Privacy Policy

BEANS MEDIA

Governing the Collection, Use, and Protection of Your Personal Information

Effective Date: 18 June 2025 | Governing Law: Laws of India | Jurisdiction: Chandigarh, India

1. Introduction and Scope

This Privacy Policy ('Policy') is published by Beans Media ('we', 'us', 'our') in accordance with Rule 4 of

the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data

or Information) Rules, 2011 ('SPDI Rules'), the Information Technology Act, 2000 ('IT Act'), and the Digital

Personal Data Protection Act, 2023 ('DPDPA').

This Policy governs how we collect, store, process, use, and disclose personal information obtained from

individuals ('you', 'User', 'Data Principal') who access our website, register for events, or purchase tickets

through our online platform ('Platform').

By using our Platform or purchasing a ticket, you acknowledge that you have read, understood, and

consent to the terms of this Policy. If you do not agree with this Policy, please do not use the Platform.

2. Information We Collect

When you register for or purchase a ticket to an event hosted on our Platform, we collect the following

personal information:

• First Name and Last Name

• Email Address

• Mobile Phone Number

We do not directly collect sensitive personal data or information as defined under Rule 3 of the SPDI

Rules (such as passwords, financial instrument details, physical or mental health conditions, biometric

data, sexual orientation, or medical records).

Payment transactions are processed exclusively by Razorpay Software Private Limited, a PCI-DSS

compliant and RBI-authorised payment aggregator. Beans Media does not store, access, or process your

card numbers, UPI credentials, or net banking information.

We may also automatically collect certain technical information such as IP address, browser type, device

identifiers, and session data through the Wix.com Platform infrastructure. This is governed by Wix's own

3. Purpose of Data Collection and Use

Your personal information is collected for the following specific, lawful, and legitimate purposes

('Specified Purpose') as required under Section 6 of the DPDPA:

• To process your ticket purchase and confirm your booking• To generate and deliver your ticket, QR code, or booking acknowledgement via email to the address

provided

• To send event-related communications including reminders, entry instructions, venue updates, or

event cancellations

• To verify your identity at the event venue for admission purposes

• To comply with applicable legal, regulatory, accounting, or law enforcement obligations

• To send you promotional and marketing communications about future events, screenings, and

offers hosted by Beans Media

By purchasing a ticket, you explicitly consent to receiving marketing communications from us. You may

withdraw this consent at any time by writing to our Grievance Officer at contact@beans.media or by using

the unsubscribe link included in all marketing emails.

4. Data Storage and Infrastructure

All data collected through this Platform is stored on servers and infrastructure provided by Wix.com, Inc.

('Wix'), our website and hosting provider. Beans Media does not independently operate data servers. The

data storage architecture, security standards, and technical safeguards are governed by Wix's Data

Processing Agreement and Privacy Policy.

Your data may be stored on servers located outside India, including in the United States or the European

Union, as part of Wix's global infrastructure. By using this Platform, you consent to such cross-border

transfer of your personal data, subject to adequate safeguards consistent with applicable Indian law,

including Section 16 of the DPDPA.

Beans Media implements reasonable organisational and technical security measures consistent with

Rule 8 of the SPDI Rules to protect personal data within its operational control from unauthorised access,

disclosure, alteration, or destruction.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party for commercial purposes. We

may share your data only in the following limited and lawful circumstances:

• With Razorpay Software Private Limited, solely to process your payment transaction

• With Wix.com, as our Platform infrastructure and hosting provider

• With event venue operators or co-organisers, strictly on a need-to-know basis, for event

management and entry verification

• With government authorities, law enforcement agencies, or courts of competent jurisdiction, when

required by law, court order, or regulatory directive under applicable Indian law

• With professional advisors including auditors, legal counsel, or statutory authorities, under

appropriate confidentiality obligations

All third parties with whom we share data are obligated to handle your information in accordance with

applicable law and the specific purpose of the disclosure.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy and

thereafter for such period as may be mandated by applicable Indian law.

Transactional and booking-related data will be retained for a minimum of seven (7) years to comply with

Indian accounting and tax obligations under the Income Tax Act, 1961, and the Companies Act, 2013.

Marketing consent data and communication records will be retained until you withdraw your consent.

Upon the expiry of the applicable retention period, your data will be securely deleted or anonymised.

7. Your Rights as a Data Principal

Under the DPDPA and applicable Indian law, you have the following rights with respect to your personal

data processed by Beans Media:

• Right to access a summary of the personal data we hold about you and the purposes for which it is

being processed

• Right to correction of inaccurate, incomplete, or outdated personal data

• Right to erasure of your personal data where it is no longer necessary for the Specified Purpose,

subject to our legal retention obligations

• Right to withdraw consent to marketing communications at any time, without affecting the lawfulness

of processing prior to withdrawal

• Right to nominate a representative to exercise these rights on your behalf in the event of your death

or incapacity

• Right to file a grievance with our Grievance Officer (details in Section 11) or lodge a complaint with

the Data Protection Board of India upon establishment

To exercise any of these rights, please contact our Grievance Officer using the details provided in Section

11. We will endeavour to respond to all valid requests within thirty (30) days of receipt.

8. Cookies and Tracking Technologies

Our Platform, hosted on Wix, may use cookies, web beacons, and similar tracking technologies to

improve user experience, analyse traffic patterns, and deliver relevant content. You may configure your

browser to refuse cookies; however, this may limit the functionality of certain Platform features.

We do not use cookies or tracking mechanisms for targeted third-party advertising without your separate

and explicit consent.

9. Children's Privacy

Our Platform and events are intended for individuals who are eighteen (18) years of age or older, or

minors attending events with the consent and supervision of a parent or legal guardian. We do not

knowingly collect personal data from children below the age of eighteen (18) without verifiable parental

consent, as required under the DPDPA.If we become aware that we have inadvertently collected personal data from a child below the age of

eighteen (18) without appropriate consent, we will take prompt steps to delete such data.

10. Changes to This Policy

We reserve the right to update or modify this Policy at any time to reflect changes in applicable law, our

business practices, or Platform features. Any material changes will be notified to you via email at the

address registered with us, or via a prominent notice on our Platform, at least fifteen (15) days prior to the

change taking effect.

Your continued use of the Platform after such notification constitutes your acceptance of the revised

Policy.

11. Grievance Officer and Contact

In accordance with Rule 5(9) of the SPDI Rules, Section 13 of the IT Act, and the Consumer Protection

(E-Commerce) Rules, 2020, Beans Media has designated a Grievance Officer to receive and redress

complaints from Users regarding the processing of their personal data.

Grievance Officer Details:

Name: Kunal Walia

Designation: Founder, Beans Media

Email: contact@beans.media

Phone: +91 97797 22217

Address: 13, Highland Society, Baltana, Zirakpur, Punjab - 140604, India

For all privacy-related queries, complaints, correction requests, erasure requests, or requests to withdraw

marketing consent, please contact the Grievance Officer using the details above.

We will acknowledge your complaint within forty-eight (48) hours of receipt and endeavour to resolve it

within thirty (30) days. If you are not satisfied with our resolution, you may escalate your complaint to the

Data Protection Board of India upon its establishment.

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes shall be subject to the

exclusive jurisdiction of the courts at Chandigarh, India.
For queries: contact@beans.media | +91 97797 22217