Privacy Policy.
Introduction
Welcome to Botfit. This Privacy Policy explains how Botfit Entertainment Pvt. Ltd. collects, uses, shares, stores, and protects your personal information when you:
- Visit our website www.botfit.in
- Contact us by phone, email, or WhatsApp
- Visit our family entertainment centre in Sector 60, Gurugram
- Book a birthday party, corporate event, school trip, or general visit
- Interact with us on social media
This Privacy Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and rules made thereunder, and serves as an electronic record under the Information Technology Act, 2000.
Who We Are
We are the Data Fiduciary responsible for your personal data.
| Detail | Information |
|---|---|
| Legal Name | Botfit Entertainment Pvt. Ltd. |
| Venue | Sector 60, Gurugram, Haryana, India |
| Phone | 080-4709-5095 |
| +91 93108 02266 | |
| info@botfit.in | |
| Website | https://www.botfit.in |
Information We Collect
Through website enquiry forms, callback requests, and WhatsApp/phone bookings:
- Full name, phone number, and email address
- Type of event (birthday party, corporate, school trip, walk-in, etc.)
- Event date, guest count, and special requests
At the venue (mandatory entry register and consent forms):
- Parent/guardian's name and contact number
- Child's name, age, and date of birth
- Allergies, dietary requirements, or relevant medical information disclosed by the parent/guardian
- Emergency contact details and signed parental consent form
For corporate events and school trips:
- Organisation name, point of contact, billing details
- Attendee lists or headcount provided by the organisation
With prior parental consent (captured through the signed consent form), we photograph and record guests — including children — during their time at the venue. These may be used for:
- Sharing with the parent/guardian after the party
- Internal record-keeping
- Marketing and promotional purposes on our website, Instagram (@bot_fit_), Facebook, and other social platforms
You may withdraw consent for marketing use of photos at any time by writing to us. We will stop further use, though images already published may take time to be removed from third-party platforms.
CCTV cameras operate throughout the venue for the safety and security of children, guests, and staff. Footage is stored for a limited period, never used for marketing, and access is restricted to authorised personnel only.
All online payments are processed through Razorpay. We do not store your debit/credit card numbers, UPI IDs, CVV, or net banking credentials. Razorpay's own privacy policy governs payment data. We also accept cash payments at the venue in line with Section 269ST of the Income Tax Act, 1961.
When you visit www.botfit.in, we and our partners automatically collect IP address, approximate location, browser type, device type, pages viewed, time spent, and click activity. We use the following tools:
- Google Analytics and Google Tag Manager — website analytics
- Google Ads — advertising and remarketing
- Meta (Facebook/Instagram) Pixel — advertising on Facebook and Instagram
Children's Personal Data — Special Protections
A significant part of what we do involves children. Under Section 9 of the DPDP Act, 2023, processing personal data of children (persons under 18) requires verifiable consent from a parent or lawful guardian.
We comply with this requirement by:
- Collecting children's data only through a parent or guardian — never directly from a child
- Requiring a signed Parental Consent Form before children participate in activities or are photographed for marketing
- Not undertaking targeted advertising directed at children
- Not tracking, profiling, or monitoring children's behaviour beyond what is required for our services and their safety
- Not allowing children to create user accounts on our website
How We Use Your Information
| Purpose | Details |
|---|---|
| Responding to enquiries | Callback requests, quotes, availability checks |
| Booking & event delivery | Confirming, planning, and delivering parties, corporate events, school trips, and visits |
| Safety & security | Verifying entry, managing emergencies, ensuring child wellbeing at the venue |
| Payment processing | Handling transactions and issuing invoices/receipts |
| Service communications | Booking confirmations, reminders, and updates |
| Marketing communications | Promotional offers, new activities, festive packages via email, SMS, WhatsApp, and phone (you can opt out at any time) |
| Photography & content | Sharing event photos with you and marketing use, with your consent |
| Website analytics | Understanding how visitors use our site and improving it |
| Online advertising | Campaigns on Google, Facebook, Instagram — including remarketing |
| Legal compliance | Meeting tax, accounting, and statutory obligations |
| Defending legal rights | In the event of disputes, claims, or investigations |
Sharing of Personal Data
We do not sell your personal data. We share it only in the following limited situations:
| Recipient | Purpose |
|---|---|
| Razorpay | Processing online payments |
| Hosting & website provider (Odoo) | Operating our website |
| Google (Analytics, Tag Manager, Ads) | Website analytics and advertising |
| Meta (Facebook/Instagram) | Advertising and remarketing |
| Email, SMS & WhatsApp service providers | Sending you communications |
| Botfit's affiliated brands & group entities | Marketing and service purposes within the group, subject to this Policy |
| Legal/regulatory authorities | When required by law, court order, or valid government request |
| Professional advisors | Lawyers, accountants, auditors — under confidentiality |
| Acquirers in a business transfer | In case of merger, acquisition, or restructuring — under equivalent protections |
We do not share your personal data with unrelated third parties for their own marketing.
