Privacy Policy
Privacy Policy
Last Updated: 01/07/2025
1. INTRODUCTION
Privilege Perks is a venture of Catepult Ventures (“Parent Company”). At Privilege Perks (“we,” “us,” “our”), operated by Catepult Ventures, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, process, store, share, and protect your personal data when you use our services, website, mobile application, or interact with our employee discount platform.
This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000, and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011.
By using our services, you consent to the collection and use of your information in accordance with this Privacy Policy.
2. DEFINITIONS
• Personal Data: Any data about an individual who is directly or indirectly identifiable by such data
• Sensitive Personal Data or Information (SPDI): As defined under the IT Act and SPDI Rules, including passwords, financial information, health information, biometric information, etc.
• Data Principal: The individual to whom the personal data relates
• Data Fiduciary: Catepult Ventures, operating Privilege Perks, as the entity determining the purpose and means of processing personal data
• Processing: Any operation performed on personal data including collection, storage, use, disclosure, etc.
3. DATA WE COLLECT
3.1 Information You Provide Directly
We collect personal information when you:
• Register for a Privilege Perks account
• Make purchases or redeem rewards
• Contact customer service
• Participate in surveys, promotions, or contests
• Subscribe to newsletters or marketing communications
• Name, email address, phone number
• Mailing address and billing address
• Date of birth and gender
• Payment information (processed securely through third-party payment processors)
• Purchase history and transaction details
• Communication preferences
3.2 Information Collected Automatically
When you use our services, we automatically collect:
• Device information (type, operating system, browser)
• IP address and location data
• Website usage patterns and navigation behavior
• Cookies and similar tracking technologies
• App usage analytics and performance data
3.3 Information from Third Parties
We may receive information from:
• Partner merchants and brands
• Social media platforms (if you choose to connect your accounts)
• Payment processors and financial institutions
• Marketing and analytics service providers
4. PURPOSE AND LEGAL BASIS FOR DATA PROCESSING
We process your personal data for the following purposes with your consent:
4.1 Primary Purposes
• Account Management: Creating and maintaining your Privilege Perks account
• Transaction Processing: Processing purchases, returns, and reward redemptions
• Customer Service: Responding to inquiries, complaints, and support requests
• Loyalty Program Operations: Tracking points, rewards, and program benefits
4.2 Secondary Purposes (with your explicit consent)
• Marketing Communications: Sending promotional offers, product recommendations, and program updates
• Personalization: Customizing your experience based on preferences and behavior
• Analytics: Understanding user trends to improve our services
• Research: Conducting market research and customer satisfaction surveys
4.3 Legal Compliance
• Complying with applicable laws and regulations
• Responding to legal processes and government requests
• Preventing fraud and ensuring security
5. CONSENT MANAGEMENT
In accordance with the DPDP Act, 2023, our consent framework ensures that consent is:
• Free: Given without coercion or deception
• Specific: For clearly defined purposes
• Informed: With clear information about data usage
• Unconditional: Without being bundled with other terms
• Unambiguous: Through clear affirmative action
5.1 Consent Categories
• Essential Services: Required for basic account functionality
• Marketing Communications: Optional for promotional content
• Analytics and Personalization: Optional for enhanced user experience
• Third-Party Sharing: Optional for partner offers and services
5.2 Managing Your Consent
You can withdraw or modify your consent at any time through:
• Account settings on our website/app
• Email preferences center
• Contacting our customer support
• Using the unsubscribe link in communications
6. DATA SHARING AND DISCLOSURE
6.1 We DO NOT sell, rent, or trade your personal information.
6.2 We may share your data in the following circumstances:
With Your Consent:
• Partner merchants for reward redemption
• Third-party service providers for enhanced services
Service Providers:
• Payment processors for transaction handling
• Technology providers for platform maintenance
• Marketing agencies for communication delivery
• Analytics providers for service improvement
Parent Company and Affiliates:
• Catepult Ventures and its other ventures for business operations
• Shared services and administrative functions
• Consolidated reporting and analytics
Legal Requirements:
• Government authorities when legally mandated
• Law enforcement for fraud prevention
• Courts in response to legal proceedings
• In case of merger, acquisition, or business restructuring
6.3 Third-Party Safeguards
All third parties with access to your data are bound by:
• Strict contractual obligations
• Data protection and security standards
• Purpose limitation and data minimization principles
7. DATA SECURITY MEASURES
We implement comprehensive security measures including:
7.1 Technical Safeguards
• SSL/TLS encryption for data transmission
• Advanced encryption for data storage
• Regular security audits and vulnerability assessments
• Multi-factor authentication for account access
• Intrusion detection and prevention systems
7.2 Organizational Safeguards
• Employee training on data protection
• Access controls and need-to-know principles
• Regular security policy reviews
• Incident response procedures
• Data breach notification protocols
7.3 Limitations
While we implement industry-standard security measures, no data transmission over the internet is 100% secure. You transmit data at your own risk, and we cannot guarantee absolute security.
