Privacy Policy

1. Who we are

This Privacy Policy explains how Community Rise Private Limited (“Karma Miles”, “we”, “us”, “our”), a company registered in India with its office at 703, Palm Court, MG Road, Sector 16, Gurugram 122007, Haryana, collects, uses, shares and protects personal data when you use www.karmamiles.in, our WhatsApp Business number (+91 92055 36806), and related services (Karma Companions, Karma Celebrations, Karma Marketplace) (together, the “Services”).

This policy applies to visitors, the family member who books on behalf of a senior (“Booking User”), and the senior receiving the service (“Beneficiary”), where their data is shared with us by the Booking User.

2. Scope

By using our website, submitting a booking form, or messaging us on WhatsApp, you agree to the collection and use of information as described here. If you provide us with information about another person (most commonly, your parent), you confirm you have their permission, or the authority as their family member or caregiver, to share it with us for the purpose of arranging our Services.

3. Information we collect

a) Information you give us directly

• Booking User: name, phone/WhatsApp number, email, relation to the Beneficiary, society or area.
• Beneficiary (senior): name, age, address/society, health conditions or mobility notes you choose to share, service preferences.
• Karma Celebrations bookings: occasion type, date, guest count, venue, special requirements.
• Karma Marketplace orders: delivery address, product preferences, budget range, gift messages.
• Any other details you share with our care team over WhatsApp, phone, or email.

b) Information collected automatically

• Website usage data: pages visited, device and browser type, approximate location (city-level), referral source, collected via cookies and analytics tools such as Google Analytics and Meta Pixel.
• WhatsApp interaction data: message delivery and read status, and timestamps, provided to us by the WhatsApp Business Platform.

c) Information from third parties

• Verification information about companions and vendors we onboard (not about you), used to maintain service quality.

4. Sensitive personal data: health and mobility information

5. How we use your information

We use personal data to:

• Match you with an appropriate companion, celebration vendor, or marketplace product;
• Confirm, schedule, and deliver bookings;
• Send transactional updates (booking confirmations, live visit updates, delivery status) via WhatsApp, SMS, call, or email;
• Send service-related and, where you have opted in, promotional messages about offers, new services, or events (see §7);
• Improve our Services, website, and customer support;
• Maintain safety and quality records for companions and vendors;
• Comply with legal, tax, and regulatory obligations;
• Investigate and prevent fraud, misuse, or safety incidents.

6. Legal basis for processing

Under India's Digital Personal Data Protection Act, 2023, we process your personal data on the basis of your consent, given when you submit a form, message us on WhatsApp, or otherwise voluntarily share information with us, and, where applicable, for the performance of the service you have requested.

7. WhatsApp Business Platform: specific disclosures

We use the WhatsApp Business Platform, provided by Meta, to communicate with you. By messaging us or submitting a booking form, you consent to receive messages from Karma Miles on WhatsApp, including:

• Transactional messages: booking confirmations, live visit and delivery updates, appointment reminders; and
• Marketing messages: offers, new services, festival greetings, and re-engagement messages, where you have opted in (for example, by starting a conversation with us or ticking a consent box on our forms).

Data shared with Meta/WhatsApp: message content, your phone number, and message metadata (delivery and read receipts) are processed by Meta Platforms, Inc. and WhatsApp Ireland Limited in accordance with the WhatsApp Privacy Policyand Meta's Business Data Privacy terms. We do not control how Meta processes this data beyond what its own privacy terms allow.

Opting out: You can stop receiving marketing messages from us at any time by replying “STOP” or “UNSUBSCRIBE” on WhatsApp, or by messaging us at +91 92055 36806 to request removal. You will continue to receive transactional messages related to any active or upcoming booking.

Message frequency: varies based on your active bookings. Marketing messages are limited to a reasonable frequency and are never sent without consent.

8. Who we share your information with

We share personal data only as needed to deliver our Services:

• Companions, priests, and vendors assigned to your booking, limited to the details needed to deliver the service (for example, name, address, relevant health or mobility notes).
• Delivery partners for Karma Marketplace orders, limited to delivery address and order details.
• Meta/WhatsApp, as described in §7.
• Google Workspace, where booking enquiries submitted through this website are recorded so our care team can act on them. Access is restricted to named members of our team.
• Analytics and hosting providers (for example, Google Analytics, AWS/Amplify) who process data on our behalf under confidentiality obligations.
• Payment processors, once online payments are introduced, solely to process transactions.
• Government or regulatory authorities, where required by law.

We do not sell personal data to third parties.

9. International data transfer

Our website may be hosted on infrastructure located outside India (for example, AWS global regions). Where data is transferred outside India, we take reasonable steps to ensure it receives a comparable standard of protection, consistent with the DPDP Act, 2023.

10. Data retention

We retain booking and communication records for as long as needed to deliver the Service, resolve disputes, meet legal and tax obligations, and for a reasonable period thereafter for record-keeping, typically up to 7 years for financial records, and up to 24 months of inactivity for other booking data, after which it is deleted or anonymised, unless you request earlier deletion under §12.

11. Data security

We use reasonable technical and organisational safeguards, including access controls, encrypted transmission (HTTPS), and limited internal access on a need-to-know basis, to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Your rights

Under the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you;
• Correct or update inaccurate or incomplete data;
• Withdraw consent for further processing (this does not affect processing already carried out, or bookings already in progress);
• Request erasure of your data, subject to our legal retention obligations;
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity;
• Lodge a complaint with our Grievance Officer (§13) or with the Data Protection Board of India.

To exercise these rights, email events@karmamiles.in or message us on WhatsApp at+91 92055 36806.

13. Grievance Officer

In accordance with the Information Technology Act, 2000, the IT Rules, 2021, and the DPDP Act, 2023:

14. Cookies and tracking

Our website uses cookies and similar technologies to remember your preferences, understand site usage, and measure the performance of marketing campaigns. You can control cookies through your browser settings; disabling them may affect some website functionality.

15. Children's privacy

Our Services are intended for adults booking on behalf of themselves or a senior family member. We do not knowingly collect personal data directly from individuals under 18. If you believe a minor has provided us data, contact us and we will delete it.

16. Third-party links

Our website and WhatsApp messages may link to third-party sites (for example, Instagram, Facebook, YouTube, LinkedIn). We are not responsible for the privacy practices of these third parties; please review their respective policies.

17. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the latest revision. Continued use of our Services after changes take effect constitutes acceptance of the revised policy.

18. Contact us