Privacy Policy

Last updated 26 September 2026

1. Who we are

1.1 This policy explains how Exhibition and Expo Zone (a partnership firm, GSTIN 07AALFE9950E1Z6, 2nd Floor, 28, Asola Extension, Khasra No. 393, Fateh Pur Beri, near Ekta Kunj Society, New Delhi, Delhi 110074) collects and uses your personal data when you use exhibitionandexpozone.com, book a visitor pass, send a stall enquiry, or talk to us on WhatsApp.

1.2 We follow India's Digital Personal Data Protection Act, 2023 and the rules made under it. We are the "data fiduciary" for the data described here.

2. What we collect

2.1 Stall enquiries: your name, company or brand, phone number, business type, and — if you give them — your email, city, what you sell, the space you need, the best time to call and your message.

2.2 Visitor passes: your name, phone number and email, the event, the number of passes and the names you add for the other people, and — if you give them — your company, the kind of visitor you are and your city.

2.3 Payments (visitor passes only): the amount, the number of passes, the payment status, the payment method type (UPI, card or net banking), the PhonePe transaction ID and our booking ID. We never receive or store your card number, CVV, card PIN, UPI PIN or bank login. Those are entered on PhonePe's secure page and handled only by PhonePe and your bank.

2.4 Messages: what you write to us on WhatsApp, email or the site, and our replies.

2.5 Technical data: your IP address, browser and device type, pages visited and the time of visit, collected by our hosting server logs and any analytics we use (see section 7).

2.6 Event photos and video: images taken at our exhibitions may include you (see Terms, section 5).

2.7 We do not knowingly collect sensitive data such as health, religion or biometric information.

3. Why we use it

3.1 To answer your enquiry and send you information you asked for.

3.2 To call you back about a stall, and — if you book one — to confirm and manage your booking.

3.3 To issue your visitor passes, email them to you, and check them at the entrance (the QR code on each pass shows our team the pass holder's name and booking).

3.4 To verify payments with PhonePe and process refunds.

3.5 To tell you about the edition you booked or registered for: timings, venue, changes, reminders.

3.6 To tell you about future editions and offers — only if you agreed to this, and you can opt out any time.

3.7 To publish event photos and, with your agreement, feature your brand on our Instagram and website.

3.8 To keep our site secure, meet our legal and tax obligations, and handle disputes.

4. Our basis for using it

4.1 Consent. When you submit a form or pay, you tick a box agreeing to this policy. Marketing messages need a separate tick. You can withdraw consent at any time (section 9); this does not affect what we did before you withdrew.

4.2 Legitimate uses allowed by law. We also use data where the law lets us without separate consent: to perform the booking you asked for, to keep tax and accounting records, to comply with a legal order, and for safety at the venue.

5. Who we share it with

We share only what each party needs, and we do not sell your data.

5.1 PhonePe (PhonePe Private Limited, Bengaluru) — to take payment for visitor passes and process refunds. PhonePe's own privacy policy applies to what you enter on its page: https://www.phonepe.com/privacy-policy/

5.2 Google Workspace / Google Sheets — every stall enquiry and every paid visitor pass is emailed to us and saved in a Google Sheet that only our team can open.

5.3 Our email provider — to send confirmations, invoices and updates.

5.4 WhatsApp (Meta) — when you tap the WhatsApp button or message us, the conversation is on WhatsApp's platform and under WhatsApp's privacy policy. We use it to reply to you and send booking confirmations.

5.5 Hosting — the website runs on Cloudflare (Cloudflare, Inc.), and bookings and enquiries are stored in Cloudflare's database in the Asia-Pacific region. Emails are sent from our mailbox at Hostinger, passed on through a small sending service on Vercel. These providers process data only to run the site and deliver email, not for their own purposes.

5.6 Instagram (Meta) — our Instagram feed on the site links to Instagram; Instagram sets no cookies on our site unless you click through. If we feature your brand on Instagram, we post only what you approved.

5.7 The venue — exhibitor names for set-up access; visitor names only if the venue requires a guest list for security.

5.8 Accountants, lawyers, banks and tax authorities — invoices and payment records as needed by law.

5.9 Data outside India. PhonePe, Google and Meta may process data on servers outside India. They do so under their own safeguards and the transfers are allowed under Indian law.

6. How long we keep it

6.1 Stall enquiries that do not lead to a booking: 12 months after the event, then deleted.

6.2 Visitor pass bookings, stall bookings and payment records: 8 years, as required by tax and company law.

6.3 WhatsApp and email conversations: 24 months, or shorter if you ask.

6.4 Server logs: 90 days.

6.5 Event photos and videos: until we stop using them or you ask us to remove an image of you.

6.6 Marketing list: until you unsubscribe or 3 years after your last contact with us, whichever is earlier.

7. Cookies and analytics

7.1 The site uses only the cookies it needs to work (for example to remember your booking while you are sent to PhonePe and back).

7.2 We count visits with Cloudflare Web Analytics, which sets no cookies and does not identify you: it records pages visited, page speed, device type and rough location, in aggregate only.

7.3 We do not use advertising cookies or retargeting pixels.

8. How we keep it safe

8.1 The site uses HTTPS. Payment details are handled by PhonePe on PCI-DSS compliant systems and never pass through our server.

8.2 Our Google Sheet and email accounts are protected by two-step verification and opened only by team members who need them.

8.3 Payment keys are stored on the server, not in the website code.

8.4 No system is perfectly secure. If a breach affects your data we will inform you and the Data Protection Board of India as the law requires.

9. Your rights

Under the Digital Personal Data Protection Act you can:

9.1 Access — ask what personal data we hold about you and who we have shared it with.

9.2 Correct — ask us to fix or update your details.

9.3 Erase — ask us to delete your data. We will do so unless we must keep it by law (for example invoices).

9.4 Withdraw consent — stop marketing messages or withdraw any consent you gave. Reply STOP on WhatsApp, click unsubscribe in an email, or write to us.

9.5 Nominate — name a person who can exercise these rights for you if you are unable to.

9.6 Complain — raise a grievance with our Grievance Officer (section 10). If you are not satisfied with our reply, you may complain to the Data Protection Board of India. To use any of these rights, write to info@exhibitionandexpozone.com from the email or phone number you registered with. We will reply within 15 days.

10. Grievance Officer

Simran (Partner) Exhibition and Expo Zone, 2nd Floor, 28, Asola Extension, Khasra No. 393, Fateh Pur Beri, near Ekta Kunj Society, New Delhi, Delhi 110074 Email: info@exhibitionandexpozone.com · Phone / WhatsApp: +91 92118 61074 Hours: Monday to Saturday, 10:00 AM – 6:00 PM IST We acknowledge grievances within 48 hours and resolve them within 15 days.

11. Children

11.1 Our services are for adults. Stall bookings and visitor pass purchases must be made by people aged 18 or over. If we learn we have collected data from a child without a parent's consent, we will delete it.

12. Links to other sites

12.1 The site links to PhonePe, Instagram, WhatsApp and Google Maps. Their privacy policies apply on their sites, not ours.

13. Changes to this policy

13.1 We may update this policy. The "Last updated" date shows the current version. If a change affects how we use data you already gave us, we will tell you by email or WhatsApp before it takes effect.