How TNP collects, uses, shares, keeps and deletes your personal data, and the rights you have under India’s Digital Personal Data Protection Act, 2023.
Last updated 18 October 2026 · Version 2026-10-18
1Who we are
This website and its accounts are run by TNP Event Planners (TNP Hospitality is its brand), owned by Nayan Sunil Paul, proprietor (GSTIN 27FKCPP3671P1ZE), Office No. A10, Shantiwardhan Society, near Nal Stop Metro Station, Erandwane, Pune 411004, Maharashtra, India.
For your personal data TNP is the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 (DPDP Act). You are the “Data Principal”.
This policy covers the website, enquiries, client bookings, Career With Us (freelancer) accounts, Collaborator accounts, staff accounts and the RSVP service.
2What we collect
Enquiries and bookings: your name, email, phone, the occasion, city, date, guest estimate, organisation, the services you want and your message; for bookings, the billing name and address, PAN and GSTIN if you give them, quotations, invoices and payment records.
Freelancers (Career With Us): name, mobile, email, gender, age or date of birth, city, address, emergency contact, roles, skills, languages, experience, availability, profile photo, Aadhaar or PAN number and card image for identity checks, bank account, UPI ID, UPI QR and PAN for payments, and your assignments, attendance, ratings, earnings and payments.
Location: only when you check in at an event by scanning the attendance QR, and while the event-day page is open on your phone. TNP never tracks your location in the background.
Collaborators: your name, company, GST details, service cities, requests, quotations, events and ratings you give.
RSVP guests: the guest details the host uploads and the replies guests send (see “RSVP guest lists” below).
Technical data: sign-in sessions, security logs and records of changes, kept to protect accounts and investigate misuse. We do not use advertising trackers.
3Why we use it (purpose and legal basis)
With your consent, given when you create an account or send an enquiry: to reply, quote, plan and run events, offer event work, check identity, pay freelancers, and send event messages.
For legitimate uses allowed by section 7 of the DPDP Act: to meet legal duties (tax, GST and accounting records), to respond to legal claims, and for safety at events.
We use your data only for the purpose it was collected for. We do not sell it, and we do not use it for advertising.
4Who can see it
TNP staff who need it for their work. Payment details, Aadhaar and PAN are shown masked; opening them in full is limited to authorised staff and each opening is recorded.
Your Event Coordinator and TNP see your check-in time and place for that event. A Collaborator sees a freelancer’s name, role, rating and arrival on their events, never phone numbers or payment details.
Companies that process data for us, on our instructions only (“Data Processors”): Vercel (hosting), MongoDB Atlas (database, Mumbai, India), Resend (email), Razorpay (online payments) and Meta (WhatsApp messages).
Government authorities, only where the law requires it.
5How we protect it
Every account needs a personal sign-in. Passwords are stored only as one-way hashes.
Bank, UPI, PAN and Aadhaar details are encrypted in the database, and all data travels over an encrypted (HTTPS) connection.
Access to personal data is limited by role and recorded. If a personal data breach happens, we will inform affected people and the Data Protection Board of India as the DPDP Act and its Rules require.
6How long we keep it
Enquiries that do not become a booking: 1 month.
Accounts: while the account is open.
When you delete your account: bank, UPI and PAN payment details are erased at once. Your name, contact details and work history are kept for 6 months to settle payments and resolve disputes, and are then erased.
Quotations, invoices, earnings and payment records: as long as tax and accounting laws require (generally 8 years).
RSVP guest data: 2 months after the event, then erased.
7Your rights
Access: ask what personal data we hold about you and how we use it.
Correction and update: change most details yourself in your profile, or ask us to correct them.
Erasure: delete your account yourself in your profile settings, or ask us to erase data we no longer need to keep by law.
Withdraw consent: you can withdraw consent at any time, as easily as you gave it. This does not affect what was done before, and some services (for example payments to you) may then stop.
Nominate: you may name a person to exercise these rights for you if you die or become unable to.
Grievance: complain to our Grievance Officer (below). If you are not satisfied with our reply, you may complain to the Data Protection Board of India.
8Children
Our accounts are only for people aged 18 or over. We do not knowingly collect data from children. If a child’s data reaches us, write to us and we will delete it.
9RSVP guest lists
A host who uses TNP’s RSVP service uploads their own guest list and confirms they may share it with TNP. For this data TNP acts on the host’s instructions.
We send the host’s invitations, reminders and event updates on WhatsApp. We never send sales or advertising messages to guests.
Guest replies and details guests choose to share (attendance, number of people, travel, room, food and access needs, and ID only if the host asks) are shown only to the host’s team and TNP staff running the event.
10Grievance Officer and contact
Grievance Officer: Nayan Sunil Paul, proprietor, TNP Event Planners (TNP Hospitality is its brand).
Email info@tnpeventhospitality.com or call +91 721 927 6702, with the subject “Personal data”. We reply within 30 days.
Post: Office No. A10, Shantiwardhan Society, near Nal Stop Metro Station, Erandwane, Pune 411004, Maharashtra, India.
11Changes to this policy
We will post any change on this page with its date. If a change affects what you agreed to, we will ask you to agree again.