Privacy Policy

• Tickets and stays: your name, email, phone/WhatsApp number, country, the names of other guests on your order, and what you bought.
• Payments: handled by Razorpay. We receive the payment status and reference. We never see or store your full card or bank details.
• Partner applications: name, email, phone/WhatsApp, city, country, Instagram or website, partner type and what you tell us about your network.
• Website use: pages visited, device and browser type, approximate location from your IP address, and cookies or similar technology (see "Cookies, analytics and ads").

• To sell and deliver your tickets and stays, send your order and ticket emails, and admit you at the festival gate.
• To answer your questions and send important updates about your booking, including by email or WhatsApp.
• To run the partner programme, including tracking sales made with a partner's code or link and paying commission.
• To prevent fraud and meet our legal, accounting and tax obligations.
• To understand how the website is used and to measure and improve our advertising.
• We send marketing messages only where the law allows, and you can opt out at any time.

We share data only with services that help us run the festival, and only what they need:

• Razorpay (payments)
• Resend (email delivery)
• Vercel, Netlify and Neon (website hosting and database)
• PostHog, hosted in the EU (website analytics, including anonymised session recordings)
• Meta (Facebook and Instagram) through the Meta Pixel and Conversions API, to measure our ads; email addresses and phone numbers are hashed before they are sent
• Accommodation hosts, for stay bookings: the guest names and booking details they need
• The partner whose code or link you used: the limited order details needed to calculate their commission

We do not sell your personal data.

We use cookies that the site needs to work (for example, your cart and checkout), analytics cookies (PostHog) and advertising cookies (Meta Pixel). You can block or delete cookies in your browser settings; the site will still let you buy tickets.

Our service providers may process data in India, the European Union, the United States and other countries. We use providers that protect personal data to recognised standards.

We keep order and payment records for as long as the law requires for accounting and tax purposes. We keep other personal data only as long as we need it for the purposes above, then delete or anonymise it.

You can ask us to show, correct or delete your personal data, or to stop using it for marketing. Email contact@spiritgustfestival.com and we will reply within 30 days. We may need to keep some records where the law requires it.

To ask us to delete your personal data, email contact@spiritgustfestival.com with the subject "Delete my data" and the email address you used with us. We will confirm once it is done, within 30 days.

If we change this policy, we will update this page and the date above.