Privacy Policy

1. Introduction

This Privacy Policy explains how VALZY TECH PRIVATE LIMITED ("Valzy", "we", "us", or "our") collects, uses, shares, stores, and protects personal data when you use our valet parking coordination services, vehicle retrieval services, WhatsApp-based communication tools, website, QR code flows, or related digital services. This policy is written to be clear, practical, and easy to follow.

We process personal data only for legitimate service-related purposes, in a secure and responsible manner, and only to the extent reasonably necessary to operate the service.

By using our services, you acknowledge that you have read and understood this Privacy Policy and that you will only share information you are authorised to share.

2. Scope

This Privacy Policy applies to our website and landing pages, WhatsApp-based valet request and notification flows, online forms and QR code flows, and any operational systems used to support valet coordination and vehicle retrieval.

This Privacy Policy does not apply to the independent privacy practices of third-party venues, hotels, restaurants, parking operators, or other service providers that may also be involved in the valet experience. Those parties may have their own notices and policies.

3. Roles and legal framework

To the extent we determine the purposes and means of processing personal data for our services, we act as the data fiduciary for that processing under applicable Indian law. In some cases, a venue or partner may separately determine how its own data is processed, and in that case it acts independently for that processing.

The Digital Personal Data Protection Act, 2023 applies to digital personal data processed in India and, in some cases, outside India when it relates to offering goods or services to individuals in India. The Act requires clear notice, a valid basis for processing where consent is relied upon, a right to withdraw consent, rights to correction and erasure, and a grievance redressal process.

4. Information we collect

We collect only the information necessary to operate, secure, and improve our valet coordination services.

• Name, if shared by you;
• WhatsApp phone number;
• Vehicle details such as vehicle number or registration number;
• Valet token number or ticket code;
• Messages, instructions, requests, and other communications you send to us.

Operational and service data may include token issuance details, time of request, estimated departure time, retrieval status updates, delivery or handover status, timestamped interaction logs, and service history related to your valet request.

Technical data may include IP address, browser type, device type, operating system, basic usage logs, and cookies or similar technologies used on our website for functionality, security, and analytics.

5. How we collect information

We may collect information when you directly submit it, when our systems generate it during service use, when cookies or similar technologies are used on our website, or when it is shared by the venue or valet operator for the purpose of completing a legitimate valet request.

6. How we use your information

We use the information we collect to identify and match a valet ticket with the correct customer, process valet requests and vehicle retrieval requests, send operational updates, coordinate communication between the customer, valet staff, and venue operations, maintain service records, improve service quality, troubleshoot technical issues, prevent misuse, comply with legal or regulatory obligations, and support dispute resolution where needed.

We do not use your personal data for unrelated marketing unless you separately consent to that use. We also do not use your personal data for automated decisions that produce legal or similarly significant effects without meaningful human involvement.

7. Consent and withdrawal

Where we rely on consent, the request for consent will be presented in clear and plain language and will be limited to the personal data necessary for the stated purpose.

If consent is the basis for processing, you may withdraw it at any time by contacting us using the details in Section 22. We will stop processing that depends on consent within a reasonable time, except where retention or processing is required by law or is needed to complete a service already requested.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. WhatsApp opt-in and service messages

By scanning our QR code, entering your phone number, starting a WhatsApp conversation, replying to our service prompts, or entering a valet token, you expressly opt in to receive service-related WhatsApp messages from Valzy.

These messages may include request confirmations, retrieval status updates, operational notices, handover instructions, and support follow-ups directly related to your valet request.

We do not send unrelated promotional messages through this service unless you separately consent to receive them.

9. How the service works

Our valet system works through a physical valet token and WhatsApp-based communication. This helps us match the correct customer with the correct vehicle and reduce mistakes.

A physical token number, such as A42, may be issued at the venue. When you message that token number to us through WhatsApp, we treat that as activation of your request for retrieval. Your WhatsApp message, together with the token number, helps us identify the correct active session and notify the right valet staff member. Messages may be reviewed by operational staff for service purposes.

For service accuracy and security, you should provide only information that is accurate and that you are authorised to share. Please avoid sending unnecessary sensitive information.

10. Sharing of information

We share personal information only when necessary for service execution, security, operational coordination, fraud prevention, legal compliance, or to respond to a valid request from you.

