User Privacy Policy

Effective Date: [DD/MM/YYYY] Last Updated: [DD/MM/YYYY]

Welcome to Muhrta.

Muhrta ("Muhrta", "we", "us", "our" or the "Platform") operates an online marketplace and event-service discovery platform that helps users discover, compare, evaluate and connect with service providers such as caterers, decorators, photographers, makeup artists and other event-related vendors.

This Privacy Policy explains how Muhrta collects, uses, processes, stores, shares, discloses and protects personal information relating to individuals who access or use the Muhrta website, services or features ("User", "you" or "your").

This Privacy Policy applies when you:

• browse Muhrta;
• create a User account;
• search for Vendors;
• view Vendor profiles;
• save or shortlist Vendors;
• submit an enquiry;
• contact or request contact from a Vendor;
• use Plan My Event;
• create or manage an event;
• submit reviews or ratings;
• communicate with Muhrta;
• subscribe to communications;
• participate in surveys or promotions; or
• otherwise use Muhrta's services.

By using Muhrta, you acknowledge the practices described in this Privacy Policy.

Where applicable law requires consent for a specific processing activity, Muhrta will obtain such consent through an appropriate mechanism.

Muhrta is an event-services marketplace and discovery platform.

The Platform helps Users find service providers based on criteria such as:

• event type;
• service category;
• location;
• service area;
• budget;
• availability;
• packages;
• pricing;
• reviews;
• ratings;
• portfolio;
• experience; and
• other relevant requirements.

Muhrta may facilitate communication between Users and independent Vendors.

Unless expressly stated otherwise, Muhrta is not the provider of the underlying catering, decoration, photography, makeup or other event services offered by Vendors.

Depending on how you use Muhrta, we may collect the following categories of information.

If you create an account, we may collect:

• full name;
• mobile number;
• email address;
• account username;
• password or authentication information;
• profile photograph, where provided;
• account preferences;

• communication preferences; and
• other information required to maintain your account.

We may collect contact information such as:

• mobile number;
• WhatsApp number;
• email address; and
• other contact information voluntarily provided by you.

This information may be used to communicate with you about:

• your account;
• enquiries;
• Vendor responses;
• Plan My Event requests;
• service notifications;
• support requests;
• security notifications; and
• promotional communications where permitted.

When you create an event, submit an enquiry or use Plan My Event, we may collect information relating to your event.

This may include:

• event type;
• event date;
• preferred time;
• event location;
• city or locality;
• venue information;
• approximate guest count;
• required service category;

• preferred Vendor type;
• budget or budget range;
• cuisine preference;
• decoration preference;
• photography requirements;
• makeup requirements;
• special requirements;
• service preferences; and
• other information you voluntarily provide.

This information helps Muhrta identify relevant Vendors and facilitate your event-service requirements.

If you use Muhrta's Plan My Event service, we may collect additional information necessary to understand your requirements.

This may include:

• event type;
• date;
• location;
• guest count;
• budget;
• required services;
• preferred style or theme;
• food preferences;
• special requirements;
• preferred Vendors;
• contact details; and
• notes provided by you.

Muhrta may use this information to manually or automatically identify suitable Vendors.

Relevant portions of this information may be shared with selected Vendors so they can evaluate and respond to your requirement.

When you use Muhrta, we may collect information about how you interact with the Platform, including:

• searches performed;
• Vendor profiles viewed;
• service categories viewed;
• event categories viewed;
• locations searched;
• filters applied;
• Vendors shortlisted;
• Vendors saved;
• packages viewed;
• enquiries submitted;
• pages visited;
• links clicked;
• session duration; and
• other interactions with the Platform.

We may use this information to improve:

• search relevance;
• recommendations;
• Vendor discovery;
• Platform navigation;
• service quality; and
• User experience.

If Muhrta allows Users to save or shortlist Vendors, we may retain information regarding:

• saved Vendors;
• shortlisted Vendors;
• preferred service categories;
• event interests;
• search preferences; and
• related Platform activity.

This information may be used to help you return to relevant Vendors and improve recommendations.

When you submit an enquiry to a Vendor, Muhrta may collect information including:

• your name;
• contact details;
• Vendor selected;
• service requested;
• event type;
• event date;
• location;
• guest count;
• budget;
• specific requirements;
• message or comments;
• enquiry date and time; and
• enquiry status.