Cookies & Tracking Technologies
Our website uses cookies and similar technologies to make the site function properly, remember preferences, analyse traffic (Google Analytics), and show relevant ads on Google, Facebook, and Instagram (Google Ads, Meta Pixel).
You can manage or disable cookies through your browser settings. Disabling cookies may affect parts of the website. You can also opt out of personalised advertising through:
- Google Ads Settings: adssettings.google.com
- Meta Ad Preferences: facebook.com/adpreferences
Data Retention
We keep personal data only as long as needed for the purpose it was collected, or as required by law.
| Type of Data | Retention Period |
|---|---|
| Website enquiry / lead data | Up to 3 years from last interaction |
| Booking and payment records | As required under Indian tax and accounting laws (typically up to 8 years) |
| Venue entry register and parental consent forms | Up to 3 years, or longer if needed for legal/safety reasons |
| CCTV footage | Typically 30–90 days, unless preserved for an investigation |
| Marketing database | Until you opt out or withdraw consent |
| Photos/videos used in marketing | Until you withdraw consent or we no longer have a business reason to keep them |
After these periods, data is securely deleted or anonymised.
Data Security
We follow reasonable security practices in line with Rule 8 of the Information Technology (Reasonable Security Practices) Rules, 2011, including:
- Restricting staff access to personal data on a need-to-know basis
- Secure storage of physical consent forms, entry registers, and event records
- Encrypted, PCI-DSS compliant payment processing through Razorpay
- HTTPS-secured website
- Regular review of our processes and security practices
While we take reasonable steps, no method of transmission or storage is 100% secure. Please keep your contact information confidential and notify us immediately of any unauthorised use.
Your Rights Under the DPDP Act, 2023
As a Data Principal, you have the following rights under Indian law:
To exercise any right, write to us using the contact details in Section 11. We will respond within the timelines required by law.
Grievance Officer & Contact Us
If you have any questions, concerns, complaints, or requests about your personal data or this Privacy Policy, please contact our Grievance Officer:
We aim to acknowledge complaints within 48 hours and resolve them within the timelines required under applicable law (typically within 30 days). If you are not satisfied with our response, you may approach the Data Protection Board of India under the DPDP Act, 2023.
Third-Party Links
Our website and social media may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before sharing any information with them.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. The updated version will be posted on this page with a revised "Last Updated" date.
We encourage you to review this Policy periodically. Significant changes may be communicated by email or through a notice on our website.
Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of India. Any dispute arising out of or in connection with this Policy will be subject to the exclusive jurisdiction of the courts at Gurugram, Haryana.
Privacy Policy.
Introduction
Welcome to Botfit. This Privacy Policy explains how Botfit Entertainment Pvt. Ltd. collects, uses, shares, stores, and protects your personal information when you:
- Visit our website www.botfit.in
- Contact us by phone, email, or WhatsApp
- Visit our family entertainment centre in Sector 60, Gurugram
- Book a birthday party, corporate event, school trip, or general visit
- Interact with us on social media
This Privacy Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and rules made thereunder, and serves as an electronic record under the Information Technology Act, 2000.
Who We Are
We are the Data Fiduciary responsible for your personal data.
| Detail | Information |
|---|---|
| Legal Name | Botfit Entertainment Pvt. Ltd. |
| Venue | Sector 60, Gurugram, Haryana, India |
| Phone | 080-4709-5095 |
| +91 93108 02266 | |
| info@botfit.in | |
| Website | https://www.botfit.in |
Information We Collect
Through website enquiry forms, callback requests, and WhatsApp/phone bookings:
- Full name, phone number, and email address
- Type of event (birthday party, corporate, school trip, walk-in, etc.)
- Event date, guest count, and special requests
At the venue (mandatory entry register and consent forms):
- Parent/guardian's name and contact number
- Child's name, age, and date of birth
- Allergies, dietary requirements, or relevant medical information disclosed by the parent/guardian
- Emergency contact details and signed parental consent form
For corporate events and school trips:
- Organisation name, point of contact, billing details
- Attendee lists or headcount provided by the organisation
With prior parental consent (captured through the signed consent form), we photograph and record guests — including children — during their time at the venue. These may be used for:
- Sharing with the parent/guardian after the party
- Internal record-keeping
- Marketing and promotional purposes on our website, Instagram (@bot_fit_), Facebook, and other social platforms
You may withdraw consent for marketing use of photos at any time by writing to us. We will stop further use, though images already published may take time to be removed from third-party platforms.
CCTV cameras operate throughout the venue for the safety and security of children, guests, and staff. Footage is stored for a limited period, never used for marketing, and access is restricted to authorised personnel only.
All online payments are processed through Razorpay. We do not store your debit/credit card numbers, UPI IDs, CVV, or net banking credentials. Razorpay's own privacy policy governs payment data. We also accept cash payments at the venue in line with Section 269ST of the Income Tax Act, 1961.
