Privacy Policy

1. Introduction

We respect your privacy and are committed to protecting personal data in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, as applicable.

By using our website (krushnaitrampolinepark.in), booking tickets, contacting us or visiting our park, you acknowledge that you have read and understood this Privacy Policy. When you browse our public website, our consent banner records your cookie preferences; continuing after that notice constitutes agreement to this Policy and our Terms & Conditions for general site use.

When you call, WhatsApp, or submit our online enquiry form for parties or events, we collect the contact details you provide at that point to respond to your request (point-of-collection notice).

2. Data Controller

The data controller responsible for your personal information is:

• Legal entity: PANCHKRUSHNAI LLP
• Trading name: Krushnai Trampoline Park
• GSTIN: 27ABGFP6272Q1ZE
• Address: Sonawane Marg, opp. Hotel Krushnai, Krushnai Nagar, Indira Nagar Pathardi Annex, Nashik, Maharashtra 422009, India
• Email: ktp050126@gmail.com (general enquiries and DPDP grievances — use subject DPDP Grievance for privacy complaints)
• Phone: +91 94790 07900

3. Waiver & Safety Data

When you book online or register on-site, we collect participant details (name, age, city, contact information) and your agreement to our Participant Agreement & Waiver, including a digital signature (typed full legal name). For bookings with multiple guests, we collect each participant’s name and age. This information is used for safety, legal compliance, incident response and check-in. See our full waiver text and Terms & Conditions.

4. Information We Collect

4.1 Information you provide directly

• Name, phone number, email address, age, city and participant details for all guests on a booking
• Booking details: visit date, session duration, ticket type, number of adults and children
• Payment-related information processed through our payment gateway (we do not store full card numbers on our servers)
• Digital waiver agreement, timestamp, waiver version, and digital signature (typed name)
• Optional marketing opt-in when booking online
• Communications via email or phone when you contact us

4.2 Information collected automatically

• IP address for abuse prevention and rate limiting on our booking and privacy APIs
• Standard web server and hosting logs (e.g. browser type, request time) maintained by our hosting provider (Vercel)
• Consent preferences stored in your browser when you use our cookie banner (see Cookie Policy)

We do not currently use Google Analytics, Meta Pixel, or similar advertising trackers on this website. Typography and images are self-hosted on our domain (no Google Fonts or external image CDNs on public pages).

4.3 Information about minors

Where guests under 18 years participate, we may collect information about the child and parent/guardian contact details as required for safety waivers, softplay access (below 5 years) and emergency contact purposes. Parents or legal guardians must provide consent for minors.

5. How We Use Your Information

We use personal information for the following purposes:

• Processing bookings, payments and issuing tickets or confirmations
• Operating trampoline sessions, parties, family packages and special events
• Safety management, incident reporting and compliance with waivers
• Customer support and booking enquiries by phone or email
• Displaying your entry code on screen after online payment (we do not send booking confirmation SMS or email unless you contact us separately)
• Marketing communications where you have opted in when booking (you may opt out at any time)
• Improving our website, services and guest experience
• Complying with legal, tax (GST) and regulatory obligations
• Preventing fraud, misuse and ensuring venue security

6. Payment Processing

Online payments are processed through Razorpay Software Private Limited and other authorised payment partners. When you make a payment:

• Payment card, UPI, net banking and wallet details are collected and processed directly by Razorpay in accordance with their Privacy Policy and PCI-DSS standards
• We receive transaction confirmations, payment status, partial card identifiers and billing metadata necessary to fulfil your booking
• We do not store your complete card number, CVV or UPI PIN on our systems

By completing a payment, you also agree to Razorpay's terms applicable to their payment services.

7. Cookies, Consent & Analytics

See our standalone Cookie Policy for full details. In summary:

• A consent banner (CMP) on first visit lets you accept essential storage only or all optional analytics (analytics are off today).
• The staff admin panel stores a short-lived session token in your browser session only.
• Web fonts and images are self-hosted on our domain.
• If we enable analytics in future, we will load them only after consent and update our Content Security Policy accordingly.

You can control cookies through your browser settings or by clearing site data. Disabling certain storage may affect website functionality.