Relevant information may be shared with the Vendor so that the Vendor can contact you and respond to your requirement.

Muhrta is designed to connect Users with independent service providers.

When you submit an enquiry, request a callback, use Plan My Event or otherwise request interaction with a Vendor, Muhrta may share relevant information with the Vendor.

This may include:

• your name;
• mobile number;
• email address where necessary;
• event type;
• event date;

• location;
• approximate guest count;
• budget;
• service requirements;
• preferences; and
• information contained in your enquiry.

We will seek to share only information reasonably necessary for the Vendor to respond to your requirement.

Submitting an enquiry may therefore result in the selected Vendor contacting you directly.

Your Information Vendors available through Muhrta are independent businesses.

Once your information has been legitimately shared with a Vendor for an enquiry, booking or service request, that Vendor may independently process information necessary to:

• respond to your enquiry;
• prepare a quotation;
• discuss your requirements;
• arrange a site visit;
• provide services;
• manage payments;
• fulfil bookings; or
• provide customer support.

Vendors are expected to use information received from Muhrta only for appropriate purposes connected with the relevant enquiry or service relationship.

Muhrta prohibits Vendors from improperly selling, distributing or misusing customer personal information obtained through the Platform.

However, Vendors may have their own privacy practices for information they collect independently outside Muhrta.

Users should exercise reasonable discretion when providing additional personal or financial information directly to Vendors.

Muhrta may use location information to help Users identify Vendors servicing a particular area.

Location information may include:

• city;
• locality;
• PIN code;
• manually entered event location;
• approximate location derived from an IP address; or
• precise device location where such functionality is offered and you have provided appropriate permission.

Where precise device location is used, Muhrta will request relevant device or browser permission as required.

Users may disable location permissions through their device or browser settings, although some location-dependent functionality may then be unavailable.

Users may be able to submit:

• Vendor ratings;
• written reviews;
• photographs;
• comments;
• feedback; and
• other content.

Reviews and ratings may be publicly displayed together with limited information identifying the reviewer, such as:

• first name;
• profile name;
• profile photograph; or
• other information indicated at the time of submission.

Users should not include unnecessary sensitive or confidential personal information in publicly posted reviews.

Muhrta may moderate reviews to address:

• spam;
• fraud;
• abusive content;
• fake reviews;
• conflicts of interest;
• unlawful material;
• irrelevant content; or
• violations of Platform policies.

When you contact Muhrta, we may retain information such as:

• name;
• contact details;
• communication content;
• support request;
• complaint;
• attachments;
• timestamps; and
• support history.

This may include communications through:

• email;
• telephone;
• WhatsApp;
• website forms;
• social media; or
• other support channels.

Where permitted by applicable law and appropriately notified, communications may be monitored or recorded for service quality, security, training, dispute resolution or fraud-prevention purposes.

Muhrta may automatically collect technical and device information, including:

• IP address;
• browser;
• device type;
• operating system;
• device identifiers;
• referring website;
• pages visited;
• login activity;
• session information;
• error information;
• security logs;
• timestamps; and
• Platform interaction data.

This information helps us operate, secure and improve Muhrta.

Muhrta may use:

• cookies;
• pixels;
• tags;
• local storage;
• analytics technologies;
• advertising identifiers; and
• similar technologies.

These may help us:

• maintain login sessions;
• remember preferences;
• understand Platform usage;
• improve performance;
• measure marketing activity;
• prevent fraud;
• analyse traffic;

• understand User journeys;
• measure advertising conversions; and
• personalise certain experiences where appropriate.

Where required by applicable law, appropriate consent choices will be provided for non-essential cookies or technologies.

Muhrta may maintain a separate Cookie Policy providing additional information.

Muhrta may receive information from third parties where permitted by law.

Examples may include:

• Vendors;
• referral partners;
• analytics providers;
• advertising platforms;
• authentication providers;
• social-media platforms;
• customer-support providers;
• payment processors; and
• other service providers.

Information obtained from third parties may be combined with information already held by Muhrta where legally permitted.

Muhrta may use personal information for the following purposes.

