PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy describes how PUJA TENT AGENCY (Legal Name / Proprietor: KUMARI PUJA VISHWAKARMA, Proprietorship, GSTIN: 20ARLPV7298K1ZZ), presenting RAAS UTSAV 2026 under event brand EVENT POINT, collects, uses, and protects information when you use our website or submit a pass reservation.

2. INFORMATION WE COLLECT

We collect only the information necessary to process your pass reservation and support services:

• Contact Details: Primary attendee name, 10-digit mobile number, and email address.
• Location: City of residence (e.g., Ranchi).
• Pass Details: Selected pass tier, booking amount, and generated Request ID.
• Session & Lookup Data: HMAC-signed session cookies that allow reservation retrieval without a password once you verify your booking with your email address and mobile number.
• Payment Identifiers: Gateway order identifiers, payment attempt IDs, and transaction statuses (such as NOT_STARTED, PENDING, PAID, FAILED).
• Pay Later Booking State: Whether a booking is awaiting payment, and its fixed 24-hour payment deadline, so the hold can be released automatically if payment is not completed.
• Entry & Check-in Record: For admitted passes, the entry timestamp and the organiser account that confirmed entry, recorded with the booking for venue audit and duplicate-entry prevention.

3. PAYMENT PROCESSING DISCLOSURES

Payment identifiers and transaction statuses returned by the payment processor are retained to verify booking fulfillment and facilitate duplicate payment reconciliation.

4. PURPOSE OF USE

Information collected is used for the following operational purposes:

5. DATA SHARING & DISCLOSURE

We do not sell, rent, or trade your personal information. Information is shared only with:

• Payment Processors: Necessary transaction amounts and booking identifiers to facilitate payment processing.
• Operational Infrastructure: Secure database hosting infrastructure and authorized Event Point coordination personnel.
• Gate Validation: Authenticated organiser accounts can look up a booking by its QR code or Booking ID during admission. The gate view shows the booking reference, attendee name, pass type and booking/entry status only — not full contact details or payment information.
• Legal Authorities: Where required under applicable law or valid legal process.

6. TECHNICAL SECURITY SAFEGUARDS

We implement reasonable technical measures to protect attendee data:

• HTTPS/TLS encryption for data transmission between the browser and our servers.
• Cryptographic one-way SHA-256 hashing for session signatures. Passwords are never stored, and no raw recovery credentials are kept in the database.
• HMAC-SHA256 signed HTTP-only cookies for lookup session authorization.

7. PRIVACY QUESTIONS & CONTACT

For questions regarding your reservation details or data privacy, please contact: