Your privacy matters to us. This Privacy Policy explains how Bookarlo ("we", "our", "us") collects, uses, shares, and protects your personal information when you use our event booking platform at bookarlo.com. Please read this carefully.
01. Who We Are
Bookarlo is an online event discovery and ticketing platform operated by Rasajay Bookarlo Digital Pvt. Ltd., registered in India.
Our platform connects event organisers with attendees across:
- Concerts
- Conferences
- Workshops
- Sports Events
- Cultural Events
- Other Live Experiences
For the purposes of data protection law, Bookarlo acts as:
- Data Controller for user account data.
- Data Processor when processing attendee data on behalf of event organisers.
Company Information
- Website: bookarlo.com
- Registered Address: Rasajay Bookarlo Digital Pvt. Ltd., Kerala, India
02. Information We Collect
We collect several categories of personal information depending on your use of the platform.
Identity Data
- Examples: Full name, username, date of birth, gender
- Required: Yes
Contact Data
- Examples: Email address, phone number, postal address
- Required: Yes
Account Data
- Examples: Password (hashed), profile photo, preferences
- Required: Yes
Booking Data
- Examples: Events booked, ticket types, seat numbers, QR codes
- Required: Yes
Payment Data
- Examples: Partial card details, billing address, transaction IDs
- Required: Yes
Communication Data
- Examples: Support messages, reviews, chat logs
- Required: Optional
Technical Data
- Examples: IP address, browser type, device ID, operating system, cookies
- Collection Method: Automatic
Usage Data
- Examples: Pages visited, search queries, time on site, clicks
- Collection Method: Automatic
Location Data
- Examples: City or region (from IP address or opt-in GPS)
- Required: Optional
Social Data
- Examples: Profile data from Google or Facebook login
- Required: Optional
Organiser Data
- Examples: Business name, GST/PAN, bank account details, event details
- Applies To: Event Organisers Only
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for a particular event and you have given explicit consent.
03. How We Collect Information
We collect your information through the following methods.
Direct Interactions
- Registering an account
- Booking tickets
- Listing an event
- Filling out forms
- Contacting support
Automated Technologies
- Cookies
- Web beacons
- Tracking pixels
- Server logs
These technologies automatically collect technical and usage data as you navigate our platform.
Third-Party Sources
- Google Login
- Facebook Login
- Payment processors
- Analytics providers
- Fraud prevention partners
Event Organisers
Event organisers may:
- Upload attendee lists
- Share ticket purchaser information
- Manage registrations through Bookarlo
Public Sources
- Publicly available information
- Social media profiles where relevant
04. How We Use Your Information
We use personal information for the following purposes.
Account Management
- Creating accounts
- Managing account settings
- Identity verification
- Maintaining account security
Booking Fulfilment
- Processing ticket purchases
- Sending confirmations
- Generating QR code entry passes
Payment Processing
- Processing payments
- Issuing refunds
- Detecting fraudulent transactions
Event Communications
- Booking confirmations
- Event reminders
- Cancellation notices
- Important event updates
Customer Support
- Responding to enquiries
- Resolving disputes
- Improving support quality
Platform Improvement
- Analysing usage patterns
- Improving performance
- Enhancing user experience
Personalisation
- Event recommendations
- Location-based suggestions
- Interest-based content
Marketing
- Promotional emails
- Event alerts
- Product updates
- Special offers
Legal Compliance
- Compliance with Indian laws
- Consumer protection requirements
- Tax and accounting obligations
Fraud Prevention & Security
- Fraud detection
- Abuse prevention
- Security monitoring
Analytics & Research
- Market trend analysis
- Platform insights
- Search and recommendation improvements
Organiser Payouts
- Earnings calculations
- Settlement processing
- Tax deductions
05. Legal Basis for Processing
We process personal data only when a lawful basis exists.
Contractual Necessity
- Processing required to fulfil ticket bookings and provide services.
Consent
- Marketing communications
- Location access
- Optional features requiring permission
Legitimate Interests
- Fraud prevention
- Platform analytics
- Service improvement
- Security monitoring
Legal Obligation
- Tax compliance
- Law enforcement requests
- Regulatory obligations
Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing.
06. Sharing of Information
We do not sell, rent, or trade your personal information.
Event Organisers
Shared Information:
- Name
- Email address
- Phone number
- Booking details
Purpose:
- Event management
- Attendee communication
- Entry verification
Payment Processors
Examples:
- Razorpay
- PayU
- Stripe
Purpose:
- Secure payment processing
- Refund handling
Service Providers
Services include:
- Cloud hosting
- Email delivery
- Analytics
- Customer support
- Fraud detection
Legal Authorities
Information may be disclosed when required by:
- Applicable law
- Court orders
- Government authorities
Business Transfers
Data may transfer during:
- Mergers
- Acquisitions
- Asset sales
With Your Consent
Any sharing not listed above requires explicit consent.
All third-party processors are contractually obligated to protect your information and use it only for authorised purposes.
07. Payment & Financial Data
All payment transactions are processed through PCI-DSS-compliant payment gateways.
We Do Not Store
- Full credit card numbers
- Full debit card numbers
- CVV security codes
We Retain
- Last four digits of card numbers
- Transaction IDs
- Transaction timestamps
- Billing addresses
Event Organiser Financial Data
We may collect:
- Bank account details
- PAN information
- GST information
Purpose:
- Processing organiser payouts
- Tax compliance
- Regulatory obligations
Refunds
Refunds are processed:
- Through the original payment method
- According to organiser cancellation policies
- Subject to banking timelines
08. Cookies & Tracking Technologies
We use cookies and similar technologies to improve platform functionality.
Essential Cookies
Purpose:
- Login sessions
- Booking state
- Security protection
Opt Out:
- Not available
Functional Cookies
Purpose:
- Saved preferences
- Language settings
- Remembered searches
Opt Out:
- Available
Analytics Cookies
Purpose:
- Traffic analysis
- User behaviour insights
- Performance monitoring
Opt Out:
- Available
Marketing Cookies
Purpose:
- Advertising campaigns
- Retargeting
- Conversion measurement
Opt Out:
- Available
You may manage cookie preferences through browser settings or our cookie banner.
09. Data Retention
We retain information only as long as necessary.
Account Data
- Retention Period: Account lifetime plus 3 years after deletion
Booking Records
- Retention Period: 7 years
Payment Records
- Retention Period: 7 years
Support Communications
- Retention Period: 2 years after resolution
Marketing Data
- Retention Period: Until consent is withdrawn
Technical Logs
- Retention Period: Up to 12 months
When data is no longer required, it is securely deleted or anonymised.
10. Data Security
We implement industry-standard safeguards including:
- TLS 1.2+ encryption
- AES-256 encryption at rest
- Bcrypt password hashing
- Two-factor authentication (2FA)
- Security audits
- Penetration testing
- Role-based access controls
- Secure cloud infrastructure
- Automated backups
- PCI-DSS compliant payment processing
Data Breach Response
If a breach poses a significant risk to your rights and freedoms, we will:
- Notify affected users promptly.
- Notify applicable authorities.
- Take corrective action.
No method of internet transmission is completely secure. We continuously work to protect your information but cannot guarantee absolute security.
11. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Right to Access
- Right to Rectification
- Right to Erasure
- Right to Restrict Processing
- Right to Data Portability
- Right to Object
- Right to Withdraw Consent
- Right Against Automated Decision-Making
Exercising Your Rights
Contact: privacy@bookarlo.com
We aim to respond within 30 days.
12. Children's Privacy
Bookarlo is not intended for children under 13 years of age.
We do not knowingly collect personal information from children under 13 without verifiable parental consent.
Some events may be restricted to users aged 18 or older.
If you believe a child has provided personal information without authorization, contact:
We will promptly investigate and remove such information where appropriate.
13. International Data Transfers
Bookarlo primarily stores and processes data in India.
Some service providers may process information in other countries.
When international transfers occur, we use appropriate safeguards including:
- Standard Contractual Clauses (SCCs)
- Adequacy mechanisms where applicable
- Compliance with the Digital Personal Data Protection Act, 2023 (DPDPA)
14. Third-Party Links
Our platform may contain links to:
- Event websites
- Venue websites
- Social media platforms
- Partner services
This Privacy Policy does not apply to third-party websites.
15. Event Organiser Responsibilities
Event organisers using Bookarlo must:
- Have a lawful basis for processing attendee data.
- Use attendee information only for event management purposes.
- Maintain appropriate security safeguards.
- Avoid unauthorized marketing.
- Comply with applicable privacy laws.
- Publish privacy notices where required.
16. Marketing Communications
With your consent, we may send:
- Event recommendations
- Promotional offers
- Early-bird alerts
- Product updates
- Curated newsletters
Opt-Out Options
- Click the unsubscribe link in emails
- Update notification preferences
- Contact privacy@bookarlo.com
17. Changes to This Policy
We may update this Privacy Policy periodically.
For material changes, we may:
- Update the Last Updated date
- Notify users by email
- Display notices on our platform
Continued use of Bookarlo after updates constitutes acceptance of the revised policy.
18. Contact Us
Bookarlo Privacy Team
Email: privacy@bookarlo.com
Data Requests: bookarlo.com/data-request
Postal Address
Data Protection Officer
Rasajay Bookarlo Digital Pvt. Ltd.
India