A. Providing Muhrta Services To:

• create and manage accounts;
• provide search functionality;

• display Vendors;
• provide Vendor recommendations;
• enable saved Vendor functionality;
• manage User events;
• facilitate enquiries;
• operate Plan My Event;
• facilitate reviews;
• provide notifications; and
• deliver Platform functionality.

B. Connecting Users With Vendors To:

• identify relevant Vendors;
• route enquiries;
• share requirements;
• facilitate Vendor contact;
• provide recommendations; and
• assist with Vendor selection.

C. Personalising User Experience To improve relevance based on information such as:

• event type;
• location;
• services searched;
• saved Vendors;
• previous enquiries;
• preferences; and
• Platform activity.

D. Customer Support To:

• respond to questions;
• troubleshoot problems;
• investigate complaints;
• resolve disputes;
• assist with Vendors; and
• provide technical assistance.

E. Platform Improvement To:

• analyse usage;
• understand customer needs;
• develop new features;
• improve Vendor matching;
• optimise searches;
• improve Platform design; and
• evaluate marketplace performance.

F. Security To:

• protect accounts;
• detect suspicious activity;
• prevent fraud;
• prevent spam;
• identify Platform misuse;
• secure Muhrta systems; and
• investigate security incidents.

G. Legal and Compliance Purposes To:

• comply with applicable law;
• respond to lawful requests;
• maintain records;
• resolve disputes;
• enforce agreements;
• protect Users;
• protect Vendors; and
• protect Muhrta's legal rights.

Muhrta may send operational communications including:

• OTPs;
• login notifications;
• enquiry confirmations;
• Vendor-response notifications;
• event reminders;
• Plan My Event updates;
• account notifications;
• security alerts;
• policy changes; and
• customer-support communications.

These communications may be necessary for providing the Platform.

Subject to applicable law and consent requirements, Muhrta may send Users information about:

• new Vendors;
• services;
• event-planning ideas;
• promotions;
• offers;
• discounts;
• new Platform features;
• seasonal campaigns;
• contests;
• newsletters; and
• other marketing communications.

Promotional communications may be sent through channels such as:

• email;
• SMS;
• WhatsApp;
• push notifications; or
• other communication channels.

Where required, Users may withdraw consent or unsubscribe from promotional communications.

Withdrawal from promotional communications will not necessarily prevent essential transactional or operational communications.

Muhrta may share User information in the circumstances described below.

Relevant personal information may be shared with Vendors when you:

• submit an enquiry;
• request Vendor contact;
• use Plan My Event;
• request recommendations;
• request quotations; or
• otherwise ask Muhrta to connect you with a Vendor.

Muhrta may use third-party service providers for:

• hosting;
• cloud infrastructure;
• analytics;
• communications;
• OTP delivery;
• email;
• SMS;
• WhatsApp communications;
• customer support;
• CRM;
• cybersecurity;
• database management;
• marketing automation;
• advertising;
• payment processing; and
• other operational purposes.

These providers may process information on behalf of Muhrta subject to appropriate contractual and security arrangements.

Where legally permitted and subject to applicable consent requirements, Muhrta may use third-party advertising and analytics services.

These providers may receive technical or interaction information used to:

• measure website traffic;
• understand marketing performance;
• attribute conversions;
• optimise campaigns; and
• advertise Muhrta.

Muhrta may disclose information where reasonably necessary to:

• comply with applicable law;
• comply with court orders;
• respond to lawful government requests;
• assist law-enforcement authorities;
• investigate fraud;
• prevent harm;
• enforce Platform agreements; or
• defend legal rights.

If Muhrta undergoes or considers:

• merger;
• acquisition;
• investment;
• restructuring;
• sale;
• transfer of business; or
• sale of assets,

relevant information may be disclosed to advisers, investors, purchasers or transaction counterparties subject to appropriate confidentiality and legal safeguards.

as a Standalone Commodity Muhrta does not intend to sell User personal information as a standalone data product.

Muhrta may generate revenue through activities such as:

• Vendor subscriptions;
• sponsored listings;
• featured Vendor placements;
• advertising;
• lead-generation services; and
• marketplace services.

Sharing User information with a Vendor in response to a genuine User enquiry or service request forms part of Muhrta's marketplace functionality.

Muhrta's present functionality may not require Users to make payments directly through Muhrta.

