Privacy Policy

1.Introduction

Mehndi Wala Arts Pvt Ltd ("Company", "Mehndi Wala", "we", "us", or "our") respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains how we collect, receive, use, disclose, retain, protect and otherwise process personal data relating to Customers, Artists, website visitors, app users and other individuals who access or use the Mehndi Wala website, mobile applications and related services (collectively, the "Platform").

This Privacy Policy explains:

what personal data we may collect or otherwise process;
how and from where personal data may be collected;
why we process personal data;
how personal data may be used for Customer and Artist accounts;
how Artist KYC and verification information is handled;
how we process enquiry, booking, payment, invoice and service information;
how Platform Chat and other Platform-supported communications are handled;
how Artist profiles, portfolios, reviews and other User-generated Content are processed;
how location and technical information may be processed;
how cookies and similar technologies may be used;
how AI-assisted features, including the Mehndi Wala AI chatbot, may process information;
when and with whom personal data may be shared;
how third-party service providers may process personal data;
how personal data may be retained, deleted and protected;
the privacy rights and choices available under applicable law; and
how you may contact us or raise a privacy-related grievance.

This Privacy Policy should be read together with the applicable Terms and Conditions, Customer Terms, Artist Terms, Booking Policy, Cancellation and Refund Policy, Cookie Policy and other applicable Platform policies or notices.

The Company processes personal data in accordance with applicable law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), applicable rules and notifications when they apply to the relevant processing activity, and other applicable laws and regulations.

Where applicable law requires consent for a particular processing activity, we will obtain consent in the manner required by law. Where processing is otherwise permitted or required by applicable law, the Company may process personal data on the applicable lawful basis without relying solely on consent.

2.Who We Are

Data Fiduciary / Responsible Entity

Mehndi Wala Arts Pvt Ltd

Registered Office: C-125, Pandav Nagar, New Delhi – 110092, India
Website: mehndiwalaa.com
Privacy Email: privacy@mehndiwalaa.com
Support Phone: 8700728172 / 8630159154

For applicable data-protection purposes, the Company may determine the purposes and means of processing personal data collected through the Platform and may therefore act as the relevant Data Fiduciary where applicable.

Third-party service providers may process personal data on behalf of the Company as data processors or service providers, or may process certain information in their own capacity, depending on the nature of their services and applicable law.

3.Scope of This Privacy Policy

This Privacy Policy applies to personal data collected or processed through or in connection with:

the Mehndi Wala website;
Android and iOS applications;
Customer Accounts;
Artist Accounts;
Artist profiles and storefronts;
Artist onboarding and KYC processes;
search, discovery and comparison features;
enquiries and Platform Chat;
booking and scheduling processes;
invoices and payment records;
customer support and dispute resolution;
reviews and ratings;
portfolios, photographs, videos and other User-generated Content;
AI-assisted features and chatbot interactions, where enabled;
cookies, analytics and similar technologies; and
other services and features operated by Mehndi Wala.

This Policy applies to Customers, Artists, website visitors, app users and other individuals whose personal data is processed by the Company in connection with the Platform.

4.Customer and Artist Accounts

Mehndi Wala may provide separate account experiences for Customers and Artists.

4.1 Customer Accounts

A Customer may create and use a Customer Account to access features such as:

favourite Artists;
favourite designs;
Artist comparison;
enquiries;
bookings;
invoices;
booking history;
transaction information;
support requests; and
other Customer Dashboard features made available by the Platform.

A Customer may be able to browse publicly available Artist information without creating an account. Certain account, enquiry, booking, payment or other features may require authentication.

4.2 Artist Accounts

Artists may create a separate Artist Account and complete the applicable onboarding and verification process before their Artist profile or storefront becomes publicly available, where required.

Artist information may include:

name or business/studio name;
profile photograph;
experience;
services;
Mehndi styles or specialities;
Mehndi and other service-product information supplied by the Artist;
pricing or starting prices;
service areas;
portfolio photographs, albums or videos;
languages;
business information;
reviews and ratings;
availability information, where enabled; and
applicable verification status or badges.

