issuance and entry verification |
| Email address | Booking confirmation and ticket delivery |
| Mobile number | OTP login, WhatsApp ticket delivery, entry verification |
| College / institution name | Event registration and attendee records |
| Event type attended | Ticket generation and organiser records |
| Transaction history | Booking records and refund processing |
What we do NOT collect
- Government identification numbers (Aadhaar, PAN, Voter ID)
- Card numbers, CVV, or banking credentials — handled entirely by Easebuzz
- Precise real-time GPS location
- Biometric data of any kind
- Data from your social media profiles
How We Collect Your Data
Your data is collected when you create an account, purchase a ticket, or contact our support team. We do not collect data from social media platforms, data brokers, or any third-party source.
Consent
Under Section 6(1) of the DPDP Act, consent must be free, specific, informed, unconditional, and unambiguous with a clear affirmative action.
When you register on Campusmeet, you will be shown a consent notice explaining what data is collected and why. You must actively check a clearly labelled consent box — no pre-ticked boxes, no implied consent. The notice is available in English and Indian languages listed in the Eighth Schedule to the Constitution.
At ticket purchase, you will be reminded that your name, email, and phone number will be shared with the event organiser for the sole purpose of confirming your registration at that specific event.
Withdrawal of consent: Under Section 6(4) of the DPDP Act, you may withdraw your consent at any time from your account settings. Withdrawal stops future processing but does not affect lawful processing already completed. Withdrawing consent will deactivate your account and remove your booking history. Transaction records required by law will be retained as described in Section 9.
How We Use Your Data
We use your personal data only for the following purposes:
- Issuing and delivering your QR-coded ticket
- Verifying your identity at event entry
- Sending booking confirmations and event updates via email or WhatsApp
- Maintaining your transaction history
- Processing refunds where applicable
- Improving Platform functionality through anonymised, aggregated analytics via Google Analytics
What we do NOT do with your data
- We do not sell your personal data to any third party
- We do not share your personal data with any brand, advertiser, or sponsor
- We do not use your data to build profiles that are sold or licensed to external entities
- We do not transfer your personal data outside India
Sharing Data with Event Organisers
When you purchase a ticket to an event, the organiser of that event receives your name, email address, and phone number — solely for the purpose of confirming your registration and managing attendance at their event.
This sharing is:
- Limited to the specific event you registered for. An organiser of Event A does not receive your data in relation to Event B.
- Restricted by contract — organisers are prohibited from using your data for any purpose other than the specific event, and from sharing it with any third party.
- Disclosed to you at the point of purchase before you complete payment.
Organisers do not receive your transaction history, data from other events, or any behavioural data generated on the Platform.
Future Brand Features
Campusmeet intends to introduce contextual brand content inside the ticket booking journey in the future — for example, a relevant course offer shown to a student booking a technology workshop, or a lifestyle brand offer shown to a student buying a concert ticket.
This feature is not currently live.
When it is introduced:
- No student personal data will be shared with any brand
- Brands will not receive your name, phone number, email, or any identifying information
- Campusmeet's own system will match event category to brand category internally — the brand sees only aggregate engagement metrics
- You will be given the ability to opt out before the feature is active for your account
- A separate, specific consent will be required — it will not be bundled with general registration consent
This Privacy Policy will be updated before any such feature is activated, and you will be notified.
Data Retention
We retain your personal data only for as long as necessary for the stated purpose.
| Data type | Retention period | Reason |
|---|---|---|
| Account data | Duration of account + 1 year after deletion | Platform functionality |
| Transaction records | 7 years | Financial record-keeping obligations under Indian law |
| Event check-in logs | 2 years | Organiser dispute resolution |
| Google Analytics data | 14 months (anonymised) | Platform improvement |
| Ticket delivery communications | 1 year from event date | Support and refund resolution |
After the applicable retention period, your data is permanently deleted or irreversibly anonymised.
Data Security
We implement the following security measures:
- Encrypted transmission — all data transferred between your device and our servers uses HTTPS/TLS encryption
- Encrypted storage — personal data is stored in encrypted form on cloud infrastructure
- Access controls — internal access to personal data is restricted to authorised personnel on a need-to-know basis
- QR code security — each ticket QR code is cryptographically unique and cannot be duplicated or reused
In the event of a personal data breach, we will notify the Data Protection Board of India and each affected user in accordance with Section 8(6) of the DPDP Act, within the prescribed timelines.
Your Rights
Under Chapter III of the DPDP Act, 2023, you have the following rights:
- Right to access information (Section 11) Request a summary of the personal data we hold about you and how it has been used.
- Right to correction and erasure (Section 12) Request correction of inaccurate data, or erasure of your personal data. We will comply unless retention is required by law.
- Right to withdraw consent (Section 6(4)) Withdraw your consent at any time from your account settings. Withdrawal stops future processing but does not affect past lawful processing.
- Right to grievance redressal (Section 13) Raise a complaint about our data handling and have it addressed within 30 days.
- Right to nominate (Section 14) Nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any right, email campusmeetoffice@gmail.com with the subject line: Data Rights Request — [Your Name] — [Type of Request]. We will acknowledge within 48 hours and resolve within 30 days.
Changes to This Privacy Policy
We will notify you of material changes to this Privacy Policy via email and a prominent notice on the Platform at least 7 days before the change takes effect. Your continued use of the Platform after that date constitutes acceptance. If you do not accept a material change, you may delete your account before it takes effect.