Privacy Policy

1. Introduction

Sand-Hut India Private Limited ("we", "us", "our", "Sand-Hut") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, visit our website (sandhut.in), or interact with our mobile applications.

This policy complies with applicable Indian laws including the Information Technology Act, 2000, Digital Personal Data Protection Act, 2023, and international standards including Google Play Store and Apple App Store privacy requirements.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Identity Information: Name, email address, phone number, date of birth, gender
• Contact Information: Postal address, billing address, emergency contact details
• Account Information: Username, password, profile picture, preferences
• Payment Information: Credit/debit card details, bank account information, UPI IDs (processed securely through payment gateways)
• Professional Information: Job title, company name, industry, professional interests
• Sports Club Information: Fitness goals, health conditions, emergency contacts, membership preferences

2.2 Technical Information

• Device Information: Device type, operating system, browser type, IP address, device identifiers
• Usage Data: Pages visited, time spent on pages, click-through rates, feature usage
• Location Data: GPS coordinates (for sports club services), city, state, country
• App Analytics: App performance data, crash reports, user interaction patterns

2.3 Information from Third Parties

• Social media platforms (when you choose to connect your accounts)
• Payment processors (transaction confirmations and status)
• Marketing partners and analytics providers
• Public databases and government sources (for verification purposes)

3. How We Use Your Information

3.1 Service Provision

• Delivering software development, creative, and sports club services
• Processing payments and managing subscriptions
• Providing customer support and technical assistance
• Personalizing your experience and content recommendations

3.2 Communication

• Sending service-related notifications and updates
• Marketing communications about our services (with your consent)
• Responding to your inquiries and support requests
• Sending important policy or service changes

3.3 Improvement and Analytics

• Analyzing usage patterns to improve our services
• Conducting research and development for new features
• Monitoring service performance and security
• Creating anonymized statistical reports

3.4 Legal and Security

• Complying with legal obligations and government requests
• Preventing fraud, abuse, and security threats
• Enforcing our terms of service and policies
• Protecting the rights and safety of users and third parties

4. Information Sharing and Disclosure

4.1 Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Payment Processing: Razorpay, Paytm, and other authorized payment gateways
• Cloud Services: AWS, Google Cloud, Microsoft Azure for data storage and processing
• Analytics: Google Analytics, Firebase Analytics for service improvement
• Communication: Email service providers, SMS gateways for notifications
• Customer Support: Support ticket systems and communication tools

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.3 Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of others.

4.4 Consent-Based Sharing

We may share your information with other parties when you provide explicit consent for such sharing.

5. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: All data transmission is encrypted using SSL/TLS protocols
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Security audits and vulnerability assessments
• Data Minimization: We collect only necessary information
• Secure Storage: Data stored in secure, compliant cloud infrastructure
• Employee Training: Regular privacy and security training for staff
• Incident Response: Established procedures for security incident management

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide services to you and fulfill contractual obligations
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Support business operations and continuity

Specific retention periods:

• Account Information: Until account deletion plus 90 days
• Payment Records: 7 years (as per Indian accounting standards)
• Sports Club Records: 3 years after membership termination
• Marketing Data: Until you opt-out or 2 years of inactivity

7. Your Privacy Rights

Under applicable laws, you have the following rights regarding your personal information:

7.1 Access and Portability

• Request access to your personal information we hold
• Obtain a copy of your data in a structured, machine-readable format
• Transfer your data to another service provider

7.2 Correction and Updates

• Correct inaccurate or incomplete information
• Update your profile and preferences
• Modify your communication settings

7.3 Deletion and Restriction

• Request deletion of your personal information (subject to legal requirements)
• Restrict processing of your data in certain circumstances
• Withdraw consent for processing (where consent is the legal basis)

7.4 Marketing Opt-out

• Unsubscribe from marketing communications
• Modify your communication preferences
• Opt-out of targeted advertising

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

8.1 Types of Cookies

• Essential Cookies: Required for basic website functionality
• Performance Cookies: Help us understand how you use our services
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising and remarketing

8.2 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may impact your experience with our services.

9. International Data Transfers

While we primarily store data within India, some of our service providers may be located outside India. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the Indian government
• Certification schemes and codes of conduct
• Binding corporate rules for multinational organizations

10. Mobile Application Privacy

10.1 App Permissions

Our mobile apps may request the following permissions:

• Camera: For profile pictures and document scanning
• Location: For sports club check-ins and location-based services
• Storage: For saving files and offline functionality
• Contacts: For inviting friends and emergency contact features
• Notifications: For service alerts and updates

10.2 App Store Privacy

Our apps comply with Google Play Store and Apple App Store privacy requirements, including privacy labels and data safety declarations.

11. Children's Privacy

Our services are not intended for children under 13 years of age. For sports club services, we may serve minors (13-18) with parental consent. When we collect information from minors:

• We obtain verifiable parental consent
• We collect only necessary information for the service
• Parents can review, modify, or delete their child's information
• We implement additional security measures for minor's data

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. We will notify you of material changes through:

• Email notifications to registered users
• Prominent notices on our website and mobile apps
• In-app notifications for mobile users
• Updates to the "Last Updated" date at the top of this policy

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: