PuneCulture
"Curating experiences..."
Pune Culture is committed to protecting your personal information and being transparent about how we collect and use your data. This Privacy Policy is governed by the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and associated Rules.
This Privacy Policy applies to Pune Culture, operated under the domain puneculture.com and its subdomains, including all mobile applications, API interfaces, community platforms, and associated services (collectively, the "Platform"). Pune Culture is a platform operated by Tittli Events and Digital Services, a sole proprietorship based in Maharashtra, India.
By visiting, registering on, or using the Platform, you acknowledge that you have read and understood this Privacy Policy and expressly consent to the collection, processing, storage, and use of your information as described herein. If you do not agree with any part of this policy, you must immediately discontinue use of the Platform.
Key Definitions
"Platform" — PuneCulture.com and its subdomains, mobile applications, and APIs.
"User" / "Data Principal" — Any natural person who accesses, registers on, or interacts with the Platform, including visitors, members, partners, and content contributors.
"Personal Data" — Any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act, 2023.
"Sensitive Personal Data" — Information relating to financial data, biometrics, health records, or other categories specified under applicable Indian law.
"Data Fiduciary" — Pune Culture, in its capacity as the entity that determines the purpose and means of processing personal data.
"Processing" — Any automated or manual operation performed on personal data, including collection, storage, use, disclosure, or deletion.
"Consent" — Free, specific, informed, unconditional, and unambiguous agreement by a Data Principal signifying agreement to the processing of their personal data.
Pune Culture processes your personal data only when a lawful basis exists. Under the Digital Personal Data Protection (DPDP) Act, 2023, we rely on the following legal bases:
Consent (Section 6, DPDP Act 2023)
For account creation, marketing communications, and optional features such as personalized recommendations, newsletter subscriptions, and community profile visibility. Consent may be withdrawn at any time without affecting past processing.
Legitimate Use (Section 7, DPDP Act 2023)
For platform security, fraud prevention, compliance with legal obligations, enforcement of Terms of Service, and ensuring the technical functioning of services requested by the user.
Legal Obligation
When disclosure is required by applicable Indian laws, court orders, government authorities, or regulatory directives under the IT Act, 2000, or other enforceable legislation.
We collect only the minimum data necessary to provide you with a seamless experience on the Platform. The categories of data we collect include:
3.1 Information You Provide Directly
3.2 Information Collected Automatically
3.3 Information from Third-Party Sources
⚠️ Sensitive Personal Data
We do not collect financial account details, health records, biometric data, caste, religion, sexual orientation, or any other Sensitive Personal Data as defined under the DPDP Act. If you inadvertently include such information in community posts or reviews, we recommend editing or deleting it immediately.
We use the information collected only for the specific purposes described below:
4.1 Platform Operations
To create and maintain your user account, authenticate logins, display your profile, facilitate community interactions, and deliver the core features of the Platform.
4.2 Content & Listings
To publish, moderate, and display user-generated reviews, PG listings, cafe guides, restobar profiles, and community discussions.
4.3 Communications
To send transactional emails (account verification, password reset, booking inquiries), platform notifications (community replies, moderation decisions), and — with explicit consent — newsletters and promotional communications.
4.4 Trust & Safety
To detect, investigate, and prevent fraudulent listings, fake reviews, spam, abuse, unauthorized scraping, and security breaches. To verify the identity of business partners before activating premium listings.
4.5 Analytics & Improvement
To understand how users navigate the Platform, identify popular content, diagnose technical issues, and improve user experience, UI design, and feature relevance.
4.6 Legal & Compliance
To comply with applicable Indian laws, respond to court orders or government inquiries, enforce our Terms of Service, and protect the legal rights of Pune Culture.
4.7 Personalization
With your consent, to personalize content recommendations, neighborhood guides, and event notifications based on your browsing preferences and saved favorites.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight.
