Scope of this Policy
This Privacy Policy applies to personal data collected through our platform and in the course of providing our services, including in-home puja services, online puja services, Kathavachak bookings, samagri supply, customer support, booking coordination, service reminders, feedback follow-up, cancellations, refunds, and related administrative activities. It applies to customers, prospective customers, service partners, vendors, and any other person whose personal data is processed by SiddhiStar in connection with our business.
Personal Data We Collect
Depending on the nature of your interaction with us, we may collect the following categories of personal data:
- Name.
- Mobile number.
- Email address.
- Residential or service address.
- Pincode.
- Booking date and time.
- Service type and package selected.
- Gotra.
- Sankalp details.
- Family names.
- Language preference.
- Time zone, where relevant for online puja bookings.
- Payment and transaction details.
- Refund and cancellation details.
- Customer support communications.
- Feedback, complaints, ratings, and NPS responses.
- Device information, browser details, IP address, log data, and other technical information, where collected.
- Any other information voluntarily provided by you for booking, coordination, or service delivery.
For online puja bookings, we may also collect information necessary to schedule and conduct the live service, including time zone and contact details. For in-home pujas, we may collect address and access-related details required for service fulfilment. For Kathavachak services, we may collect details required to coordinate the service and related arrangements.
How We Collect Personal Data
We collect personal data in the following ways:
3.1
Directly from you when you create an account, make a booking, speak with our customer support team, make a payment, or otherwise interact with us.
3.2
Automatically through our website, application, or related systems, including through cookies, SDKs, logs, analytics tools, and similar technologies, where used.
3.3
From service partners, pandits, Kathavachaks, vendors, payment processors, logistics partners, or other third parties engaged in fulfilment or support.
3.4
Through calls, WhatsApp, email, SMS, push notifications, and in-app messages.
3.5
Through records generated in connection with booking, dispatch, service coordination, attendance, completion, cancellation, refund, and complaint handling.
How We Use Personal Data
We use personal data for the following purposes:
4.1
To register and manage bookings.
4.2
To verify service availability.
4.3
To assign or coordinate the relevant pandit, Kathavachak, or support personnel.
4.4
To arrange and manage in-home pujas, online pujas, and other services.
4.5
To coordinate samagri procurement, dispatch, and delivery.
4.6
To contact you regarding confirmations, reminders, schedule changes, and service updates.
4.7
To process payments, refunds, cancellations, and accounting records.
4.8
To respond to queries, complaints, and customer support requests.
4.9
To conduct quality checks, feedback calls, and service improvement activities.
4.10
To prevent fraud, misuse, unauthorised access, and security incidents.
4.11
To comply with legal, tax, accounting, and regulatory obligations.
4.12
To maintain internal records and support the operation and administration of our business.
Consent and Lawful Processing
Where processing is based on consent, such consent shall be free, specific, informed, unconditional, and given through a clear affirmative act, as required by the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. We will seek consent in the manner required by law before collecting or using personal data for a specified purpose, unless processing is otherwise permitted under law.
Where permitted, we may also process personal data without consent for lawful uses recognised under the Digital Personal Data Protection Act, 2023. This may include certain service-related, compliance-related, or protection-related processing activities.
Service-Specific Processing
7.1In-Home Puja Services
For in-home puja services, we may share your booking details, address, slot, and related service information with the assigned service provider and support staff so that the service can be delivered smoothly.
7.2Online Puja Services
For online puja services, we may use your contact details, booking details, and time zone information to arrange the live service. At present, our MVP does not involve recording of the online puja session. No automatic recording, no manual recording, and no sharing of the call recording is carried out at launch. If recording is introduced in the future, we will do so only with prior opt-in consent at the time of booking.
7.3Kathavachak Services
For Kathavachak bookings, we may use and share relevant booking information, service schedule, and related details to coordinate the service and any supporting arrangements. Where applicable, we may also communicate with the customer regarding service expectations, scheduling, and coordination of the relevant event.
7.4Samagri Supply
Where samagri is provided as part of a booking, we may share the relevant order details with the third-party vendor and delivery partner for procurement and dispatch. For online puja, samagri is mandatory; for in-home puja, it may be optional depending on the booking. Once dispatched, samagri may be non-refundable as per the service terms disclosed at checkout.
Communications
We may contact you by telephone, WhatsApp, SMS, email, in-app message, or push notification for booking confirmations, reminders, service updates, feedback, complaint resolution, refund updates, and other service-related communications. We may also make follow-up calls for quality assurance, customer satisfaction, and post-service feedback.
Where consent is required for promotional or marketing communications, we will obtain such consent separately or provide an opt-out mechanism as required under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, to resolve disputes, to enforce rights, and to maintain legitimate business records. Once the purpose is fulfilled, or once retention is no longer required by law, we will delete or anonymise the personal data within a reasonable period.
Booking records, payment records, tax records, cancellation records, refund records, complaint records, and operational logs may be retained for periods required under applicable law or internal policy.
Security
We maintain reasonable technical and organisational safeguards to protect personal data from unauthorised access, disclosure, alteration, loss, misuse, or destruction. These safeguards may include access restrictions, secure systems, role-based permissions, internal controls, vendor diligence, and other reasonable measures consistent with the sensitivity of the data and the nature of our operations.
No method of transmission or storage is completely secure. However, we take reasonable steps to protect personal data as required by the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
Data Breach Response
In the event of a personal data breach, we will take appropriate steps to investigate, contain, mitigate, and address the incident. Where required by the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, we will notify the Data Protection Board and affected individuals in the manner and within the time period prescribed by law.
Children's Data
Our services are not intended for children below the age prescribed under applicable law unless permitted with the required verifiable consent of a parent or lawful guardian. We do not knowingly collect or process children's personal data in a manner prohibited by law.
If we discover that personal data of a child has been collected contrary to this Policy or applicable law, we will take reasonable steps to delete or secure such data, subject to legal requirements.
Your Rights
Subject to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, you may have rights in relation to your personal data, including the right to:
- Obtain a summary of your personal data being processed.
- Obtain information regarding the processing activities undertaken by us.
- Request correction, completion, or updating of inaccurate or incomplete personal data.
- Request erasure of personal data, subject to legal retention obligations.
- Withdraw consent, where processing is based on consent.
- Nominate another person to exercise your rights in the event of death or incapacity.
- Raise a grievance regarding our processing of your personal data.
Requests may be submitted through the contact details provided below. We will address such requests in accordance with the timelines and requirements under law.
Your Duties
You are responsible for providing accurate, current, and lawful information to us. You must not impersonate another person, submit false information, or misuse our grievance or support mechanisms. Where you request correction or deletion, we may ask for information reasonably necessary to verify your identity and process the request in accordance with law.
Cross-Border Transfers
If we transfer personal data outside India, we will do so only in accordance with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and any restrictions, conditions, or safeguards prescribed by the Central Government or applicable regulatory framework.
Grievance Redressal
If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our processing of personal data, you may contact our grievance officer or authorised representative at:
We will review and respond to grievances in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
Contact Us
For privacy-related queries, please contact:
Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal obligations, or data handling practices. Any revised version will be posted on our platform with the updated effective date. Your continued use of our services after such update shall constitute your acknowledgment of the revised policy, to the extent permitted by law.
Miscellaneous
If any part of this Privacy Policy is held to be invalid or unenforceable, the remaining parts shall continue in full force and effect. This Privacy Policy does not limit any rights available to you under the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, or any other applicable law. In the event of any conflict between this Policy and applicable law, the applicable law shall prevail.