Public Artist information is different from private KYC and verification information. KYC documents and private verification information are not intended to be publicly displayed through the Artist profile.

5.Personal Data We Collect or Process

The personal data processed by Mehndi Wala depends on how you use the Platform, which role you have, which features you access and the information you choose or are required to provide.

We aim to collect and process information that is reasonably necessary for the relevant Platform purpose.

5.1 Identity and Contact Information

Depending on the relevant feature, we may process:

full name;
mobile number;
WhatsApp number, where provided or used;
email address;
gender, where voluntarily provided or required for a particular feature;
date of birth, where required and lawfully collected;
profile photograph;
city;
locality;
address or service address;
event or venue location;
communication preferences;
account identifiers; and
authentication and OTP-related records.

Where mobile-number authentication is used, OTPs may be used to authenticate your account.

We will not ask you to disclose an OTP, UPI PIN, password, CVV, card PIN or similar confidential authentication credential through ordinary support communications.

5.2 Artist Professional and Business Information

For Artists, we may process information relating to:

professional name;
business or studio name;
experience;
services;
Mehndi styles and specialities;
service areas;
pricing or starting prices;
portfolio information;
photographs and videos;
languages;
business information;
service policies;
product and Mehndi information;
reviews and ratings;
verification status; and
other information supplied for Artist discovery, comparison, enquiry or booking.

5.3 Booking and Event Information

We may process information relating to a Customer's requested service, including:

event date;
event time;
event or venue location;
city or locality;
occasion or function;
bridal or non-bridal requirement;
estimated number of people;
design preferences;
service requirements;
budget information, where provided;
selected or contacted Artist;
quotation or price;
advance amount;
balance amount;
travel or outstation charges;
cancellation or rescheduling information;
Booking ID;
invoice information; and
transaction information.

5.4 Communication Information

Where Platform-controlled communication functionality is used, we may process:

text messages;
voice messages, where supported;
call metadata, where applicable;
attachments;
photographs;
enquiry details;
Booking-related communications;
support communications; and
technical information associated with communications.

5.5 Reviews and User-generated Content

We may process information contained in:

reviews;
ratings;
comments;
photographs;
videos;
questions;
feedback;
portfolio material;
support submissions; and
other User-generated Content.

5.6 Payment and Transaction Information

We may process information relating to:

Booking payments;
advance payments;
final payments;
refunds;
payouts;
payment status;
payment method;
transaction references;
invoices;
Booking IDs;
wallet or account balances, where applicable;
coupon or voucher usage;
cashback or referral records, where applicable;
rewards or promotional programme records, where applicable; and
cancellation or refund records.

Where payment information is handled directly by a payment service provider, the Company does not intend to store full card numbers, CVV or card-expiry information unless its payment architecture expressly requires otherwise and such storage is lawful.

Payment providers may independently process certain payment information under their own terms and privacy policies.

5.7 Technical and Usage Information

We may automatically collect or receive information such as:

IP address;
device type;
operating system;
browser type and version;
application version;
network information;
device identifiers;
session identifiers;
crash and diagnostic information;
pages or screens viewed;
features used;
approximate usage times;
referral information;
click and interaction events; and
other technical information necessary to operate, secure and improve the Platform.

Usage information may include:

search activity;
Artist profile views;
favourites;
comparison activity;
enquiry submissions;
Booking actions;
payment-page activity;
review submissions; and
other interactions with Platform features.

6.Artist KYC and Verification Information

Artists may be required to complete identity verification and KYC before becoming eligible for certain Platform features or public listing.

Depending on the Artist's circumstances, applicable requirements and the verification process, KYC information may include:

Aadhaar-related information or documents, where lawfully required and collected;
PAN information or documents, where applicable;
other identity documents;
selfie or live-selfie verification information;
bank account information;
account-holder name;
IFSC information;
GST or business-registration information, where applicable; and
other information reasonably required for identity verification, payment processing, fraud prevention, legal compliance or regulatory purposes.

The exact information requested may depend on the Artist's account type, applicable legal requirements, transaction circumstances and verification process.

6.1 KYC Does Not Mean Quality Certification

An Artist's KYC or "Verified" status indicates that the applicable identity or verification process has been completed by or through the Company.

It does not, by itself, guarantee:

artistic skill;
Mehndi quality;
hygiene;
punctuality;
availability;
pricing;
product quality;
ingredients;
service outcome;
customer satisfaction; or
future performance.

The Company does not represent that KYC is a certification of an Artist's professional skill or service quality.

7.Artist Services, Mehndi Products and Business Information

Artists may provide information about the services they offer and the Mehndi or other service products they use or provide.

Such information may include, where supplied by the Artist:

service descriptions;
Mehndi types or products;
product and service information;
design styles;
bridal or non-bridal services;
guest Mehndi services;
service packages;
prices or starting prices;
travel or outstation charges;
service areas;
portfolio photographs;
videos;
business information;
experience;
service policies and conditions; and
other information relevant to Customers considering a service.

The Company may collect, process, organise, display, compare and otherwise use such information to operate the marketplace and provide discovery, comparison, enquiry and booking functionality.

Information about Mehndi or service products is generally supplied by the relevant Artist. Unless expressly stated otherwise, the Company does not represent that every Artist-provided product description, ingredient description or service claim has been independently tested or verified by Mehndi Wala.

Artists are responsible for ensuring that information they submit is accurate, lawful, reasonably current where applicable, and does not infringe another person's privacy, intellectual-property rights or other legal rights.

8.Enquiries, Bookings and Service Information

When you submit an enquiry or make a Booking, we may process information including:

Customer name;
contact details;
event date;
event time;
event location;
city or locality;
occasion or function;
bridal or non-bridal requirement;
estimated number of people;
design preferences;
service requirements;
budget information, where provided;
Artist selected or contacted;
quotation or price;
advance amount;
balance amount;
travel or outstation charges;
cancellation or rescheduling information;
Booking ID;
invoice information;
transaction information; and
other information reasonably necessary to administer the relevant enquiry or Booking.

Some information may need to be shared between the Customer and Artist to enable the requested service.

9.Platform Chat, Calls and Other Communications

The Platform may provide enquiry, chat, messaging, calling, WhatsApp or other communication functionality, depending on the features available for a particular account, Artist or Booking.

Where communications occur through Platform-controlled systems, we may process:

text messages;
voice messages, where supported;
call metadata such as date, time and duration, where applicable;
attachments and photographs submitted through the Platform;
enquiry details;
Booking-related communications;
support communications; and
technical information associated with communications.

Platform communications may be processed for:

facilitating Customer-Artist communication;
Booking administration;
customer support;
dispute resolution;
fraud and abuse prevention;
security;
compliance;
service improvement; and
maintaining appropriate business records.

We do not represent that communications occurring entirely outside the Platform, including private conversations on third-party services, are visible to or stored by Mehndi Wala.

For important Booking-related discussions, Customers and Artists are encouraged to use Platform-supported communication channels where available. Off-platform communications may not be available to the Company for support or dispute review.

10.Public Artist Profiles, Portfolios and User-Generated Content

Artists may voluntarily submit photographs, videos, portfolio images, business descriptions, service information and other content for display on the Platform.

Customers may submit:

reviews;
ratings;
photographs;
comments;
feedback;
questions;
support information; and
other User-generated Content.

Depending on the relevant feature, information intentionally published publicly may become visible to other Platform users and may be accessible through search engines and other internet services.

Users should not upload another person's personal information, photograph, identity document or other identifiable content unless they have the necessary permission or other lawful basis to do so.

The Company may moderate, restrict, disable or remove User-generated Content where reasonably necessary to address:

unlawful content;
fraud;
impersonation;
spam;
abuse;
harassment;
privacy violations;
intellectual-property complaints;
misleading information;
security risks; or
violations of applicable Platform policies.

11.Reviews and Ratings

Mehndi Wala may display Customer reviews and ratings relating to Artists or services.