We share data only under the following limited, necessary circumstances:
Service Providers (Data Processors)
We engage trusted third-party vendors who process data on our behalf under strict contractual confidentiality obligations:
Legal Obligations & Law Enforcement
We may disclose personal data when required by applicable Indian law (IT Act, 2000; DPDP Act, 2023; CrPC), in response to a valid court order, government summons, or lawful direction from a competent authority. We will make reasonable efforts to notify users of such requests unless prohibited by law.
User-Directed Sharing
When you explicitly initiate contact with a PG owner or business via our platform (e.g., by clicking a "Call" or "Enquire" button), your name and contact information may be shared with that specific listing owner for the purpose of facilitating your inquiry.
Business Transfers
In the event of a merger, acquisition, sale of assets, or restructuring of Pune Culture, your data may be transferred to the successor entity, subject to the same privacy protections. We will provide prior notice through the Platform or email before any such transfer occurs.
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
We retain personal data for no longer than necessary for the purposes described in this policy or as required by law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Active Account Data | Duration of account + 30 days | Consent / Contractual |
| User Reviews & Posts | Until deletion request or account termination | Consent / Legitimate interest |
| Server & Access Logs | 90 days | Security / Legal obligation |
| Transaction Records | 7 years | GST / Tax compliance (India) |
| Analytics Data | 14 months (Analytics default) | Legitimate interest |
| Deleted Account Data | 30 days (then purged) | Technical necessity |
Upon expiry of the retention period, data is securely deleted or anonymized such that it can no longer be linked to an individual.
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you are entitled to exercise the following rights with respect to your personal data. We will respond to all verifiable requests within 30 days.
Right to Access (Section 11)
Request a summary of the personal data we hold about you and details of how it is being processed.
Right to Correction (Section 12)
Request correction of inaccurate, outdated, or incomplete personal data. You may also update most information directly through your account settings.
Right to Erasure (Section 12)
Request deletion of your personal data that we hold, subject to retention obligations imposed by applicable law or legitimate business necessity. Account deletion permanently erases your profile and associated data within 30 days.
Right to Grievance Redressal (Section 13)
File a complaint with our designated Grievance Officer if you believe your data rights have been violated. We will acknowledge within 48 hours and resolve within 30 days.
Right to Withdraw Consent (Section 6)
Withdraw consent for any processing based on consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Nominate (Section 14)
Nominate another individual to exercise data rights on your behalf in the event of death or incapacity.
To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and include your registered email address for identity verification. We may require additional verification before processing your request.
If you are unsatisfied with our response, you may escalate your complaint to the Data Protection Board of India once constituted under the DPDP Act, 2023.
Pune Culture is not directed at children under the age of 18 years. We do not knowingly collect personal data from minors. Under the DPDP Act, 2023, processing of data of minors requires verifiable parental or guardian consent (Section 9).
If we become aware that personal data has been collected from a person under 18 without appropriate consent, we will take immediate steps to delete that data from our systems. If you believe we may have collected data from a minor, please contact our Grievance Officer immediately at [email protected].
We do not engage in targeted advertising or behavioral profiling of users we know to be under 18 years of age.
Our primary database infrastructure may store data in servers outside India. Such cross-border transfers are conducted in accordance with applicable Indian law, including the DPDP Act, 2023 and any regulations issued by the Central Government regarding permitted jurisdictions for data localization.
Where data is transferred internationally, we ensure that receiving entities maintain equivalent data protection standards through contractual obligations (Standard Contractual Clauses or Data Processing Agreements) consistent with applicable law.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. The "Last Updated" date at the top of this page will be revised whenever material changes are made.
For material changes affecting how we use your personal data, we will provide notice by email (to your registered address) or through a prominent banner on the Platform at least 14 days before the change takes effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy. If you disagree, you may delete your account before the changes take effect.
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, a Grievance Officer has been designated to address complaints and queries relating to privacy and data protection.
Grievance Officer — Pune Culture
Name: Pune Culture Team
Email: [email protected]
Subject Line: "Privacy Grievance — [Your Issue]"
Address: Maharashtra, India
Response Time: Within 48 hours of receipt. Resolution within 30 days.
All grievance requests must include your registered email address for identity verification. Anonymous submissions cannot be processed.