Privacy policy
What Surat Na Vighneshwar collects when you book or take a membership, why we need it, and what we do with it.
Last updated 9 August 2026
1. Scope
This policy covers personal information collected by Surat Na Vighneshwar through this website. It is published in line with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023.
2. What we collect
| Information | When | Why we need it |
|---|---|---|
| Name, e-mail address, mobile number | When you create an account | To identify your bookings and send confirmations |
| Password (stored only as a one-way hash) | When you create an account | To keep your account secure |
| Booking details — slot, date, number of people | When you book | To allot places and manage capacity at the pandal |
| Payment reference, transaction ID, status | When you pay | To match your payment to your booking and handle refunds |
| Server log data — IP address, browser, pages visited | Automatically | Security, fraud prevention and diagnosing faults |
What we never collect
We do not receive or store your card number, expiry date, CVV, UPI PIN or net-banking password. Those are entered on PayU's own secure page and stay with PayU and your bank.
3. Why we process your information
- To create and run your account.
- To take, confirm and manage your aarti, darshan or membership booking — this is the purpose you give the information for.
- To send you transactional messages: confirmation of a booking, a payment receipt, a change to a slot, or an e-mail verification link.
- To meet our record-keeping obligations and to respond to a lawful request from an authority.
- To keep the site secure and to investigate misuse.
We do not sell your information, and we do not use it for advertising.
4. Who we share it with
- PayU — our payment gateway. Your name, e-mail, mobile number and the amount are passed to PayU so the payment can be taken and reconciled. PayU processes this under its own privacy policy.
- WhatsApp Business Platform (Meta) — where enabled, a booking notification is sent to the committee's own number. Only the booking summary is sent.
- Our hosting provider — the servers on which this site and its database run.
- Authorities — where we are required to disclose information by law.
Committee volunteers who manage the calendar can see booking names, contact numbers and payment status in the administration panel. They are asked to use this only for running the utsav.
5. Cookies
This website sets one strictly necessary cookie, a session cookie, which keeps you signed in as you move between pages. It carries no advertising identifier and expires when you close your browser. We do not run third-party advertising or analytics trackers on this site.
Where Instagram reels are embedded on a page, Instagram may set its own cookies when the embed loads. That is governed by Meta's privacy policy.
6. How long we keep it
- Account details — while your account is open, and for one year after you ask us to close it.
- Booking and payment records — for eight years, so that accounts, audits and any refund or dispute can be settled.
- Server logs — up to twelve months.
7. How we protect it
The site is served only over HTTPS. Passwords are stored as salted one-way hashes and cannot be read by anyone, including us. Access to the administration panel is password-protected and limited to committee members. Payment credentials never reach our servers. No system is perfectly secure, but we review these measures and act promptly if we find a weakness.
8. Your rights
You may ask us to:
- tell you what personal information we hold about you;
- correct anything that is wrong — you can also edit your name and mobile number yourself on your account page;
- delete your account and the information tied to it, except records we must keep for accounting or legal reasons;
- withdraw a consent you previously gave — this does not affect anything already done on it.
Write to our contact e-mail (to be published) and we will respond within 30 days.
9. Children
Accounts are for adults. Children are of course welcome at the pandal, and a parent or guardian may include them in the number of people on a booking. We do not knowingly collect information directly from a child.
10. Grievance officer
In accordance with the Information Technology Act, 2000 and the rules made under it, complaints about the handling of personal information may be sent to:
Grievance Officer (name to be published)
Surat, Gujarat, India
E-mail to be published
Phone to be published
Every day, 9:00 AM to 9:00 PM (IST)
11. Changes
If this policy changes, the updated version appears on this page with a new date at the top. Where the change is significant we will also tell account holders by e-mail.
Questions about this policy
Write to our contact e-mail (to be published) or call our contact number (to be published). Our full contact details are on the contact page.