1. Scope and Regulatory Framework
This Privacy Notice sets out how Aurumize Transformation Technologies and Solutions Private Limited ("Aurumize", "we", "us", "our") collects, processes, stores, protects, and discloses personal data when you interact with the ActivSuite platform (https://activsuite.org), including ActivEvents, ActivMarket, ActivClub, ActivMenu, and associated administrative tools.
This policy is formulated in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Personal Data We Collect
We collect personal data that you provide directly to us or that is generated automatically when you use our platform:
• Identity & Contact Data: Name, mobile telephone number, email address, physical delivery address, organisation or club membership number.
• Transaction Data: Order details, ticketing selections, stall purchases, amounts paid, payment identifiers supplied by licensed Payment Providers (we do not store full credit/debit card numbers or CVV codes).
• Technical & Device Data: IP address, browser type and version, time zone setting, device identifiers, operating system, and page navigation history.
• Authentication Data: Session cookies, OTP verification records, encrypted passwords.
3. Lawful Grounds and Purposes of Processing
We process personal data for specified, explicit, and legitimate purposes:
• Delivering Platform Services: Enabling account registration, event pass ticketing, stall order fulfillment, club dining management, and delivery orchestration.
• Verification & Security: Validating identity via OTP/QR codes, preventing unauthorized access, bot activity, and fraudulent transactions.
• Customer Support & Redressal: Addressing service requests, inquiries, and processing consumer grievances within statutory turnaround times.
• Statutory Compliance: Complying with tax laws (GST), corporate accounting standards, and lawful directives from judicial or law enforcement authorities.
4. Independent Data Fiduciaries & Service Providers
ActivSuite acts as a technology platform. When you place an order with a Merchant, book a ticket with an Event Organiser, or dine at a Club, those independent entities process your data to fulfill your transaction.
Payments are processed directly by regulated Payment Aggregators/Payment Gateways. We do not pool or hold customer funds.
Deliveries may be fulfilled by independent logistics partners who receive only the necessary contact and address information required to complete dispatch.
5. Data Retention and Security
We implement technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or disclosure. Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or to satisfy statutory accounting, legal, and tax requirements (ordinarily up to 7 years for commercial transactional records).
6. Data Principal Rights under DPDP Act 2023
As a Data Principal under Indian law, you have the right to:
• Access: Request a summary of personal data processed by us and the processing activities undertaken.
• Correction & Erasure: Request correction of inaccurate or misleading data and erasure of data no longer required for lawful purposes.
• Grievance Redressal: File grievances regarding data processing with our Data Grievance Officer.
• Nominate: Nominate an individual to exercise rights on your behalf in the event of death or incapacity.
7. Grievance Officer Contact
Grievance Officer: Director / Authorised Compliance Officer
Aurumize Transformation Technologies and Solutions Private Limited
Registered Office: Flat 905, Swastik 51/D Gariahat Road, Kolkata, West Bengal 700019, India
Email: info@activsuite.org | Phone: +91-9123089553
Target Grievance TAT: Within 48 hours acknowledging receipt; resolution within statutory timeframes.