If payment functionality is introduced in the future, Muhrta or an authorised payment processor may collect information such as:

• billing name;
• billing information;
• payment method;
• transaction reference;
• payment status;
• refund information; and
• transaction history.

Muhrta may use third-party payment gateways to process payments securely.

Where payment credentials are processed directly by a payment provider, Muhrta may not receive or store the complete card, banking or payment credentials.

Muhrta will seek to retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as otherwise required or permitted by applicable law.

Retention may depend on:

• whether your account remains active;
• outstanding enquiries;
• events;
• disputes;
• complaints;
• customer-support requirements;
• fraud-prevention requirements;
• security needs;
• transaction records;
• accounting requirements;
• applicable legal obligations; and
• backup cycles.

Information may subsequently be:

• deleted;
• anonymised;
• aggregated; or
• securely archived,

depending on its purpose and applicable requirements.

Users may request deletion or deactivation of their Muhrta account through available account controls or by contacting Muhrta.

Before processing a request, Muhrta may need to:

• verify the User's identity;
• resolve unresolved complaints;
• preserve evidence relating to fraud;
• retain legally required records;
• address outstanding transactions or enquiries; or
• preserve information required to establish or defend legal claims.

Deletion from active Platform systems may not immediately remove information from secure backups.

Muhrta takes reasonable technical and organisational measures designed to protect User personal information.

These measures may include:

• account authentication;
• password protection;
• access controls;
• restricted administrative access;
• encryption or equivalent safeguards where appropriate;
• monitoring;
• security logging;
• backups;
• system updates;
• security review processes; and
• confidentiality obligations.

However, no internet-based service can guarantee absolute security.

Users should:

• use strong passwords;
• protect OTPs;
• avoid sharing account credentials;
• log out from shared devices; and
• immediately report suspected unauthorised access.

If Muhrta becomes aware of a personal-data breach, we will assess and respond to the incident.

Appropriate actions may include:

• containing the incident;
• investigating the breach;
• protecting affected systems;
• implementing corrective measures; and
• providing legally required notifications to affected individuals or relevant authorities.

Subject to applicable Indian law, commencement provisions, identity verification and legal exceptions, you may have rights relating to your personal data.

These may include the right to:

• obtain information concerning your personal data;
• request correction;
• request completion of incomplete information;
• request updating;
• request erasure where applicable;
• withdraw consent where processing is based on consent;
• manage communication preferences;
• raise a grievance; and
• exercise other applicable data-protection rights.

Muhrta may request reasonable verification before processing a privacy request.

Where processing depends on your consent, you may withdraw that consent through the mechanism provided by Muhrta.

Withdrawal will not invalidate processing already lawfully carried out before withdrawal.

If particular information is necessary to provide a service, withdrawing consent may result in some functionality becoming unavailable.

Users should maintain accurate and current account information.

Depending on Platform functionality, information may be corrected through:

• Profile & Settings;
• account settings;
• customer support; or
• a privacy request submitted to Muhrta.

Muhrta may verify requests relating to important account information.

Users may raise privacy-related concerns or complaints with Muhrta.

Grievance / Privacy Contact

Name/Designation: [Grievance Officer / Privacy Contact] Email: [Privacy Email] Phone: [Contact Number] Address: [Registered/Business Address]

Muhrta will review legitimate privacy grievances and respond in accordance with applicable legal requirements.

Where applicable law provides further remedies, individuals may also exercise those remedies after completing the relevant grievance process.

Muhrta's Platform may relate to family events such as:

• birthdays;
• baby showers;
• family functions;
• weddings; and
• other celebrations.

However, Muhrta's User accounts and marketplace services are intended primarily for adults capable of entering into the relevant service relationship.

Under India's Digital Personal Data Protection Act, a child is generally defined as an individual who has not completed eighteen years of age.

Where Muhrta knowingly processes children's personal data and applicable requirements are in force, appropriate parental or lawful guardian consent and additional protections will be implemented as required.

Users should avoid unnecessarily providing children's personal information when submitting event enquiries.

Other Individuals Users may upload photographs or other content in connection with reviews or other Platform functionality.

Users should ensure that they have appropriate authority or permission before uploading photographs containing:

• children;
• family members;
• guests;
• Vendors;
• employees; or
• other identifiable individuals.