Review-related information may include:

rating;
written review;
review date;
photographs, where submitted;
reviewer information;
applicable verification status; and
relevant Booking information where required for verification or moderation.

A "Verified" review or reviewer status, where displayed, refers to the verification process used by the Platform and does not mean that every statement contained in a review has been independently verified.

Reviews represent the individual experience or opinion of the reviewer and do not constitute a guarantee of future service quality.

The Company may retain review information for as long as reasonably necessary for Platform integrity, historical records, dispute handling, fraud prevention and other lawful purposes, subject to applicable law.

12.Location Information

Where enabled and permitted, we may process approximate or precise location information obtained through:

device location permissions;
manually entered addresses;
selected city or locality;
event or venue details; or
other information provided by you.

Location information may be used to:

show relevant Artists;
enable locality-based search;
identify applicable service areas;
determine travel or outstation applicability;
support Booking logistics;
display relevant service information;
improve local search functionality; and
provide customer support.

You may disable device-level location permissions through your device settings. Certain location-dependent features may not function correctly if location access is disabled.

Providing an event venue or service address to an Artist for a Booking does not necessarily mean that the Customer's exact address will be publicly displayed on the Artist profile.

13.Payment, Transaction and Financial Information

The Platform may process information relating to:

Booking payments;
advance payments;
final payments;
refunds;
payouts;
payment status;
payment method;
transaction references;
invoices;
Booking IDs;
wallet or account balances, where applicable;
coupon or voucher usage;
cashback or referral records, where applicable;
rewards or promotional programme records, where applicable; and
cancellation or refund records.

Payment providers may independently process certain payment information under their own terms and privacy policies.

Users must never share UPI PINs, OTPs, passwords, CVVs, card PINs or other confidential payment or authentication credentials with another User or anyone claiming to represent Mehndi Wala.

14.Cash and Off-Platform Transactions

Where permitted under applicable Platform terms, Customers and Artists may mutually agree to payment arrangements outside the Platform, including direct cash payment.

Where a transaction is completed entirely outside the Platform:

Mehndi Wala may not receive the external payment information;
the transaction may not appear as a completed Platform Booking;
payment records may not be available to us;
Platform dispute or refund support may be limited;
external transaction verification may not be possible; and
the parties may be governed by their direct arrangement, subject to applicable law and Platform terms.

Where a Booking is processed through the Platform, we may retain relevant Booking, payment and communication records for administration, security, support, dispute handling and other lawful purposes.

Nothing in this section is intended to waive any right or obligation that cannot lawfully be waived.

15.Cookies and Similar Technologies

The Platform may use cookies, local storage, SDKs, pixels and similar technologies.

These technologies may be used for:

15.1 Strictly Necessary Technologies

These may be required for:

login;
authentication;
session management;
security;
fraud prevention; and
core Platform functionality.

15.2 Functional Technologies

These may remember preferences and improve usability.

15.3 Analytics Technologies

These may help us understand:

traffic;
feature usage;
errors;
performance;
conversion flows; and
general Platform behaviour.

Where required by applicable law, consent may be requested for non-essential technologies.

You may control certain cookies through your browser or device settings. Disabling necessary technologies may affect the availability or functionality of certain Platform features.

A separate Cookie Policy may provide additional information about specific cookies and technologies used by the Platform.

16.Information Received from Third Parties

Depending on the functionality you use, we may receive information from:

payment service providers;
OTP and SMS providers;
WhatsApp Business or messaging providers;
email providers;
identity and KYC verification providers;
fraud-prevention providers;
analytics providers;
cloud infrastructure providers;
app stores or operating-system services; and
other service providers supporting the Platform.

Where you choose to use a third-party integration, the relevant third party may process information according to its own privacy policy and terms.

If a feature requests access to your device contacts, the Platform will request the applicable device permission where required and will use the information for the purpose disclosed at the point of collection, subject to applicable law.

Where you provide personal data relating to another person, you should do so only where you are authorised to provide that information or otherwise have an appropriate lawful basis to do so.