When you visit www.botfit.in, we and our partners automatically collect IP address, approximate location, browser type, device type, pages viewed, time spent, and click activity. We use the following tools:
- Google Analytics and Google Tag Manager — website analytics
- Google Ads — advertising and remarketing
- Meta (Facebook/Instagram) Pixel — advertising on Facebook and Instagram
Children's Personal Data — Special Protections
A significant part of what we do involves children. Under Section 9 of the DPDP Act, 2023, processing personal data of children (persons under 18) requires verifiable consent from a parent or lawful guardian.
We comply with this requirement by:
- Collecting children's data only through a parent or guardian — never directly from a child
- Requiring a signed Parental Consent Form before children participate in activities or are photographed for marketing
- Not undertaking targeted advertising directed at children
- Not tracking, profiling, or monitoring children's behaviour beyond what is required for our services and their safety
- Not allowing children to create user accounts on our website
How We Use Your Information
| Purpose | Details |
|---|---|
| Responding to enquiries | Callback requests, quotes, availability checks |
| Booking & event delivery | Confirming, planning, and delivering parties, corporate events, school trips, and visits |
| Safety & security | Verifying entry, managing emergencies, ensuring child wellbeing at the venue |
| Payment processing | Handling transactions and issuing invoices/receipts |
| Service communications | Booking confirmations, reminders, and updates |
| Marketing communications | Promotional offers, new activities, festive packages via email, SMS, WhatsApp, and phone (you can opt out at any time) |
| Photography & content | Sharing event photos with you and marketing use, with your consent |
| Website analytics | Understanding how visitors use our site and improving it |
| Online advertising | Campaigns on Google, Facebook, Instagram — including remarketing |
| Legal compliance | Meeting tax, accounting, and statutory obligations |
| Defending legal rights | In the event of disputes, claims, or investigations |
Sharing of Personal Data
We do not sell your personal data. We share it only in the following limited situations:
| Recipient | Purpose |
|---|---|
| Razorpay | Processing online payments |
| Hosting & website provider (Odoo) | Operating our website |
| Google (Analytics, Tag Manager, Ads) | Website analytics and advertising |
| Meta (Facebook/Instagram) | Advertising and remarketing |
| Email, SMS & WhatsApp service providers | Sending you communications |
| Botfit's affiliated brands & group entities | Marketing and service purposes within the group, subject to this Policy |
| Legal/regulatory authorities | When required by law, court order, or valid government request |
| Professional advisors | Lawyers, accountants, auditors — under confidentiality |
| Acquirers in a business transfer | In case of merger, acquisition, or restructuring — under equivalent protections |
We do not share your personal data with unrelated third parties for their own marketing.
Cookies & Tracking Technologies
Our website uses cookies and similar technologies to make the site function properly, remember preferences, analyse traffic (Google Analytics), and show relevant ads on Google, Facebook, and Instagram (Google Ads, Meta Pixel).
You can manage or disable cookies through your browser settings. Disabling cookies may affect parts of the website. You can also opt out of personalised advertising through:
- Google Ads Settings: adssettings.google.com
- Meta Ad Preferences: facebook.com/adpreferences
Data Retention
We keep personal data only as long as needed for the purpose it was collected, or as required by law.
| Type of Data | Retention Period |
|---|---|
| Website enquiry / lead data | Up to 3 years from last interaction |
| Booking and payment records | As required under Indian tax and accounting laws (typically up to 8 years) |
| Venue entry register and parental consent forms | Up to 3 years, or longer if needed for legal/safety reasons |
| CCTV footage | Typically 30–90 days, unless preserved for an investigation |
| Marketing database | Until you opt out or withdraw consent |
| Photos/videos used in marketing | Until you withdraw consent or we no longer have a business reason to keep them |
After these periods, data is securely deleted or anonymised.
Data Security
We follow reasonable security practices in line with Rule 8 of the Information Technology (Reasonable Security Practices) Rules, 2011, including:
- Restricting staff access to personal data on a need-to-know basis
- Secure storage of physical consent forms, entry registers, and event records
- Encrypted, PCI-DSS compliant payment processing through Razorpay
- HTTPS-secured website
- Regular review of our processes and security practices
While we take reasonable steps, no method of transmission or storage is 100% secure. Please keep your contact information confidential and notify us immediately of any unauthorised use.
Your Rights Under the DPDP Act, 2023
As a Data Principal, you have the following rights under Indian law:
To exercise any right, write to us using the contact details in Section 11. We will respond within the timelines required by law.
Grievance Officer & Contact Us
If you have any questions, concerns, complaints, or requests about your personal data or this Privacy Policy, please contact our Grievance Officer:
We aim to acknowledge complaints within 48 hours and resolve them within the timelines required under applicable law (typically within 30 days). If you are not satisfied with our response, you may approach the Data Protection Board of India under the DPDP Act, 2023.
Third-Party Links
Our website and social media may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before sharing any information with them.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. The updated version will be posted on this page with a revised "Last Updated" date.
We encourage you to review this Policy periodically. Significant changes may be communicated by email or through a notice on our website.
Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of India. Any dispute arising out of or in connection with this Policy will be subject to the exclusive jurisdiction of the courts at Gurugram, Haryana.