Privacy Policy
Last updated: 9 July 2026
1. Scope
This policy explains how INDIOWL ENTERTAINMENT PRIVATE LIMITED handles your personal data when you use indiowl.in, in line with India’s Digital Personal Data Protection Act, 2023 (DPDP).
2. What we collect
- Contact details you provide: name, email, and phone number.
- Account and authentication data, managed through Supabase.
- Booking and order details, including what you purchased and its status.
- Payment status only — your card, UPI, and bank details are handled by Razorpay and are not stored by us.
- Basic usage data and essential cookies needed to run the site.
3. Why we collect it
We use your data to provide bookings, services, and memberships; to process payments; to send transactional email (confirmations and updates); to provide customer support; and to keep the site secure and improve it.
4. Legal basis & consent
We process your data for the purposes above, relying on your consent and on the performance of the service you request, as applicable under the DPDP Act. You may withdraw consent where processing is based on it, subject to any legal obligations we have to retain records.
5. Who we share it with
We share data only with service providers strictly to run the service, and never sell your personal data:
- Razorpay — payment processing.
- Supabase — authentication and database.
- Resend — transactional email delivery.
- Vercel — website hosting.
6. Cookies
We use essential cookies to keep you logged in and to maintain your session. We do not run advertising trackers. Any analytics we use are minimal and used only to understand aggregate site usage.
7. Retention
We keep your data only as long as needed to provide the service and to meet legal, tax, and accounting obligations, after which it is deleted or anonymised.
8. Your rights
Under the DPDP Act you may request access to, correction of, or erasure of your personal data. To exercise these rights, email us at owl@indiowl.in.
9. Security
We apply reasonable technical and organisational safeguards to protect your data. Payments are handled by Razorpay, a PCI-DSS compliant payment processor.
10. Children
The service is not directed at, or intended for, anyone under the age of 18.
11. Changes
We may update this policy from time to time. Updates are posted here with a new “last updated” date.
12. Grievance & contact
For any privacy question or grievance, contact our grievance officer, Mohd Afroz:
See also our Contact page.