17.Purposes of Processing Personal Data

Depending on the circumstances, we may process personal data to:

create and manage Customer and Artist accounts;
authenticate users;
complete Artist KYC and verification;
operate Artist profiles and storefronts;
display relevant Artist, service and product information;
enable Artist discovery and comparison;
process enquiries;
facilitate Customer-Artist communications;
facilitate Bookings;
generate invoices and Booking records;
process payments, refunds and payouts;
maintain transaction and financial records;
provide customer support;
investigate complaints and disputes;
prevent fraud, abuse, impersonation and security incidents;
detect duplicate or fraudulent accounts;
prevent misuse of referral, reward, cashback and promotional programmes;
improve Platform functionality and user experience;
conduct analytics and generate aggregated or anonymised insights;
provide transactional notifications;
send promotional communications where permitted by applicable law and, where required, with consent;
comply with legal, tax, accounting and regulatory requirements;
respond to lawful requests from government authorities;
protect the rights, safety, property and security of the Company, Users and the public; and
enforce applicable Platform terms and policies.

The applicable legal basis and requirements for a particular processing activity depend on the nature of the processing and applicable law.

19.AI Features and the Mehndi Wala AI Chatbot

Mehndi Wala may provide AI-assisted features, including an AI chatbot or assistant referred to as "Mehndi Wala", to help Users discover, search, filter, compare, understand or interact with Platform services.

Depending on the feature enabled, AI-assisted functionality may process:

questions and prompts;
search requests;
design preferences;
city or locality;
event information;
service requirements;
budget information;
Artist preferences;
Booking-related information;
support questions; and
other information voluntarily entered into the AI interface.

Where technically and lawfully applicable, AI-assisted features may also use relevant information available within your Platform account or Booking context to provide the requested service.

AI-generated responses may not always be complete, current or error-free.

Where an AI feature provides information about Artist availability, pricing, Booking status or other live information, Users should rely on such information as confirmed only where the Platform expressly identifies it as current or confirmed.

19.1 Information Users Should Not Enter Into AI Chat

Users should not enter unnecessary confidential credentials into an AI chat, including:

passwords;
OTPs;
UPI PINs;
CVVs;
card PINs; or
other authentication credentials.

If third-party AI technology or infrastructure is used, relevant information may be processed by the applicable provider as necessary to provide the AI feature, subject to applicable contractual, privacy and legal requirements.

The Company will maintain and disclose material AI data-processing practices in accordance with applicable law and the actual AI architecture used by the Platform.

20.Analytics, Benchmarking and Aggregated Information

We may create aggregated, statistical, de-identified or anonymised information from Platform data, subject to applicable law.

Artist-facing analytics may include:

profile views;
enquiry counts;
response information;
Booking statistics;
general city-level performance information; and
other business insights.

Where information has been genuinely anonymised so that an individual cannot reasonably be identified, it may be used for analytics, research, business intelligence, reporting, service improvement or other lawful purposes.

The Company will not describe information as anonymised merely because obvious identifiers have been removed if an individual can still reasonably be identified.

22.Service Providers and Data Processors

We may use third-party providers to operate and support the Platform, including providers for:

cloud hosting;
secure storage;
databases;
payment processing;
payout processing;
KYC and identity verification;
fraud prevention;
SMS and OTP delivery;
WhatsApp Business messaging;
email;
push notifications;
customer support;
analytics;
application monitoring;
security;
AI or machine-learning infrastructure;
communication systems; and
other technical or operational services.

Such providers may process personal data on our behalf or independently where they act in their own capacity.

The Company will use appropriate contractual, organisational and technical measures appropriate to the nature of the information and services provided, as required by applicable law.

The specific providers used by the Platform may change from time to time.

23.Legal and Regulatory Disclosures

We may disclose personal data where reasonably necessary or legally required to:

comply with applicable law;
comply with a court order;
respond to a lawful government or regulatory request;
comply with tax or accounting requirements;
prevent, detect or investigate fraud;
investigate security incidents;
establish, exercise or defend legal claims;
protect the rights or safety of Users;
protect the rights, property or security of the Company; or
enforce applicable terms and policies.

Where legally permitted, we may take reasonable steps to limit disclosures to information relevant to the particular purpose.

24.Business Transfers

If the Company undergoes a merger, acquisition, restructuring, financing, sale of assets, transfer of business, insolvency process or similar corporate transaction, personal data may be transferred as reasonably necessary for the transaction and continued operation of the Platform.

Any such transfer will remain subject to applicable law and appropriate privacy and security requirements.

Where required by applicable law, Users will be notified of material changes in the identity or processing practices of the responsible entity.

25.Cross-Border Data Processing

Some service providers used by the Platform may operate infrastructure or services outside India.

Where personal data is processed or transferred outside India, such processing will be subject to applicable Indian law, contractual safeguards, security requirements and applicable restrictions or conditions imposed by competent authorities.

The Company does not make a blanket representation that all data is always stored exclusively within India unless expressly stated in applicable service documentation.

26.Data Security

We implement reasonable technical, organisational and security measures appropriate to the nature of personal data processed through the Platform.

Depending on the system and information involved, security measures may include:

encryption in transit;
encryption at rest where appropriate;
access controls;
role-based access;
authentication controls;
secure session management;
private and access-controlled storage;
audit logging, where implemented;
monitoring;
vulnerability management;
backup and recovery controls;
employee and contractor access restrictions;
security incident response procedures; and
other safeguards appropriate to the risks involved.

Where KYC documents are stored electronically, access should be restricted to authorised systems and personnel with a legitimate operational or legal need.

Where identity information is displayed within the Platform, the Company may mask or limit the information displayed where appropriate.

The Company will maintain security controls appropriate to the nature and risks of the processing, subject to applicable law and the Company's actual technical implementation.

The Company does not guarantee that any electronic system, transmission or storage method can be completely secure.

Users are responsible for protecting their account credentials and should promptly report suspected unauthorised access.

27.Data Breaches and Security Incidents

If the Company becomes aware of a personal-data breach or security incident, we will take reasonable steps to:

assess the incident;
contain and mitigate the impact;
investigate the cause;
preserve relevant evidence;
implement corrective measures; and
make notifications or disclosures required by applicable law.

Where applicable law requires notification to affected Users, regulators or other authorities, the Company will follow the applicable notification requirements and timelines.

28.Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purposes, unless a longer retention period is required or permitted by law.

Different categories of information may be retained for different periods, including:

account information;
Artist KYC information;
Booking records;
invoices;
payment and transaction records;
customer support records;
dispute records;
communications;
reviews;
security logs;
fraud-prevention information; and
legal or regulatory records.

Retention may be necessary to:

provide the Platform;
maintain business and transaction records;
comply with legal, tax, accounting or regulatory requirements;
prevent fraud or abuse;
resolve disputes;
investigate complaints;
enforce agreements;
establish or defend legal claims; or
comply with lawful requests.

When personal data is no longer required for a relevant purpose and no legal or other permitted reason for retention exists, it may be deleted, anonymised or otherwise disposed of in accordance with applicable law and the Company's internal retention procedures.

29.Account Deletion

Subject to applicable law and the retention requirements described in this Policy, Users may request deletion of their account.

Account deletion does not necessarily mean that every record is immediately erased.

Certain information may need to be retained for:

financial and tax records;
completed Bookings;
invoices;
fraud prevention;
security;
dispute resolution;
legal claims;
regulatory compliance; or
other legally permitted purposes.

Where deletion is requested and legally applicable, information that is no longer required may be deleted or anonymised within a reasonable period.

Deletion of an account may also affect access to certain historical account features, subject to information that the Company is required or permitted to retain.

30.Your Privacy Rights

Subject to applicable law and the commencement and applicability of relevant legal provisions, you may have rights relating to your personal data, including:

30.1 Right to Access

You may request information about personal data processed by us and other information that applicable law requires us to provide.

30.2 Right to Correction

You may request correction or updating of inaccurate or incomplete personal data.

Where available, you may also update information directly through your account settings.

