Dinklr ("we", "us", or "our") operates the website at dinklr.com and the associated booking, venue check-in and café services at our venue in Vabasandra, Bengaluru. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and stored, and the rights you have over your data under the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable Indian laws.
By submitting your personal data on our website, you give your free, specific, informed, and unambiguous consent to the practices described in this policy. You may withdraw consent at any time (see Section 7).
1.What personal data we collect
We collect only the data necessary for the purposes listed in Section 2:
| Data | Why it is required |
|---|---|
| Name and mobile number | Your Dinklr guest record. The mobile number is how we recognise you at the desk, on court QR codes and on café bills. |
| Email (optional) | Booking receipts and replies to your questions. |
| Birthday, company, how you heard about us (all optional) | Birthday offers, group-booking offers for your company, and knowing which of our marketing works. |
| WhatsApp consent | Whether we may send you WhatsApp updates about open games, tournaments and offers. Recorded with the time you agreed. |
| Bookings and payments | Activity, court, date, time, players, amount and payment status. Card and UPI details are handled by our payment provider, Cashfree; we never see or store them. |
| Visits and check-ins | When you check in at reception or pay at a court QR code: the time, group size and what you came for. |
| Hour packs | Packs bought, hours used and hours left. |
| Café orders | Items, amount, table number and time of your orders at the Shack, from our Petpooja billing system, linked to you by your mobile number or by a table QR scan. |
| Event sign-ups | Events and dates you register for. |
| Notes by our team | Practical notes such as a preferred court. Never sensitive information. |
We do not collect government IDs, financial account numbers, passwords in plain text, biometric data, or any other Sensitive Personal Data as defined under the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2.Purpose of processing
Your data is used only for the following purposes:
- ›Taking and confirming bookings and payments, and running hour packs
- ›Checking you in at reception and recognising you when you return
- ›Linking your café orders and event sign-ups to your guest record
- ›Helping our team suggest things that suit you, such as an hour pack, a birthday party or a game you have not tried, based on your visits and orders
- ›Sending WhatsApp updates about games and offers, only if you said yes
- ›Communicating urgent venue updates (for example closures or safety notices)
- ›Responding to your enquiries, and understanding in aggregate how the venue is used (busy hours, popular activities)
We never sell your data or pass it to other businesses for their marketing. We will not use it for any purpose beyond those listed above without asking for your consent again.
3.How we store and protect your data
Personal data is stored on Supabase, a cloud database platform using PostgreSQL. Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted to authorised Dinklr staff, each with their own login, and staff only see what they need for their role.
We implement reasonable security practices as required under the IT (Reasonable Security Practices and Procedures) Rules, 2011, including access controls, audit logging, and periodic security reviews.
4.Sharing of personal data
We do not sell, rent, or trade your personal data. Data may be shared only in the following limited circumstances:
- ›Service providers that run Dinklr for us and act only on our instructions: Supabase (database), Vercel (website hosting), Cashfree (payments), Petpooja (café billing), Zoho ZeptoMail (emails) and Telegram (instant alerts to our staff, which include your name, mobile number and booking or check-in details).
- ›WhatsApp (Meta) when you message us, or to send you updates if you agreed to receive them.
- ›When required by law, court order, or a competent government authority under Indian law.
5.Data retention
We keep your guest record for 24 months after your last visit, booking or order. Payment and billing records are kept for as long as Indian tax and accounting law requires.
After this period, your data will be permanently deleted or anonymised unless retention is required by applicable law.
6.Cookies and local storage
Our website uses your browser's local storage to remember your display theme, a random visitor ID so a campaign page view is counted once a day, and, on our venue QR pages, your mobile number so you don't have to type it again at each court. These stay on your device; you can clear them in your browser settings or with "Change number". When you book, we also note how you reached us (for example a campaign link or code). We do not use advertising pixels or third-party analytics. If this changes, we will update this policy and ask for consent where required.
7.Your rights under DPDPA 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
Right to access
Request a summary of the personal data we hold about you.
Right to correction
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data. We will comply within 30 days unless retention is required by law.
Right to withdraw consent
Withdraw consent at any time. This will not affect lawfulness of processing before withdrawal, but we will stop processing your data going forward.
Right to grievance redressal
Raise a complaint with us. If not resolved within 30 days, you may approach the Data Protection Board of India once constituted.
Right to nominate
Nominate another individual to exercise rights on your behalf in case of death or incapacity.
To stop WhatsApp updates, tell our front desk or message us "STOP". To exercise any of these rights, email us at ajay@dinklr.com with the subject line "Data Rights Request". We will respond within 30 days.
8.Children's data
Bookings, check-ins and sign-ups must be made by an adult (18 or over). Children are welcome to play (skimboarding is for ages 10 and up; air-rifle is 18+ only), but we record the details of the adult who books, not the child. If we learn that a child's data was submitted without a parent's consent, we will delete it promptly.
9.Changes to this policy
We may update this policy from time to time. We will post material changes on this page and, where the law requires, ask for your consent again. The "Last updated" date at the top of this page always reflects the current version.
10.Contact & grievance officer
Data Fiduciary / Grievance Officer
Dinklr Sports & Lifestyle Venue
Email: ajay@dinklr.com
WhatsApp: +91 93536 10362
Response time: within 30 days of receipt