Privacy Policy

Who is responsible for your personal data

DS Experiences LLP, trading as DS Experiences and DS Experiences Group, is responsible for deciding how and why the personal data covered by this Policy is processed.

Depending on the applicable law, we may be described as the data fiduciary or data controller. Event organisers, venues, ticketing providers, payment providers, accommodation providers and transport providers may act as independent controllers under their own notices.

Scope of this Policy

This Policy applies when you visit our website; submit an enquiry, availability request or quotation request; contact us through email, telephone, WhatsApp or social media; request or purchase tickets, hospitality, travel or another experience; receive customer support; attend an experience arranged through us; receive marketing; or interact with us as a customer, guest, supplier or business contact.

Third-party websites, platforms and service providers operate under their own privacy notices.

Personal data we collect

Identity and contact data

• Name, title, email, telephone or WhatsApp number, address, country, language and business details.
• Enquiry, quotation, invoice, order or booking references and social-media identifiers where you contact us through a platform.

Enquiry, booking and guest data

• Requested event, dates, venue, category, guest count, budget, currency, preferences, itinerary and messages.
• Guest names and, only where necessary, age, nationality, identity-document information, ticket-delivery details, emergency contacts or travel information required by a supplier or authority.
• Accessibility, dietary or health information you choose to provide where needed to deliver the service. We use sensitive data only where permitted, including with explicit consent where required.

Payment, technical and communications data

• Billing details, payment status, transaction reference, refunds, disputes and limited card information supplied by a payment provider. We do not intentionally store CVV/CVC data.
• IP address, device, browser, approximate location, referring page, usage, security and error logs, and cookie choices.
• Correspondence, customer-service history, event interests and marketing preferences.

If you provide information about another guest, you should have authority to do so and make this Policy available to them.

How and why we use personal data

We use personal data only for specified purposes and where we have a lawful basis. Under Indian law this may include consent or another use permitted by law. Where the EU or UK GDPR applies, the basis may be consent, steps requested before a contract, performance of a contract, legal obligation, vital interests or legitimate interests that are not overridden by your rights.

Where we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

Bookings, tickets and payments

To fulfil a booking we may share the minimum necessary attendee, delivery, identity or itinerary information with the relevant organiser, venue, ticketing provider, accommodation provider, transport provider or other supplier. Some tickets are named, non-transferable or delivered through a third-party app. Those providers may require you to accept their own terms and privacy notice.

Payments may be made by bank transfer, payment gateway or another offered method. Banks and payment providers process payment data under their own terms. We may keep transaction, invoice, refund, cancellation, fraud and chargeback records as required for the service, legal compliance and claims.

Marketing communications

Subject to applicable law and your choices, we may send information about sport, concerts, festivals, hospitality, travel and related experiences by email, telephone, SMS, WhatsApp or similar channels. You can unsubscribe through the message, reply with an opt-out request or contact us. We may retain a minimal suppression record so that your preference remains respected.

Service messages concerning an enquiry, booking, payment, security or ticket delivery are not marketing.

Who we share personal data with

Only where reasonably necessary, we may share data with event organisers, venues, rights holders, ticketing and delivery providers, accommodation and transport providers, payment providers and banks, website hosting and security providers, communication and customer-service providers, analytics providers where permitted, accountants, auditors, insurers, legal advisers, regulators, courts and authorities.

Providers acting only on our instructions are expected to use data for authorised purposes and under suitable confidentiality and security obligations. We do not sell personal data for monetary consideration.

International transfers

Our services involve events and suppliers across countries, so personal data may be processed outside the country in which it was collected. Where required, we use an appropriate safeguard such as an adequacy decision, standard contractual clauses, a recognised transfer agreement, supplementary measures, explicit consent where lawful, or another valid mechanism.

How long we keep personal data

Periods may be extended for an audit, legal hold, fraud investigation, chargeback, complaint or pending claim. We may retain anonymous aggregated information that no longer identifies anyone.

Your privacy rights

Your rights depend on the law that applies. They may include access; correction or completion; deletion; restriction; portability; objection to legitimate-interest processing; objection to direct marketing; withdrawal of consent; grievance escalation; nomination under applicable Indian law; and safeguards concerning solely automated decisions with legal or similarly significant effects.

Send requests to grievances@dsexperiencesgroup.com with the subject Privacy Request. We may request proportionate information to verify identity. Rights are not absolute, and lawful exemptions may apply. You may also complain to the competent authority where you live, work or believe an infringement occurred.

Security, children and automated processing

We use reasonable organisational and technical measures including access controls, restricted access, encryption in transit where supported, secure hosting, monitoring, confidentiality duties, retention controls and incident procedures. No system is completely secure.

Our website and direct booking services are intended for adults. A parent or guardian should be involved where information about a minor is necessary for a family booking. We do not knowingly target children with behavioural advertising.

We may use limited automation for security, payment verification, fraud prevention, administration and analytics. We do not ordinarily make solely automated decisions that produce legal or similarly significant effects.

Contact, grievances and updates

We may update this Policy to reflect changes in services, providers, technology or law. Material changes will receive additional notice or renewed consent where required.

For details about browser and device technologies, read our Cookie Policy or open Cookie settings.