The Shaadi Company · Effective date: 8 October 2026

This Privacy Policy explains how The Shaadi Company ("we", "us", "our"), [registered legal entity name], based at Campal Trade Centre, Dr Braganza Pereira Rd, Greenland Colony, Santa Inez, Panjim, Goa, India, collects, uses, shares and protects personal information when you visit theshaadicompany.com (the "Website"), request a quote, or use our wedding planning and coordination services.

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the data fiduciary for the information described below. Where the UK or EU GDPR applies to you, we are the data controller.

Information you give us. When you complete our Get a Quote form, message us on WhatsApp, email us or call us, we may collect your name, email address, phone or WhatsApp number, country of residence, wedding date or dates, preferred destinations and venues, estimated guest count, budget range, the details of your wedding brief, and anything else you choose to share.

Information we collect when you work with us. This includes contracts, invoices and payment records, your preferences for venues, décor, entertainment and vendors, travel plans, and communications between us.

Guest information. If you use our RSVP, guest hospitality or on-ground coordination services, you may give us your guests' names, contact details, flight arrival and departure details, and dietary or accessibility requirements. You confirm that you are entitled to share this information with us. We use it only to plan and run your event, and we handle it on your behalf.

Sensitive details. We do not ask for sensitive information as a matter of course. Dietary and accessibility requirements shared for guest hospitality may reveal health, religious or cultural information. We collect these only where needed to host your guests, and only with your consent.

Information collected automatically. When you use the Website, we and our service providers may collect your IP address, device and browser type, pages viewed, referring website, approximate location and similar technical data, using cookies and comparable technologies.

• To respond to enquiries and prepare quotes and proposals.
• To plan and deliver your wedding, including sourcing venues, vendors, artists and hospitality, and coordinating logistics.
• To prepare contracts and invoices, process payments, and meet tax and accounting obligations.
• To communicate with you by email, phone and WhatsApp about your enquiry or booking.
• To understand how the Website is used, improve it, and measure the performance of our advertising.
• To send you updates or offers, only where you have agreed to receive them. You can withdraw that agreement at any time.
• To comply with legal obligations and protect our rights.

In India, we process personal data with your consent, or for the limited "legitimate uses" the DPDP Act allows, such as responding to a request you made, performing a contract with you, or complying with the law.

Where the UK or EU GDPR applies, we rely on your consent, the performance of a contract or steps you ask us to take before entering one, our legitimate interests in running and promoting our business, and legal obligations.

We do not sell your personal information. We share it only as follows:

• Venues, hotels and vendors. When you engage us to coordinate your event, we share what is needed with the venues, decorators, artists, photographers, transport providers and other vendors working on your wedding, and only for that purpose.
• Service providers. Companies that help us run our business, such as website hosting and building, email and messaging tools, payment providers and banks, and accounting and cloud storage services.
• Analytics and advertising partners. Providers such as Google, as described in the next section.
• Professional advisers and authorities. Lawyers, accountants and auditors, and government or regulatory bodies where the law requires it.
• Business changes. A successor, if our business is restructured or transferred. We would tell you if that affected how your information is used.

We use cookies and similar technologies to make the Website work and to understand how visitors use it. We may use Google Analytics and Google Ads, including conversion tracking and remarketing, which means Google may show our ads to people who have visited the Website.

You can accept or decline non-essential cookies through the cookie banner, and you can change cookie settings in your browser at any time. You can manage Google's ad personalisation at adssettings.google.com and opt out of Google Analytics using Google's browser add-on at tools.google.com/dlpage/gaoptout.

We are based in India, and many of our clients live in the UK, USA, Canada, Australia, the Middle East and elsewhere. Your information will be processed in India and may be processed by our service providers in other countries. We take reasonable steps to make sure it stays protected wherever it goes.

• Enquiries that do not lead to a booking: up to [24 months], then deleted or anonymised.
• Contracts, invoices and financial records: for as long as Indian tax, accounting and company laws require.
• Guest RSVP and travel details: deleted within [90 days] after your event, unless you ask us to delete them sooner.

We use reasonable safeguards to protect personal information, including limiting access to those who need it and using established platforms for storage and communication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authority as the law requires.

Under the DPDP Act, you may ask for a summary of the personal data we hold and how it is used, ask us to correct or complete it, ask us to erase it, withdraw your consent, and nominate someone to exercise these rights on your behalf if you are unable to.

If the UK or EU GDPR applies to you, you also have the right to data portability, to restrict or object to our processing, and to complain to your local data protection authority.

If you live in California, you may ask what personal information we collect, and ask us to delete or correct it. We do not sell or share personal information for cross-context behavioural advertising outside the Google tools described above, which you can control through the settings in section 6.

To use any of these rights, write to shaadi@theshaadicompany.com. We may need to verify your identity first, and we aim to respond within [30 days]. If you withdraw consent, it will not affect processing already carried out, and we may be unable to continue providing some services.

The Website is not directed at children, and we do not knowingly collect personal data from anyone under 18 without a parent or guardian's consent. If a guest list includes minors, the adult who supplies that information is responsible for being entitled to do so.

The Website may link to venues, vendors, social media platforms and messaging services such as WhatsApp. These have their own privacy practices, and we are not responsible for them.

We may update this policy from time to time. The latest version will always be on this page with its effective date at the top. If we make a significant change, we will take reasonable steps to let you know.

This policy is governed by the laws of India. Any dispute arising from it is subject to the jurisdiction of the courts at Panaji, Goa, without affecting any rights you have under mandatory laws where you live.

For questions about this policy or your personal information, or to make a complaint:

The Shaadi Company Campal Trade Centre, Dr Braganza Pereira Rd, Greenland Colony, Santa Inez, Panjim, Goa, India Email: shaadi@theshaadicompany.com Phone and WhatsApp: +91-8076692946

Grievance Officer: [Name], at shaadi@theshaadicompany.com. We will acknowledge complaints promptly and aim to resolve them within 30 days.