This Notice is provided in accordance with the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules and standards made under it. For the purposes of the DPDP Act, E FACTOR EXPERIENCES is the “Data Fiduciary” in respect of the personal data we collect from you, and you are the “Data Principal”.

Personal Data We Collect

Depending on your interaction with the Website and our events, we may collect personal data including:

• name and contact details;
• organisation/company information;
• registration and ticketing details;
• payment-related information;
• communication preferences;
• technical information such as IP address, browser type, device information and cookie data; and
• any other information voluntarily submitted by you.

Lawful basis for processing your personal data

We process your personal data on the following lawful bases recognised under the DPDP Act:

• Your consent for most processing in connection with your registration, attendance, and our communications with you. Your consent is sought through a clear affirmative action, such as ticking a checkbox at the time of registration.
• Certain legitimate uses recognised under the DPDP Act including compliance with any law, judgment or order, performance of a function under law, and responding to a medical emergency or threat to public health or safety.

Sharing of Personal Data

We may share personal data with service providers, vendors, payment processors, event partners, technology providers and professional advisers strictly on a need-to-know basis and subject to appropriate confidentiality and security obligations.

Event / Media

By attending our events, you acknowledge that photographs, audio recordings and video recordings may be captured for documentation, promotional and marketing purposes. If you do not wish to appear in such materials, please contact us at [INSERT DETAILS].

Retention of Personal Data

We retain personal data only for as long as necessary for the purposes described in this Notice, including compliance with legal obligations, dispute resolution and enforcement of agreements.

Your rights as a Data Principal under the DPDP Act

Subject to applicable law, you have the following rights regarding your personal data:

• You may request details about the personal data we hold about you, how we use it, and with whom it has been shared.
• You may ask us to correct inaccurate or incomplete information or delete your personal data where it is no longer necessary for the purpose for which it was collected.
• You may contact our Grievance Officer if you have any concerns about how your personal data is being handled.
• You may nominate another person to exercise your rights on your behalf in the event of your death or incapacity.
• You may withdraw your consent at any time. This will not affect any processing carried out before your consent was withdrawn, and we may continue processing your data where required by law or otherwise permitted under applicable law.

You also have the right to file a complaint with the Data Protection Board of India in accordance with applicable law.

How to exercise your rights or withdraw consent

You may exercise any of the rights set out above, including withdrawal of consent, by writing to our Grievance Officer at the contact details given in the last section. To withdraw consent for marketing communications specifically, you may also use the “Unsubscribe” link provided in our emails.

We may ask you to verify your identity before we act on your request. We will endeavour to acknowledge your request within a reasonable period and aim to respond within thirty (30) days, or such longer period as may be permitted under applicable law. There is no charge for exercising your rights, unless your request is manifestly unfounded or excessive.

Personal data breach notification

In the event of a personal data breach affecting your personal data, we will notify you and the Data Protection Board of India in accordance with the requirements of the DPDP Act, including the nature of the breach, its likely consequences, and the measures we have taken or propose to take to address it.

Cookies and similar technologies

Our platform uses cookies and similar technologies to operate the site, remember your preferences, and (with your consent) to measure performance and deliver marketing. You can manage your preferences via the cookie banner on our platform or your browser settings. Essential cookies, which are necessary for the platform to function, cannot be switched off.

Personal data of children

Our platform and the services we offer are intended for individuals aged eighteen (18) years and above. We do not knowingly collect personal data of children except where verifiable consent of a parent or lawful guardian has been obtained in accordance with the DPDP Act. If you believe a child’s personal data has been collected without such consent, please contact our Grievance Officer.

Consent for marketing communications

Where we wish to send you marketing communications about our future events, offers, content, or related promotions, we will seek your separate, specific consent for that purpose at the time of registration through a clearly marked, optional checkbox. Ticking this checkbox is not a condition of completing your registration. You can withdraw this consent at any time by clicking “Unsubscribe” in any marketing email or writing to our Grievance Officer.

Grievance Redressal

If you have any grievances or concerns regarding the processing of your personal data, you may contact our Grievance Officer at:

Name: Surbhi Garg
Designation: Grievance Officer
Email: explore@expdesign.org
Address: E Factor Experiences Limited, E Factor House, A 49, Sector 67 Rd, Block A, Sector 67, Noida, Uttar Pradesh 201309

We will address grievances and requests in accordance with applicable law.