Privacy policy

When you book a ticket we collect only what is needed to issue and deliver it:

• Your name — printed on the pass so the door can match it to your booking at the door.
• Your email address — the delivery channel for your QR ticket. Without it there is no way to give you a ticket.
• Your mobile number — used only if we need to reach you urgently about the event you booked.
• Technical data — your IP address and browser user-agent, recorded with the booking. This exists to detect abuse and fraudulent bulk booking, not to profile you.

We do not collect payment card details. Online payment is not currently enabled; when it is, card data will be handled entirely by the payment processor and will never reach our servers.

We process your data to perform the contract you entered into when booking — issuing your ticket, delivering it, admitting you at the door, and contacting you about that specific event.

We also process a limited amount of data on the basis of our legitimate interest in running a safe event: the door scan log, which records every ticket scan including rejected ones, exists so that entry disputes can be resolved factually.

We do not send marketing email unless you separately ask us to. Booking a ticket does not subscribe you to anything.

We do not sell personal data. It is shared only with:

• Our email provider — your address is transmitted via SMTP in order to deliver your ticket.
• Our hosting and database providers — who store the data on our behalf under contract.
• A payment processor — only once online payment is enabled, and only the data needed to take the payment.
• Law enforcement — where we are legally required to disclose.

Booking and ticket records are retained for 24 months after the event, which covers the period in which a dispute, chargeback or statutory claim could realistically arise. Door scan logs are retained for the same period.

Contact-form messages are kept for 12 months. Aggregate, non-identifying counts (how many people attended, how many scans occurred) may be kept indefinitely.

This site sets exactly one cookie, and only for staff: an httpOnly session cookie used to keep an operator signed in to the admin console. It is not set for members of the public.

There are no advertising cookies, no analytics cookies and no third-party trackers on this site. That is why you are not being shown a consent banner — there is nothing to consent to.

Data is transmitted over TLS and stored in an access-controlled database. Ticket QR codes contain no personal data whatsoever — only an opaque code and a cryptographic signature — so a photographed or intercepted ticket reveals nothing about its holder. Staff passwords are stored as bcrypt hashes, never in plain text.

Under India's Digital Personal Data Protection Act, 2023, you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data erased where we no longer need it, to nominate another person to exercise these rights on your behalf, and to complain to the Data Protection Board of India.

To exercise any of these, email us with your booking reference. We respond within 30 days. Note that we cannot erase records we are required to retain for an ongoing dispute until it is resolved.

In line with Indian data protection requirements, complaints about how your data is handled can be addressed to our grievance officer:

Grievance Officer, Houz of Vybe
Email: houzofvybe@gmail.com
Hyderabad, Telangana, India

We acknowledge every grievance within 48 hours and aim to resolve it within 30 days.