8. YOUR RIGHTS AS DATA PRINCIPAL
Under the DPDP Act, 2023, you have the following rights:
8.1 Right to Information
• Know what personal data we hold about you
• Understand how your data is being processed
• Receive information in clear, simple language
8.2 Right to Correction and Erasure
• Correct inaccurate or incomplete data
• Request deletion of personal data (subject to legal requirements)
• Update your account information
8.3 Right to Data Portability
• Receive your data in a structured, machine-readable format
• Transfer your data to another service provider
8.4 Right to Grievance Redressal
• File complaints about data processing
• Seek resolution through our grievance mechanism
8.5 Exercising Your Rights
To exercise these rights, contact us at:
• Email: support@privilegeperks.in
• Phone: +91 9930097413
• Written request to our registered address
9. COOKIES AND TRACKING TECHNOLOGIES
9.1 Types of Cookies We Use
• Essential Cookies: Required for website functionality
• Analytics Cookies: For understanding user behavior
• Marketing Cookies: For personalized advertising
• Preference Cookies: For remembering your settings
9.2 Cookie Management
You can control cookies through:
• Browser settings and preferences
• Our cookie consent manager
• Opt-out tools for advertising cookies
9.3 Third-Party Cookies
We may allow third-party cookies for:
• Social media integration
• Analytics and measurement
• Advertising and marketing
10. CROSS-BORDER DATA TRANSFERS
10.1 International Transfers
We may transfer your data outside India to:
• Cloud service providers with global infrastructure
• International payment processors
• Analytics and marketing service providers
10.2 Transfer Safeguards
All international transfers comply with:
• DPDP Act requirements
• Adequate data protection standards
• Contractual safeguards and binding agreements
• Regular compliance monitoring
11. DATA RETENTION
11.1 Retention Periods
• Account Data: Until account closure plus 7 years for legal compliance
• Transaction Data: 7 years from transaction date
• Marketing Data: Until consent withdrawal or 3 years of inactivity
• Analytics Data: In aggregated, anonymized form for business insights
11.2 Deletion Process
Upon retention period expiry or deletion request:
• Data is securely deleted from active systems
• Backup copies are purged within 90 days
• Anonymized data may be retained for analytics
12. CHILDREN’S PRIVACY
12.1 Age Restrictions
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without verifiable parental consent.
12.2 Parental Rights
If you believe we have collected data from a minor:
• Contact us immediately for data removal
• Provide proof of parental authority
• We will delete the data within 30 days
12.3 Enhanced Protection
For users under 18 (with parental consent):
• Additional consent requirements
• Restricted data processing
• Enhanced security measures
• Regular consent verification
13. MARKETING COMMUNICATIONS
13.1 Communication Types
• Promotional offers and discounts
• New product announcements
• Loyalty program updates
• Seasonal campaigns and events
13.2 Opt-Out Options
You can unsubscribe from marketing communications:
• Using unsubscribe links in emails
• Updating preferences in your account
• Contacting customer support
• SMS STOP for text messages
13.3 Transactional Communications
Essential communications (order confirmations, account updates) will continue even if you opt out of marketing.
14. GRIEVANCE REDRESSAL MECHANISM
14.1 Grievance Officer
For data protection concerns, contact our designated Grievance Officer:
Name: Anandanarayanan Kalamattom
Designation: Data Protection Officer
Email: support@privilegeperks.in
Phone: +91 9930097413
Address: 145 – C, Oshiwara Industrial Centre, new Link Road, opp. Oshiwara Bus Depot, Goregaon West, Mumbai – 400104. Maharashtra. India.
Working Hours: Monday to Saturday, 11:00 AM to 6:00 PM
14.2 Complaint Process
1. Submit complaint via email or written request
2. Acknowledgment within 72 hours
3. Investigation and resolution within 30 days
4. Written response with resolution details
14.3 Escalation
If unsatisfied with our response, you may approach:
• Data Protection Board of India
• Consumer courts
• Cyber crime authorities
15. UPDATES TO THIS POLICY
15.1 Policy Changes
We may update this Privacy Policy to reflect:
• Changes in applicable laws
• New features or services
• Enhanced security measures
• User feedback and requirements
15.2 Notification Process
Significant changes will be communicated through:
• Email notification to registered users
• Prominent notice on our website/app
• Push notifications for mobile users
• 30-day advance notice for material changes
15.3 Continued Use
Continued use of our services after policy updates constitutes acceptance of the revised terms.
16. CONTACT INFORMATION
16.1 General Inquiries
Email: info@privilegeperks.in
Phone: +91 9930097413
Website: www.privilegeperks.in/privacy
16.2 Registered Office
Catepult Ventures
[145 – C, Oshiwara Industrial Centre, new Link Road, opp. Oshiwara Bus Depot, Goregaon West, Mumbai – 400104. Maharashtra. India.
GSTIN: 27DKKPS4133K1ZO
Privilege Perks Platform Operated By:
Catepult Ventures
17. COMPLIANCE STATEMENT
This Privacy Policy complies with:
• Digital Personal Data Protection Act, 2023
• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices) Rules, 2011
• Consumer Protection Act, 2019
• Other applicable Indian data protection laws
Effective Date: 01/07/2025
Policy Version: 1.0
This privacy policy is available in multiple Indian languages as required by law. For translations, visit our website or contact customer support.