1.1 Regulatory Scope

• 1.1.1 Statutory Governance: This policy governs the processing of personal and sensitive data across MeetUrNeed web domains, mobile portals, POS terminals, and school ERP interfaces in strict compliance with the DPDP Act, 2023, and the Information Technology Act, 2000.

1.2 Data Roles & Architectural Distinctions

• 1.2.1 Data Fiduciary: MeetUrNeed acts as a Data Fiduciary for consumer travel/rental bookings and merchant partner onboarding.
• 1.2.2 Data Processor: MeetUrNeed acts strictly as a Data Processor for student records, academic metrics, and canteen transactions managed on behalf of client educational institutions.

2.1 Consumer & Mobility Data

• 2.1.1 Contact & Identity: Full legal name, verified mobile number, email address, residential address, and emergency contact details.
• 2.1.2 Driving Credentials & Collateral: Driving Licence details and original government ID (Voter ID, Aadhaar, Passport) submitted as temporary rental collateral.
• 2.1.3 IoT Fleet Telematics: Real-time GPS location coordinates, road speed logs, acceleration patterns, and geofence boundary alerts.

2.2 Adventure & Extreme Sports Disclosures

• 2.2.1 Health Declarations: Self-declared medical records and passenger body weight for paragliding wing-loading safety checks.

2.3 Enterprise POS & Merchant Data

• 2.3.1 Commercial Profile: Trade name, business PAN, GSTIN registration, bank account settlement details, and real-time dining/order ticket records.

2.4 Educational SMS & Smart School Canteen Records

• 2.4.1 Student Profiles: Enrollment ID, name, grade/section, parent/guardian contact credentials, and daily attendance logs.
• 2.4.2 Canteen Wallet Transactions: RFID/NFC smart token serial numbers, itemized cafeteria purchases, and parent-defined spending caps or dietary allergen flags.

3.1 DPDP Act Compliance for Students

• 3.1.1 Behavioral Profiling Ban: MeetUrNeed will never track, profile, or conduct behavioral monitoring of minors using school or canteen interfaces.
• 3.1.2 Zero Advertising Monetization: No student data, academic records, or canteen purchase histories will ever be sold, leased, or monetized for commercial advertising.
• 3.1.3 Institutional Consent: Participating educational institutions warrant that they have secured verifiable parental/guardian consent before entering student data into the system.

4.1 PCI-DSS Level 1 Payment Processing

• 4.1.1 Zero Card Storage: MeetUrNeed does not store raw credit/debit card numbers, CVVs, or net-banking credentials. Transactions are processed via RBI-authorized, PCI-DSS Level 1 compliant gateways using end-to-end tokenization.
• 4.1.2 Transport Encryption: All transactions and account sessions run over encrypted TLS 1.3 / SSL channels.

4.2 Data Retention & Deletion Schedules

• 4.2.1 Commercial Records: Booking invoices and transaction ledgers are retained for 7 years to satisfy statutory tax obligations.
• 4.2.2 GPS Telematics: Granular second-by-second telematics traces are purged after 90 days, retaining only summary trip metrics.
• 4.2.3 Institutional Data: Student records are scrubbed within 60 days following institutional contract termination.

5.1 User Privacy Rights

• 5.1.1 Access & Rectification: Users have the right to review, update, or request the erasure of personal profiles, subject to legal retention obligations.

5.2 Grievance Officer Contact Details