• The venue or organization operating the valet service;
• Valet staff and operations personnel;
• Service providers who support our infrastructure, messaging, hosting, storage, monitoring, or analytics;
• Law enforcement or government authorities when required by applicable law.

We require reasonable confidentiality and security obligations from service providers acting on our behalf, and we limit sharing to what is necessary for the relevant purpose.

11. Third-party service providers

We may use trusted third-party services to run our platform and communication flow, including Meta / WhatsApp Business Platform for messaging and notifications, database and cloud infrastructure providers for secure data storage and application hosting, and analytics or hosting providers for website performance and basic operational insights. These service providers may process personal data on our behalf or according to their own applicable terms and privacy policies.

These third parties may process personal data on our behalf or according to their own applicable terms and privacy policies. We do not intentionally share your personal data with third parties for their own unrelated marketing.

12. Data retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, including service delivery, dispute resolution, operational logging, security and fraud prevention, and legal or regulatory compliance.

As a general operational guideline, active request data is retained for the duration of the service session, and interaction and service logs may be retained for up to 90 days unless a longer period is needed for legal, accounting, safety, audit, dispute-related, or compliance reasons.

When data is no longer required, we take reasonable steps to delete it, anonymise it, or securely archive it in accordance with applicable law.

13. Security

We use reasonable technical and organizational safeguards to protect personal information, including access controls, role-based permissions, secure server environments, authentication measures, limited staff access on a need-to-know basis, and operational logging and monitoring. Where appropriate, we also take steps to use encryption in transit and to review access regularly.

We take commercially reasonable steps to reduce risk and protect your information. If we become aware of a material data incident, we will investigate and take appropriate steps required by law.

14. Your rights

Subject to applicable law, you may have the right to request access to the personal data we hold about you; request correction, completion, or updating of inaccurate or incomplete information; request erasure of personal data where applicable; object to or restrict certain processing where permitted by law; withdraw consent where processing is based on consent; and raise a grievance regarding the handling of your personal data.

Under the Digital Personal Data Protection Act, 2023, a data principal has rights to access information about personal data, correction and erasure, and grievance redressal.

How to exercise your rights: You may exercise any of the above rights by contacting us at info@valzy.co.in. Please include sufficient details, such as your phone number and valet token if applicable, so we can identify your records. We may request additional information if needed to verify your identity.

Response timeline: We will acknowledge your request within a reasonable time and aim to resolve it within 7 to 15 working days, unless a longer period is required due to complexity, verification, or legal obligations.

15. Grievance redressal

If you have any complaints or concerns regarding the processing of your personal data, you may contact our designated grievance contact below.

We will acknowledge and address grievances within a reasonable timeframe in accordance with applicable law. The Act requires a readily available grievance redressal mechanism and response within the prescribed period.

If you are not satisfied with our response, you may have the right to escalate your complaint to the Data Protection Board of India or other competent authority under applicable law.

16. Children’s privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal data from children.

Where the law requires verifiable parental or guardian consent for a child’s personal data, we will not process such data unless that consent and any other required legal conditions are satisfied.

17. Cookies and similar technologies

Our website may use limited cookies or similar technologies for essential site functionality, security, basic analytics, and performance improvement. Where required, we will show a cookie notice or obtain consent before using non-essential cookies.

We do not use intrusive tracking cookies for unrelated advertising purposes unless clearly disclosed and, where required, consent is obtained.

18. Cross-border transfers

Your information may be processed or stored on servers located outside your city or state, and in some cases outside India, by our infrastructure or service providers, subject to applicable legal restrictions and provider safeguards.

Where required, we will follow any restriction or notification issued by the Government of India regarding transfers of personal data outside India.

19. No sale of personal data

We do not sell your personal data.

We do not disclose your personal data to third parties for their independent marketing unless required to do so by law or unless you separately consent to such disclosure.

20. Liability and operational responsibility

Valzy provides technology and workflow support for valet coordination. We do not physically park, drive, move, or store vehicles ourselves unless explicitly stated in a separate written agreement.

Responsibility for vehicle custody, parking operations, staff conduct, and physical handling of vehicles primarily rests with the venue, parking operator, or organization operating the valet service, unless a separate contract expressly states otherwise.

This Privacy Policy is not intended to replace the terms of any operational agreement, service agreement, or venue-specific valet terms.

21. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. When we make material changes, we will update the Last Updated date and may notify users through our website or WhatsApp flow where appropriate.