Privacy policy

Venue4U is operated by CodeFacts IT Solutions Pvt Ltd, Hyderabad, Telangana, India. For the purpose of the Digital Personal Data Protection Act 2023 we are the Data Fiduciary for the personal data described here.

Data Protection Officer: privacy@venue4u.in. You can also reach us through the contact form or on +91 90000 00000.

We only collect what we need to answer you and to run the service:

• When you send an enquiry: your name, mobile number (verified by OTP), optional email, and the event details you give us — occasion, date, city, area, guest count and budget.
• When you use the contact form: your name, mobile number, optional email, the topic you select and your message.
• When you list a venue: your name and contact details, and the venue’s name, type, location, capacity and pricing information.
• Automatically: the pages you view, the searches you run, the venue you came from, approximate location from your IP address, device and browser type, and any campaign tags in the link you arrived on.

We do not knowingly collect data from children under 18, and we do not ask for financial account details, government identifiers or any special category data.

• To answer your enquiry — shortlisting venues, checking availability and sending you quotations. Basis: the consent you give when you verify your number and submit the form.
• To verify that enquiries are genuine — OTP verification and rate limiting protect venues from spam. Basis: consent and our legitimate interest in a trustworthy service.
• To improve the site — understanding which searches and venues are popular. Basis: consent, using aggregated data wherever possible.
• To meet legal and accounting obligations — invoices and tax records. Basis: legal obligation.

We do not use your data for automated decision-making that produces legal effects, and we do not use it to train machine-learning models.

• The venues you enquire about. To get you an answer, we share your name, contact number and event requirement with the venue or venues concerned.
• Our service providers. SMS and email delivery partners, who process your data only on our instructions and only to deliver our messages.
• Authorities, where we are required to by law or a valid court order.

We do not sell your personal data and we do not share it with advertisers or data brokers.

Your data is stored on servers located in India. Access is restricted to team members who need it for their role, controlled by named accounts, roles and permissions, and every change to a record is written to an audit log.

Traffic to this site is encrypted in transit. Passwords are stored only as salted hashes and contact numbers are masked from staff who do not need to see them.

• Enquiry and lead records: up to 3 years from your last contact with us.
• Contact-form messages: up to 2 years.
• Venue listing requests: for as long as the venue is listed, and 2 years after it is removed.
• Invoices and accounting records: 8 years, as required by Indian tax law.
• Website analytics: 13 months.

We use a small number of cookies and similar browser storage: strictly necessary ones that keep the site working and remember your session, and analytics that tell us how the site is used. We do not run third-party advertising or cross-site tracking cookies.

You can clear or block cookies in your browser; the site will still work, but your shortlist and preferences will not be remembered.

Under the DPDP Act 2023 you may:

• Ask for a summary of the personal data we hold about you and how we have used it.
• Ask us to correct or complete anything that is inaccurate.
• Ask us to erase your data where we no longer need it for the purpose you gave it for.
• Withdraw your consent at any time — future processing stops, though it does not undo what was already done lawfully.
• Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
• Raise a grievance with us and, if unresolved, with the Data Protection Board of India.

Write to privacy@venue4u.in from the email or with the mobile number you gave us. We respond within 30 days, and usually much sooner.

If a personal data breach affects you, we will notify you and the Data Protection Board of India without undue delay, describing what happened, what data was involved and what we are doing about it.

We will update this page when our practices change, and the “last updated” date above will tell you when. If a change materially affects how we use data you have already given us, we will ask for your consent again.