8. Sharing of Information

We do not sell your personal data. We may share information with:

• Payment processors: Razorpay Software Private Limited and banking partners for transaction processing (Razorpay may use sub-processors, including outside India — see their privacy policy)
• Cloud storage & hosting: Vercel Inc. (website hosting) and Vercel Blob (private encrypted storage of booking and waiver records)
• Communication platforms: When you contact us via WhatsApp (Meta Platforms), email (e.g. ktp050126@gmail.com), or phone, those providers process data according to their policies. Our website does not send automated booking or enquiry emails.
• Website management: Praesidio Care (website development and maintenance) may have access to hosting systems under our instructions
• Professional advisers: Lawyers, accountants and insurers where necessary
• Authorities: Law enforcement, courts or regulators when required by law
• Business transfers: In connection with merger, acquisition or asset sale, with appropriate safeguards

All third-party processors are required to handle data securely and only for specified purposes. A summary processor register is maintained internally (see repository ops docs DPA_REGISTER.md for staff).

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, including:

• Booking and payment records: as required under GST, tax and accounting laws (typically up to 8 years)
• Waiver records: for the period required to manage safety and legal claims
• Marketing data: until you unsubscribe or withdraw consent
• Support communications: up to 3 years unless a longer period is required for disputes
• Enquiry and nomination forms: up to 3 years after last contact

Unpaid pending bookings are automatically deleted after 24 hours (configurable). Paid records may be automatically purged after the statutory retention period (default 8 years) unless a deletion request or legal hold applies.

10. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include secure hosting (HTTPS), admin IP allowlisting in production, access controls and reputable payment processing. Content Security Policy restricts third-party scripts to Razorpay checkout only (analytics domains are not pre-authorised). No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

11. Personal Data Breach

If a personal data breach is likely to affect your rights, we will investigate promptly, take containment steps, and notify you and the Data Protection Board of India as required under applicable law without undue delay. Our internal breach response procedure is documented for staff. Contact our Grievance Officer immediately if you suspect unauthorised access to your booking data.

12. Children's Privacy

Our park welcomes guests of all ages under parental supervision. We collect limited information about children (such as name and age) only as necessary for safety waivers, softplay access (below 5 years) and session management. When booking online, a parent or legal guardian aged 18 or older must complete the booking, acknowledge this Privacy Policy, and—where minors are included—confirm guardian consent separately.

Photo and video recording for promotional use is optional when booking online. Parents or guardians are responsible for providing accurate information and supervising minors at all times. We do not knowingly market to children under 13 without parental consent.

See our dedicated Children's Privacy Notice for full details.

13. Your Rights

Subject to applicable law, you may have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data — submit in-app via our Privacy Request portal (each correction is a separate consent record)
• Request deletion of data where no longer required (subject to legal retention). Unpaid bookings may be deleted immediately; paid bookings require staff review after your request is recorded
• Withdraw consent for marketing communications at krushnaitrampolinepark.in/marketing-opt-out or by contacting us
• Nominate another individual to exercise your rights in the event of death or incapacity at krushnaitrampolinepark.in/nominate-representative
• Lodge a grievance with us or with relevant authorities

To exercise these rights, use our Privacy Request portal, or contact our Grievance Officer at ktp050126@gmail.com or +91 94790 07900 (subject line: Privacy Request). On this website, identity is verified using your booking reference and mobile number — we do not send automated verification emails.

14. Cross-Border Data Processing

Your personal data is primarily collected in India. Some of our technology providers may process or store data outside India, including in the United States or the European Union. This includes Vercel Inc. (website hosting and private cloud storage of booking/waiver records). Payment data is processed by Razorpay in accordance with Indian law; Razorpay may use sub-processors abroad. We maintain a Transfer Impact Assessment and use contractual safeguards with processors. We will notify you of material changes to cross-border processing via this Policy and, where required, direct communication. See TRANSFER_IMPACT_ASSESSMENT.md (staff ops documentation).

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. Material changes will be posted on this page. Continued use of our services after changes constitutes acceptance of the updated policy.

16. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer for complaints relating to your personal data:

• Grievance Officer: Anant Sonawane
• Entity: PANCHKRUSHNAI LLP (Krushnai Trampoline Park)
• Email: ktp050126@gmail.com (subject: DPDP Grievance)
• Phone: +91 94790 07900
• Address: Sonawane Marg, opp. Hotel Krushnai, Krushnai Nagar, Indira Nagar Pathardi Annex, Nashik, Maharashtra 422009, India

We will acknowledge grievances within 48 hours and endeavour to resolve them within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India as provided under applicable law.

17. Contact Us

For privacy-related questions, requests or complaints:

• Email: ktp050126@gmail.com
• Phone: +91 94790 07900
• Address: Sonawane Marg, opp. Hotel Krushnai, Krushnai Nagar, Indira Nagar Pathardi Annex, Nashik, Maharashtra 422009, India