Muhrta may remove content that creates privacy, safety or legal concerns.

Users may submit:

• reviews;
• ratings;
• photographs;
• comments;
• questions;
• feedback;
• messages; and
• other content.

Certain User-generated content may be publicly visible.

Users should not include:

• bank details;
• passwords;
• OTPs;
• government identification numbers;
• private addresses;
• confidential information; or
• unnecessary personal information

in publicly accessible content.

Muhrta may process information necessary to detect and investigate:

• fake accounts;
• spam;
• fraudulent enquiries;
• manipulated reviews;
• impersonation;
• Vendor fraud;
• account compromise;
• abusive activity; and
• violations of Platform policies.

Muhrta may restrict or suspend accounts where reasonably necessary to protect the marketplace.

Ranking Muhrta may use automated or manual systems to determine which Vendors are shown to Users.

Factors may include:

• service category;
• location;
• User requirements;
• availability;
• profile relevance;
• profile completeness;
• ratings;
• reviews;
• customer engagement;
• responsiveness;
• Platform performance;
• paid or sponsored placement; and
• other marketplace factors.

Paid or sponsored placements may be identified appropriately where required.

The appearance or ranking of a Vendor does not constitute a guarantee by Muhrta of the Vendor's quality, suitability, pricing or performance.

Information Muhrta may analyse Platform information to generate aggregated statistics such as:

• popular event categories;

• popular service categories;
• location-level demand;
• enquiry trends;
• average budgets;
• Vendor demand;
• search trends; and
• Platform usage.

Where information is appropriately aggregated or de-identified so that it does not reasonably identify an individual, Muhrta may use it for:

• analytics;
• market research;
• product development;
• business planning;
• reporting; and
• marketplace improvement,

subject to applicable law.

Muhrta may contain links to third-party websites or services, including:

• Vendor websites;
• social-media pages;
• maps;
• payment providers;
• messaging applications; and
• other external services.

Muhrta does not control the privacy practices of independent third parties.

Users should review the privacy policies of third-party services before providing information directly to them.

Processing Muhrta may use cloud providers and technology service providers located in India or other permitted jurisdictions.

Where personal information is processed or transferred across jurisdictions, Muhrta will seek to comply with applicable restrictions and safeguards under Indian law.

Muhrta may update this Privacy Policy periodically to reflect:

• changes in services;
• new Platform features;
• changes in business operations;
• technological developments;
• security requirements;
• legal developments; or
• regulatory requirements.

The revised Privacy Policy will display an updated Last Updated date.

Where required by applicable law, Muhrta may provide additional notice or seek consent for material changes affecting how personal information is processed.

This Privacy Policy will be governed by the laws of India.

Muhrta intends to process personal data in accordance with applicable Indian privacy and data-protection requirements, including, to the extent applicable and in force from time to time:

• the Digital Personal Data Protection Act, 2023;
• rules and notifications issued under that Act;
• applicable provisions of the Information Technology Act, 2000; and

• other applicable Indian laws and regulations.

Policies This Privacy Policy should be read together with Muhrta's other applicable policies, including:

• Terms of Use;
• User Terms and Conditions;
• Vendor Terms and Conditions;
• Vendor Privacy Policy;
• Cookie Policy;
• Review Policy;
• Marketplace Guidelines; and
• other Platform policies made available by Muhrta.

For privacy-related questions, account-data requests, corrections, deletion requests, consent withdrawal or grievances, Users may contact:

Muhrta

Website: www.muhrta.com Email: [Privacy / Grievance Email] Phone: [Official Muhrta Contact Number] Address: [Registered / Business Address]

User Privacy Summary When you use Muhrta, we may collect information such as your name, phone number, email address, event requirements, location, searches, Vendor enquiries, saved Vendors and Platform activity.

We use this information primarily to:

• operate your account;
• help you discover relevant Vendors;
• process enquiries;
• provide Plan My Event services;
• connect you with Vendors;
• provide support;
• improve Muhrta;
• maintain Platform security; and
• communicate with you.

When you request contact with a Vendor or submit an enquiry, information necessary for the Vendor to respond may be shared with that Vendor.

Muhrta does not intend to sell your personal information as a standalone data product.

You may have rights relating to correction, updating, deletion, consent withdrawal and grievance redressal under applicable law.