30.3 Right to Erasure

You may request erasure of personal data where applicable, subject to legal and other permitted retention requirements.

30.4 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent through the available mechanism.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Where another lawful basis permits continued processing, the Company may continue processing to the extent permitted or required by law.

30.5 Right to Grievance Redressal

You may raise a complaint concerning our processing of personal data through the grievance mechanism described in this Policy.

30.6 Right to Nominate

Where applicable under Indian data-protection law, you may have the right to nominate another individual to exercise specified rights in the event of death or incapacity.

30.7 Other Rights

Additional rights may become applicable depending on applicable law, rules, notifications, Platform functionality and the commencement of relevant legal provisions.

We may need to verify your identity before processing certain privacy requests to protect your account and personal information.

31.How to Exercise Your Privacy Rights

You may submit a privacy request through:

Email: privacy@mehndiwalaa.com

A request should, where reasonably possible, include:

your name;
registered mobile number or email;
nature of the request;
relevant Booking ID or account information, if applicable; and
information reasonably necessary to verify the request.

We may request additional information where reasonably necessary to verify identity and prevent unauthorised disclosure.

Requests will be handled within the timelines and subject to the conditions prescribed by applicable law.

32.Grievance Redressal

If you have a concern regarding the processing of your personal data, you may first contact our designated privacy or grievance contact.

Grievance Officer / Privacy Contact

Address: C-125, Pandav Nagar, New Delhi – 110092, India
Phone: 8700728172 / 8630159154

The Company will maintain an appropriate grievance mechanism in accordance with applicable law.

Where applicable law provides an external regulatory or statutory escalation mechanism, you may use that mechanism in accordance with the applicable legal process.

33.Marketing Communications

We may send transactional communications necessary to operate your account or Booking, including:

OTPs;
account notifications;
Booking confirmations;
payment notifications;
invoice notifications;
service-related reminders;
security alerts;
support communications; and
other essential service communications.

These communications are different from promotional communications.

Where permitted and where consent is required, promotional communications may include:

offers;
discounts;
festival campaigns;
new features;
Artist promotions;
recommendations;
referral campaigns; and
other marketing communications.

You may opt out of promotional communications through the available unsubscribe mechanism or account settings.

Opting out of marketing does not necessarily stop essential transactional, service or security communications.

34.Artist Responsibilities for Personal Data

Artists must not provide Mehndi Wala with personal data belonging to another person unless they have an appropriate lawful basis or permission to provide it.

Artists should:

provide accurate business and profile information;
submit lawful and authentic KYC information;
avoid uploading another person's identity document without authorisation;
avoid publishing private Customer information in public portfolio material;
obtain appropriate permission before uploading photographs or videos containing identifiable individuals where required;
protect Customer information received through the Platform;
use Customer information only for the requested Booking or service and other purposes permitted by applicable law; and
comply with applicable law and Platform policies.

An Artist must not use Customer information obtained through Mehndi Wala for unrelated marketing or other purposes where such use is not permitted.

35.Customer Responsibilities for Personal Data

Customers should:

provide accurate information;
provide accurate Booking and event details;
avoid submitting unnecessary confidential information;
avoid sharing passwords, OTPs, UPI PINs or payment credentials;
avoid uploading another person's personal information without permission or other lawful basis;
use another person's information only where authorised;
keep account credentials secure; and
promptly report suspected unauthorised access.

Customers should understand that information voluntarily shared with an Artist for the purpose of a Booking may become available to that Artist to the extent necessary to provide the requested service.

36.Children's Privacy

Unless expressly stated otherwise by the Company, account holders must satisfy the minimum age and eligibility requirements applicable to the relevant Platform services.

The Platform may facilitate Mehndi services for a child as the service recipient where a parent, guardian or other authorised adult makes the Booking, where permitted by applicable law.

The Company will handle children's personal data in accordance with applicable legal requirements.

Where applicable law requires parental or guardian consent, age-related safeguards or other protections for children's personal data, the Company will implement such measures as required for the relevant processing activity and Platform functionality.

