This Privacy Policy explains how Shanthyalaya Healthstyle Private Limited, operating JR-X Experience Co., JA(A)N Bazaar and jaanbazaar.com, collects, uses, stores and protects personal information.
The Company determines the purposes and means of processing described in this Policy.
Privacy questions, requests and grievances: grievance@jaanbazaar.com Correspondence address: First Floor, Singarathoppil Arcade, Ramankulangara, Kollam, Kerala, India.
1. Information we collect
Depending on your interaction with us, we may collect:
- Contact details: name, email, phone or WhatsApp number, address and locality.
- Vendor details: business name, category, contact person, location, account information and documents supplied for a relevant business purpose.
- Event and purchase records: event attended, participating vendor, purchase date, purchase amount where supplied, booking history and related preferences.
- Payment information: agreed charges, instalments, payment method, amounts, transaction references, verification status and supporting receipts.
- Communications and choices: enquiries, support messages, feedback, marketing permissions and withdrawal requests.
- Technical information: IP address, browser and device information, access logs and information from cookies or similar technologies where used.
We do not ask for banking passwords, card PINs or payment OTPs in customer-registration or purchase-entry forms.
2. Sources of information
Information may be received directly from you, from your account activity, from authorised event personnel, or from participating vendors recording a customer interaction or purchase.
Relevant authentication, payment, hosting and communication providers may also process information in delivering their services.
Vendors collecting information for the Platform must explain the collection and make this Policy available. They must not treat a purchase as automatic permission for marketing.
3. Linking purchases across vendors and events
We may use a normalised phone number or another appropriate identifier to connect records across participating vendors and events.
This helps us understand repeat visits, purchases from different vendors and recorded spending. An amount that was not entered remains unknown.
Matching may be inaccurate where a phone number is shared, reassigned or entered incorrectly. You may request correction through grievance@jaanbazaar.com.
Vendors do not receive unrestricted access to the central database or another vendor’s customer records.
4. Purposes of processing
We use information to:
- Register visitors and vendors.
- Provide accounts and enforce access permissions.
- Manage events, bookings, instalments, payments and support.
- Maintain customer and purchase histories.
- Analyse purchase patterns, repeat visits and event performance.
- Improve event planning, relevant recommendations and customer support.
- Send necessary service and security communications.
- Send promotional email or WhatsApp messages where the required permission exists.
- Prevent fraud, investigate misuse and fulfil legal obligations.
We obtain consent where required and rely on another basis only where applicable law permits it.
Accepting Terms or browsing the website does not constitute blanket permission for every purpose.
5. Email and WhatsApp marketing
With the required permission, we may send event announcements, offers, invitations, reminders and recommendations through your selected channels.
Promotional permission is optional and separate from essential registration, purchase and booking functions.
You may withdraw permission by:
- Using an email unsubscribe link.
- Following the opt-out instructions in a WhatsApp message.
- Changing available communication preferences.
- Emailing grievance@jaanbazaar.com.
Withdrawal does not prevent necessary non-promotional messages concerning an existing booking, payment, security issue or support request.
We may retain a minimal suppression record to honour your request not to receive further marketing.
6. Purchase analysis and engine training
We may analyse purchase patterns to improve our internal recommendation, planning and support engines.
For training and evaluation, we prioritise aggregated or effectively anonymised information that does not identify individuals. Removing a name alone is not sufficient to guarantee anonymity.
Identifiable customer records will not be used for engine training unless the particular purpose is explained and separate, specific consent is obtained where required.
We do not permit providers to use identifiable customer records supplied through our services for their own general-purpose AI training.
A materially different future training use will require an appropriate assessment, updated notice and permission where applicable.
We do not attempt to re-identify effectively anonymised information.
7. Shanthyalaya group handling and no sale
We do not sell or rent personal information, customer lists or identifiable purchase histories.
Authorised personnel supporting the Company’s JR-X and JA(A)N Bazaar activities may access information only as needed for their duties.
Other Shanthyalaya group brands or entities do not receive unrestricted access merely because they belong to the group.
Before sharing personal information with a separate group entity for its own purpose or promotions, we will identify the receiving entity and purpose and obtain separate permission where required.
8. Service providers and lawful disclosures
Necessary service providers may process information for hosting, database storage, authentication, payments, communication delivery, security and support.
We limit such processing to what is necessary and use appropriate contractual and security arrangements. This service-provider processing is not a sale of customer data.
External authentication services, including Sign in with ChatGPT where used, process information under their own applicable policies. WhatsApp communications also involve WhatsApp and any authorised delivery provider.
We may disclose information where required by law, in response to a valid legal process, or where necessary and legally permitted to investigate fraud, address security incidents or protect lawful rights.
9. Security
We maintain reasonable technical and organisational safeguards appropriate to the information and risks involved.
Our safeguards include access restrictions, role-based permissions, secure transmission where supported and procedures for handling suspected unauthorised access.
We do not promise absolute security. If a personal-data incident occurs, we will investigate, take appropriate corrective action and provide notifications required by applicable law.
10. Retention and deletion
We retain identifiable information only while needed for the stated purpose or a relevant legal, accounting, security or dispute-resolution obligation.
The following criteria apply:
- Customer and purchase records: retained while reasonably necessary for the disclosed customer-service and analysis purposes; reviewed for continued necessity and deleted or effectively anonymised when no longer needed.
- Vendor and account records: retained during the relationship and afterwards only where necessary for outstanding obligations, disputes or lawful recordkeeping.
- Booking and financial records: retained for the applicable statutory period and any unresolved audit, claim or investigation.
- Marketing records: retained while permission remains valid, with periodic review of continued necessity.
- Suppression records: limited information may remain to prevent unwanted future contact.
- Security logs: retained for proportionate investigation and security needs and applicable mandatory periods.
- Backups: removed through controlled backup rotation, subject to necessary lawful preservation.
Withdrawal or account closure does not automatically require deletion of records that must lawfully be retained. Where deletion is requested, we will explain any applicable exception.
11. Requests and grievances
You may contact us to request information about your records, correction, deletion, withdrawal of consent or grievance resolution.
Where provided by applicable law, you may nominate another person to exercise relevant rights in the prescribed circumstances.
We may reasonably verify identity before releasing, changing or deleting information. Verification will be proportionate to the request.
We aim to acknowledge grievances within 48 hours and resolve them within 30 days, subject to applicable statutory requirements. Where a request requires further investigation, we will communicate its status.
You may approach a competent authority where applicable law provides that remedy.
12. Children’s information
Vendor and business accounts are intended for adults.
We do not knowingly use children’s personal information for targeted marketing or purchase-profile training.
Where information about a person under 18 is necessary for a service, we will follow applicable parental-consent and safeguarding requirements.
Parents and guardians may contact grievance@jaanbazaar.com concerning information relating to a child.
13. Processing outside India
Some service providers may process information outside India.
We assess relevant safeguards and applicable restrictions before using such arrangements. We do not represent that all information is stored exclusively in India.
14. Cookies and external links
Our Cookie Policy explains the use of cookies and similar technologies.
External websites, social platforms and independently operated services have their own privacy practices. Linking to them does not place their independent processing under our control.
15. Policy changes
We will publish updates when practices change and provide additional notice for material changes where appropriate.
An updated Policy does not automatically authorise unrelated processing. Fresh consent will be obtained where required.
16. Contact
Grievance Officer — Privacy and Data Requests Shanthyalaya Healthstyle Private Limited First Floor, Singarathoppil Arcade, Ramankulangara, Kollam, Kerala, India. Email: grievance@jaanbazaar.com