This Privacy Policy describes how Fursat Farms Private Limited (CIN: U55101WB2023PTC266520), trading as Fursat ("we", "us", "our", "Fursat", the "Data Fiduciary"), collects, uses, stores, and protects your personal data when you use our website at fursat.fun and related services ("Platform").
This policy is published in compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA"), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
The Data Fiduciary responsible for your personal data is:
Fursat Farms Private Limited 156/1, Siliguri Bazar, Fire Brigade Road, Siliguri, Darjeeling, West Bengal 734005, India CIN: U55101WB2023PTC266520 GSTIN: 19AAFCF7211E1ZU Email: hi@fursat.fun
We collect the following categories of personal data:
We collect and process your personal data for the following specific, lawful purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and authentication | Identity |
| Processing bookings and payments | Identity, Financial |
| Communication between Guests and Hosts | Identity, Communications |
| Customer support | Identity, Communications, Usage |
| Platform improvement and analytics | Device/Technical, Usage |
| Legal compliance (tax, law enforcement) | Identity, Financial, Location |
| Fraud prevention and security | Identity, Device/Technical, Usage |
| Marketing communications (only with your separate consent) | Identity, Usage |
Under Section 6 of the DPDPA, we process your personal data based on your free, specific, informed, and unambiguous consent, obtained at the time of account creation or booking.
We may also process data without consent in the following circumstances permitted by Section 7 of the DPDPA:
We share your personal data with the following categories of recipients, only to the extent necessary:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Hosts (for Guest bookings) | Fulfilling accommodation | Name, phone, booking dates, guest count |
| Payment processors (bank/UPI) | Processing payments | Financial data |
| Supabase (authentication) | User account management | Email, hashed password |
| Cloudinary (image hosting) | Storing property photos | Property images |
| Vercel (hosting & analytics) | Website hosting, performance monitoring | Device/Technical, Usage |
| PostHog (analytics) | Understanding usage patterns | Anonymised Usage, Device/Technical |
| Google Places API | Property verification | Property addresses |
| Gupshup (WhatsApp) | Booking notifications to Hosts | Phone numbers, booking details |
| Law enforcement | Compliance with legal obligations | As required by law |
We do not sell your personal data. We do not share your data for third-party advertising or marketing.
Some of our service providers process data outside India:
Such transfers are made in compliance with the DPDPA and applicable notifications issued by the Central Government regarding permissible jurisdictions. We ensure that adequate safeguards are in place with each provider.
We retain your personal data only as long as necessary for the purposes described in this policy:
| Data Category | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| Booking records | 8 years (as required under Income Tax Act and GST law) |
| Payment records | 8 years (tax and audit compliance) |
| Messages | 3 years after last booking, or until account deletion |
| Analytics data | 2 years (anonymised after 90 days) |
| Marketing consent records | Duration of consent + 1 year |
Upon expiry of the retention period or upon withdrawal of consent (whichever is earlier), personal data will be erased within 30 days, except where retention is required by law.
Under Sections 11–14 of the DPDPA, you have the following rights:
To exercise any of these rights, email yogesh@fursat.fun with the subject line "Data Principal Rights Request". We will respond within 7 days of receiving a valid request.
In compliance with Section 9 of the DPDPA:
We implement reasonable security practices and procedures in accordance with Section 43A of the IT Act and the SPDI Rules, 2011, including:
While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a data breach, we will:
We use the following types of cookies:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Authentication, session management | Session |
| Analytics (PostHog, Vercel) | Understanding usage patterns, performance | Up to 1 year |
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.
We do not use cookies for third-party advertising.
The Platform may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.
In accordance with the IT (Intermediary Guidelines) Rules, 2021 and the DPDPA:
Yogesh Bansal Director & Grievance Officer Email: yogesh@fursat.fun Phone: +91 70474 74942 Address: 156/1, Siliguri Bazar, Fire Brigade Road, Siliguri, Darjeeling, West Bengal 734005, India
Complaints will be acknowledged within 24 hours and resolved within 15 days.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you via email or a prominent notice on the Platform.
For questions about this Privacy Policy, contact:
Fursat Farms Private Limited Email: hi@fursat.fun Phone: +91 70474 74942 Address: 156/1, Siliguri Bazar, Fire Brigade Road, Siliguri, Darjeeling, West Bengal 734005, India
Questions about this policy? Contact us at hi@fursat.fun