Policy
Privacy policy
Last updated: 09 May 2026
This policy explains what information Rosae collects when you book a private theater on rosae.in, why we collect it, and what rights you have under Indian law.
Who we are
Rosae is operated by QUANTELLOVENTURES PRIVATE LIMITED, a company incorporated in India, with its registered office at 67 Jyothi Nivas College Road, 5th Block, Industrial Area, Koramangala, Bengaluru, Karnataka 560095.
Data Protection contact: [email protected] / 6361729855.
What information we collect
Information you give us
- Name, phone number, email address (booking)
- Number of guests, date, slot, theater preference (booking)
- Payment method metadata — we do not store full card details (handled by the payment gateway)
- Optional account info (password hash, profile preferences) if you create an account
- Messages you send us via WhatsApp, contact form, or email
Information collected automatically
- Device, browser, and operating system info
- IP address (truncated for analytics)
- Cookies (see Cookies section)
- Analytics events (page views, button clicks, booking funnel)
Information from third parties
- Payment confirmation status from the payment gateway
- Optional Google login profile (name, email) if you sign in with Google
Information we do NOT collect
- Biometric or facial-recognition data
- Criminal background data
- Co-guest personal information beyond head count
Why we collect it
- To confirm and fulfil your booking
- To send you booking confirmations, reminders, and changes via SMS, WhatsApp, or email
- To accept payments and issue invoices
- To improve our website and theaters using aggregate analytics
- To respond to your support requests
- To comply with Indian tax (GST) and consumer-protection law
- To send marketing messages — only if you have opted in
Legal basis (DPDP Act 2023)
- Consent — when you create an account, opt into marketing, or accept cookies
- Contractual necessity — when we process your booking
- Legal obligation — when we are required to retain records for tax or consumer-protection compliance
Data retention
- Booking records — 7 years (Indian tax requirement)
- Account data — until you delete your account
- Marketing opt-in — until you unsubscribe
- Analytics — 14 months (Google Analytics default)
- Support messages — 2 years
Your rights under DPDP Act 2023
- Right to access your personal data
- Right to correct inaccurate data
- Right to erase data (subject to retention requirements above)
- Right to grievance redressal
- Right to nominate another individual to exercise your rights in case of incapacity
To exercise any right, email [email protected]. We respond within 30 days.
Marketing communications
- We will only send marketing WhatsApp or email messages if you have opted in.
- Every message has a one-tap unsubscribe.
- Booking-related transactional messages (confirmation, reminder, refund status) are not marketing and continue regardless.
Data security
- Data is stored on hosted infrastructure with industry-standard encryption at rest and in transit.
- Passwords are hashed using bcrypt or equivalent.
- We do not store full payment-card details.
Children
Rosae’s services are intended for users 18 and older. We do not knowingly collect personal data from anyone under 18.
Changes to this policy
Material changes will be notified via email or WhatsApp at least 7 days before they take effect.
Grievance officer
- Name: To be appointed
- Email: [email protected]
- Address: 67 Jyothi Nivas College Road, 5th Block, Koramangala, Bengaluru 560095
- Response time: within 7 days for acknowledgment, 30 days for resolution.
See also our terms and conditions and refund policy.