Privacy Policy

1. Who we are

TurfTap ("TurfTap", "we", "us", or "our") operates the website at turftap.co.in and related pre-launch experiences (together, the "Service"). For the purposes of the DPDP Act, we act as the Data Fiduciary for personal data processed through the Service, unless we clearly state otherwise (for example, where a payment provider processes data solely under its own terms).

2. Scope & Indian law

This Policy applies to personal data collected through the Service from users located in India or otherwise covered by Indian law. We aim to comply with the DPDP Act, 2023, rules issued thereunder, and other applicable Indian laws, including the Information Technology Act, 2000 and applicable rules (such as the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021), where relevant to our role as an online intermediary.

TurfTap is in pre-launch. Features such as in-app booking, maps, and partner dashboards may be introduced later; when they go live, we will update this Policy to describe any new categories of data and purposes.

3. Personal data we collect

3.1 Information you give us

• Early access & partner interest: name, email address, phone number (if you choose to provide it), city or metro, and any message or preferences you submit through our forms.
• Communications: content you send when you email us (for example at hello@turftap.co.in), including your email address and anything you include in the message.
• Future product use: when we launch booking and account features, we may collect account credentials, profile details, booking history, location or venue preferences, and similar data as described in the app and at signup. This Policy will be updated before those features collect new categories of data.

3.2 Information collected automatically

• Usage & technical data: pages viewed, approximate time on site, referrer, and similar analytics to understand how the Service is used.
• Device & browser: browser type, device type, operating system, and language where available from standard web requests.
• IP address: may be processed by our hosting and analytics providers for security, fraud prevention, and aggregated statistics. Where analytics tools anonymise or aggregate data, we rely on their documentation and settings.

4. Legal bases & purposes (India)

Under the DPDP Act, we process your personal data only for lawful purposes and, where required, with your consent. We use personal data to:

• Operate, secure, and improve the Service and our website;
• Respond to early access and partner enquiries and send service-related updates;
• Send marketing about TurfTap where you have opted in (you can withdraw consent anytime);
• Meet legal obligations and enforce our terms;
• Prepare for and provide future booking and venue features as described when you sign up.

5. Cookies & similar technologies

We may use cookies or local storage where needed for the site to function. Our analytics provider may use lightweight, privacy-oriented measurement. You can control cookies through your browser settings; blocking some cookies may affect how the site works.

6. Third-party services

We use service providers who process data on our behalf under contract and appropriate safeguards. They act as Data Processors (or equivalent) where applicable. These may include:

• Vercel — website hosting and Vercel Analytics for aggregated usage insights. See Vercel's documentation and privacy materials for details.
• Email & form tooling — providers we use to deliver messages or store signup responses (we will list major providers here as we wire production integrations).
• Payment & cloud providers — when we enable payments or app backends, those providers will process data under their policies; we do not store full card numbers on our servers.

Some processors may store or process data outside India. Where such transfers occur, we will comply with Chapter V of the DPDP Act and applicable notifications, including use of permitted transfer mechanisms and safeguards.

7. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting, or reporting requirements. Early access and enquiry data are typically retained until you ask us to delete it or until we no longer need it to operate TurfTap, unless a longer period is required by law.

8. Sharing of personal data

We do not sell your personal data. We may share personal data with:

• Service providers who help us run the Service (hosting, analytics, email);
• Professional advisers where legally required or prudent;
• Authorities when required by applicable Indian law or a valid legal process.

9. Your rights (Data Principals)

If you are in India, you have rights under the DPDP Act, including to:

• Obtain a summary of personal data we process and the processing activities;
• Request correction or updating of inaccurate or incomplete data;
• Request erasure of your personal data, subject to legal exceptions;
• Withdraw consent where processing is consent-based, without affecting prior lawful processing;
• Nominate another individual to exercise your rights in the event of death or incapacity, as prescribed under law;
• Redress grievances through our Grievance Officer (below) and, where applicable, the Data Protection Board of India.

To exercise these rights, email us at hello@turftap.co.in. We may need to verify your identity before responding.

10. Grievance Officer (India)

Under applicable Indian rules, we designate the following contact for privacy-related complaints and grievances:

• Grievance Officer, TurfTap
• Email: hello@turftap.co.in
• Website: turftap.co.in

We will acknowledge and endeavour to resolve grievances within timelines prescribed under applicable law, once fully in force and applicable to us.

11. Security

We implement reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure; we encourage you to use strong passwords when accounts launch and to keep your credentials confidential.

12. Children

The Service is not directed at children under 18 (or the age of majority in your state). We do not knowingly collect personal data from children without verifiable parental consent where required. If you believe a child has provided us personal data, please contact us and we will take appropriate steps.

13. Business transfers

If we are involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify you as required by applicable law.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and change the "Last updated" date. For material changes, we will provide notice as required by the DPDP Act and other applicable law (which may include email or a prominent notice on the Service).

15. Contact

Questions about this Privacy Policy or your personal data:

• Email: hello@turftap.co.in
• Website: turftap.co.in