If you believe that personal data relating to a child has been collected or processed improperly, please contact us using the privacy or grievance contact details provided in this Policy.

37.Third-Party Websites, Apps and Services

The Platform may contain links or integrations with third-party services, including:

payment providers;
WhatsApp;
social-media platforms;
map and location services;
app stores;
external websites; and
other third-party services.

Third-party services may have their own privacy policies, terms and data practices.

This Privacy Policy does not govern information independently collected by third parties acting outside the Company's control.

We encourage Users to review the privacy policies and terms of third-party services before providing personal data to them.

38.No Sale of Personal Data

Mehndi Wala does not sell personal data as a data-brokerage product.

We may, however, disclose or make available personal data to service providers, processors, Customers, Artists, payment providers, verification providers, communication providers, professional advisers, authorities or other parties where reasonably necessary for the purposes described in this Policy and as permitted or required by applicable law.

Nothing in this section prevents a disclosure that is required or permitted by applicable law.

39.Public Information and Search Engines

Certain Artist information is intentionally made publicly available to enable Artist discovery and marketplace functionality.

Public Artist information may include, depending on the profile:

Artist or business name;
profile photograph;
service information;
Mehndi and product information supplied by the Artist;
portfolio;
pricing or starting price;
service area;
experience;
reviews;
ratings;
verification status; and
other information the Artist chooses or is required to publish.

Publicly available Artist information may be accessible through search engines and other internet services.

The Company cannot guarantee whether, when or how a third-party search engine will crawl, index, display or rank publicly available information.

Artists should not publish private or confidential information in public profile fields.

Customers should understand that reviews, photographs or other content intentionally submitted for public display may become accessible to other users and search engines.

Private KYC documents, authentication credentials and other non-public account information are not intended to be published as part of a public Artist profile.

40.Fraud, Security and Abuse Prevention

We may process personal data to identify, prevent, investigate or respond to:

fake accounts;
impersonation;
fraudulent Bookings;
payment fraud;
referral abuse;
reward abuse;
misuse of promotional programmes;
spam;
harassment;
security attacks;
unauthorised access;
manipulation of Platform systems; and
other violations of applicable law or Platform policies.

This may involve analysing account, device, transaction, usage, communication or other relevant information to the extent permitted by applicable law.

Where appropriate and permitted by law, automated tools or rules may be used to identify potential fraud, security risks or abuse. Such processing will be subject to applicable legal requirements.

41.Legal Claims, Complaints and Dispute Support

Where a Customer or Artist raises a complaint or dispute, we may process relevant information necessary to investigate and resolve the matter.

This may include:

Booking information;
Booking ID;
invoice;
payment or advance information;
transaction reference;
Platform Chat records;
enquiry information;
cancellation or rescheduling information;
review information;
photographs or documents submitted in support of the dispute; and
relevant account information.

The outcome of a dispute may depend on the available evidence, Booking terms, Artist policies, Platform policies and applicable law.

Information relating to communications or transactions conducted entirely outside the Platform may not be available to Mehndi Wala and may therefore limit the Company's ability to investigate or resolve a dispute.

Nothing in this Privacy Policy limits rights or remedies that cannot lawfully be excluded or limited.

43.Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes in our Platform;
new features;
changes in data-processing practices;
changes in service providers;
changes in applicable law;
regulatory developments; or
security and operational improvements.

Where required, we may notify Users of material changes through the Platform, email, push notification, account notification or another appropriate communication method.

The updated version will state the applicable Last Updated and Effective Date.

We encourage Users to review this Privacy Policy periodically.

44.Governing Law

This Privacy Policy is governed by the applicable laws of India.

Nothing in this Privacy Policy is intended to exclude or restrict any right or remedy that cannot lawfully be excluded or restricted under applicable law.

Any contractual dispute concerning the Platform or this Privacy Policy shall be subject to the dispute-resolution and jurisdiction provisions contained in the applicable Terms and Conditions, subject to mandatory rights and remedies available under applicable law.

Jurisdiction: Delhi, India, subject to applicable law.

45.Contact US

For privacy questions, requests or concerns: