Privacy Policy for PlayTrek

Last Updated: September 22, 2026 Effective Date: September 22, 2026

This Privacy Policy ("Policy") describes how Copious Infotech ("Company", "We", "Us", or "Our"), as the Data Fiduciary, collects, uses, stores, shares, and protects your personal data when you use the software application and platform PlayTrek (accessible at https://playtreack.copiousinfotech.in/ ).

In this Policy, "You" or "Your" refers to the Data Principal — the individual using PlayTrek to generate tickets for horror shows, comedy shows, or kids' rides in shopping malls, fairs, or entertainment venues.

1. Scope and Application

PlayTrek is an administrative ticketing software platform designed exclusively to generate entry tickets for shows and rides. PlayTrek does NOT process, accept, or handle any monetary payments, credit/debit card details, UPI transactions, or banking credentials. All financial transactions are handled separately and offline or directly by the venue operators.

This Policy applies strictly to digital personal data collected directly through the PlayTrek platform.

2. Categories of Personal Data Collected

In accordance with the principle of Data Minimisation, PlayTrek collects only the personal data that is strictly necessary to generate and issue valid entry tickets:

  • Contact Information: Mobile number and/or email address (used to deliver the digital ticket via SMS, WhatsApp, or email).
  • Identity Information (Optional): Name of the attendee (if required for named pass tickets).
  • Booking & Event Details: Show/ride selection, venue location, date, time, and number of tickets generated.
  • System & Technical Logs: IP address, device type, browser logs, and timestamp of ticket generation (maintained for system security and audit compliance).
Note: PlayTrek does NOT track your location continuously, run background analytics, or profile your behaviour.

3. Purpose of Collection and Legal Grounds

We process your personal data solely for specific, lawful purposes under the grounds of Consent provided by you:

Personal Data Specific Purpose Retention Period
Mobile Number / Email To transmit generated tickets, entry QR codes, or cancellation/reschedule alerts. 30 days post-event completion, or until consent is withdrawn.
Attendee Name To verify entry at venue turnstiles or gate checks for specific shows. Erased 24 hours after event conclusion.
System & Access Logs To detect security anomalies, prevent system misuse, and comply with security audit standards under DPDP Rules. Retained for 1 year in compliance with Rule 6 of DPDP Rules.

4. Processing Data of Children (Minors Under 18 Years)

PlayTrek generates tickets for kids' rides at malls and fairs. Under Section 9 of the DPDP Act, 2023, and Rule 10 of the DPDP Rules, 2025:

  • Parental Consent: Before processing any personal data pertaining to a child under the age of 18, PlayTrek requires Verifiable Parental Consent from the parent or legal guardian.
  • Prohibition of Behavioral Tracking: PlayTrek does NOT track, monitor, or profile children's behavior, nor does it display targeted advertisements.
  • Guardianship Responsibility: When a parent or guardian books a ticket for a child's ride, they confirm that they are the lawful parent or guardian providing consent on behalf of the child.

6. Data Sharing and Processors

Copious Infotech does NOT sell, rent, or trade your personal data to third-party advertisers or data brokers. We share your data only under the following limited circumstances:

  • Venue Operators: The event organizers, mall operators, or fair management host responsible for conducting the horror show, comedy show, or kids' ride (for entry validation).
  • Communication Processors: SMS/WhatsApp API gateways strictly used as Data Processors to deliver your ticket payload.
  • Legal Obligations: If mandated by law enforcement authorities or court orders under Indian law.
a

7. Security Safeguards

In accordance with Rule 6 of the DPDP Rules, 2025, Copious Infotech implements technical and organizational security controls to protect your data against unauthorized access, loss, or alteration:

  • Encryption: End-to-end encryption for personal data in transit (TLS 1.3) and at rest (AES-256).
  • Access Control: Strict role-based access control limiting ticket record visibility to authorized personnel only.
  • Data Masking: Masking of mobile numbers in operational dashboards.

In the event of a personal data breach, we will notify affected individuals and the Data Protection Board of India within statutory timelines.

8. Your Rights as a Data Principal

Under Sections 11–14 of the DPDP Act, 2023, you hold the following statutory rights:

  • Right to Access: Request a summary of the personal data being processed and third parties with whom it has been shared.
  • Right to Correction & Erasure: Request correction of inaccurate data or complete deletion of your data once the ticket service is completed.
  • Right of Grievance Redressal: Raise a complaint regarding data processing directly to our Grievance Officer.
  • Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, submit a request via our Data Principal Rights Portal or contact email below.

9. Grievance Redressal Officer

If you have questions, concerns, or complaints regarding how PlayTrek handles your personal data, you can contact our designated Data Protection Officer / Grievance Officer:

Data Fiduciary: Copious Infotech

Email: privacy@copiousinfotech.in

Office Address: H-141, Sector 63 Rd, Electronic City, H Block, Sector 63, Noida, Uttar Pradesh 201309

Response SLA: Grievances will be acknowledged within 24 hours and resolved within 7 working days.