Privacy Policy

1. Overview & Scope

UrbanZen Private Limited ("Company", "We", "Us", or "Our"), having its registered office at 1st Floor, 150/86, Gopal Mishra Road, Behala, Kolkata – 700034, West Bengal, India, operates the UrbanZen reservation platform.

This Privacy Policy explains our practices regarding the collection, storage, utilization, disclosure, and protection of personal data provided by clients ("Users") who download, install, or browse our mobile software or website.

2. Categories of Information We Collect

To provide high-precision salon reservations and customized recommendations, we collect the following categories of information:

• Profile Information: Full name, mobile number, email address, gender, date of birth, and user profile photo.
• GPS Location Data: Precise or approximate location coordinates (collected only with explicit device permission) to highlight nearby partner salons and calculate distance.
• Booking Records & Preferences: Appointment schedules, service packages, favorite stylists, cancellation history, and user ratings.
• Transaction Data: Payment transaction IDs, invoice receipts, payment method types (UPI, Card, Net Banking). Note: Raw banking credentials, passwords, and CVV codes are processed directly by certified payment gateways; UrbanZen does NOT store banking credentials on its servers.
• Technical Telemetry: Device model, OS version, unique device identifier (UUID), IP address, app installation source, and crash log analytics.

3. How We Utilize Your Information

We process collected data strictly for operational, security, and service improvement purposes:

• To confirm, manage, and schedule appointment slots with your chosen salon or spa.
• To send automated SMS, WhatsApp, and push notifications for slot reminders, digital receipts, and booking status updates.
• To calculate distance and display nearby salons in Lucknow, Kolkata, and active operational cities.
• To deliver personalized promotional offers, reward points, and seasonal discount vouchers.
• To prevent fraudulent bookings, secure user accounts, and comply with statutory legal mandates in India.

4. Information Sharing & Third Parties

We strictly limit third-party data sharing to essential service fulfillment:

• Booked Establishment Partners: Your name, phone number, and package details are shared with the specific salon or spa you reserve to enable smooth check-in.
• Infrastructure Vendors: PCI-DSS compliant payment gateways, SMS gateway providers, and secure cloud server hosts under strict non-disclosure contracts.
• Legal Obligations: Compliance with valid court orders, subpoenas, or statutory law enforcement inquiries under the Information Technology Act, 2000.

5. Data Security & Encryption Protocol

We implement multi-layered physical, administrative, and technical safeguards to keep user data secure:

• All web and app data in transit is encrypted using 256-bit SSL/TLS protocol.
• Database records at rest are secured using AES-256 military-grade encryption.
• Server infrastructure is protected by real-time web application firewalls (WAF) and regular vulnerability testing.

6. User Rights & Data Erasure Protocol

You maintain control over your personal information:

• Access & Review: You can view and edit your profile details anytime inside the app settings.
• Location Permissions: You can grant or revoke GPS location permissions anytime through your phone settings.
• Account Deletion: To request permanent account deletion and complete data erasure, email support@urbanzen.co.in with the subject "Data Erasure Request". Accounts are purged within 30 days of verification.

7. Statutory Grievance Redressal Officer

In accordance with the Information Technology Act 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, the contact details of our Grievance Redressal Officer are: