Children's Privacy Policy

This Children's Privacy Policy supplements our Privacy Policy and explains how Visionxpress Media House Private Limited treats personal data of users below 18 years of age ("children") on the MeetGrow platform.

1. Minimum age and parental consent

• The minimum age to create an account is 13 years.
• Children aged 13 to under 18 may create an account and use the Platform only if a parent or legal guardian provides verifiable consent at the time of sign-up, as required by Section 9(1) of the DPDP Act, 2023.
• Users below 13 years are not permitted to create an account.

2. How parental consent is captured

During sign-up, if the user indicates an age below 18:

1. The user is asked for the name, mobile number and email of a parent or legal guardian.
2. The platform sends a consent request to the guardian via email and SMS.
3. The guardian receives a link to a consent page that displays:
   • the child's name and age;
   • what data the platform will collect and why;
   • the retention period;
   • a statement that the child cannot use the platform for marketing or behavioural-advertising purposes;
   • a "Provide consent" button and a "Refuse consent" button.
4. The guardian confirms identity by entering an OTP sent to their mobile.
5. The consent record (timestamp, IP, identifiers) is stored and is auditable.
6. Until consent is confirmed, the child's account is held in pending status and cannot make bookings.

A guardian may withdraw consent at any time by writing to [email protected] or by visiting /account/parental-consent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

3. Prohibited processing for children

In line with Section 9(3) of the DPDP Act, we will not:

• track or profile children for behavioural advertising;
• target children with advertising of any kind;
• monitor children's online activity beyond what is necessary for the service;
• attempt to identify children by indirect means.

Specifically:

• Analytics SDKs (PostHog, Google Analytics) are disabled on children's accounts.
• Marketing emails and push notifications are blocked at the messaging service.
• Cookie banner defaults marketing cookies to "off" for children.

4. Information collected from children

We collect the minimum data needed:

• Mobile number (for OTP login).
• Name (for booking confirmations).
• Date of birth (to verify age band).
• Parent / guardian contact details (for consent and notifications).
• Booking data (event title, attendance status, QR code).

We do not ask children for:

• ID proof beyond age verification;
• demographic profile beyond what the booking requires;
• biometric data;
• precise geolocation.

5. Information shared with Organisers

When a child books a ticket, the Organiser receives only:

• the ticket-holder's first name and last initial;
• the booking reference and seat (if any);
• the parent / guardian's contact number for emergencies.

The Organiser is contractually required to use this data solely for event delivery and not for marketing.

6. Rights of children and guardians

A guardian (or the child if at least 16) may at any time:

• access the data on the child's account;
• request correction of inaccuracies;
• delete the account;
• export the data via /account/export-my-data;
• contact the DPO with any concerns.

Requests are processed within 30 days. Identity verification may be required.

7. Refusing or rejecting consent

If the guardian refuses consent or does not respond:

• the child's account is deleted after 30 days;
• any bookings made before deletion are completed (since payment had been authorised), but refunded if not yet used;
• the child may try again after their 18th birthday without restrictions.

8. Data retention for children's data

We delete a child's account and associated data when:

• the guardian withdraws consent (immediately, except statutory records);
• the account has been inactive for 3 years;
• the child turns 18 and does not re-confirm continued use within 30 days of being notified.

Statutory records (e.g., tax / booking records) are retained for the period required by law and are kept in restricted-access storage.

9. Reporting concerns

To report a child-safety concern, please contact us immediately at:

• Email: [email protected] (subject line: CHILD SAFETY)
• Grievance: [email protected]
• Postal: 124, 1st Floor, Block QP, Kothi Pitampura, Rani Bagh, New Delhi 110034

We respond to child-safety reports as a priority — acknowledgement within 4 working hours during business days.

10. Changes to this Policy

Material changes to this Policy will be notified to guardians and (where appropriate) to children directly, at least 30 days in advance.