Spectacom Global Private Limited is a company registered in India under the Companies Act, 2013 having its registered office at Plot No. 809, Phase-5 Udyog Vihar, Gurugram, Haryana– 122016, India (referred to as "Spectacom", "we" or "us") in this Privacy Policy ("Policy"). We at Spectacom including our affiliates and subsidiaries, are strongly committed to protecting the privacy of your Personal Data (as defined hereinafter). The words "you" or "your" or "User" as used herein, refer to all individuals and/or entities browsing, accessing or using the mobile application and/or the website getmybib.com (collectively referred to as the "Platform"), for ordering any Product (as defined hereinafter), making a User account, availing our Services (as defined hereinafter) or any other purpose. "Event Organizers" refers to entities selling their products such as tickets to events or merchandise related to the same to Users on the Platform. "Products" shall mean tickets to the Event Organizer's events or any other current or future events as well as merchandise related to the same including its sub-brands offered for sale to you on the Platform.

This Policy explains our collection, retention, use, processing, disclosure, and protection of the Personal Data that you may provide to us when availing our Services, purchasing a Product, communicating with us, or otherwise interacting with us including the use of the Platform.

This Policy is intended to inform the User the following:

(a) The kinds of Personal Data we may gather during your visit to the Platform;

(b) Why we gather your information;

(c) What we use your Personal Data for;

(d) When we might disclose your Personal Data; and

(e) How you can manage your Personal Data. This Policy constitutes a legal agreement between you, the User of the Platform, and us. By availing our Services, purchasing a Product, communicating with us, or otherwise interacting with Spectacom, including the use of the Platform, you are hereby providing us your express, specific, and voluntary consent and allowing us to use, collect, access, process, store, disclose, transfer and protect your Personal Data in accordance with this Policy and for the purposes stated herein.

IF YOU DO NOT AGREE WITH THIS POLICY, PLEASE DO NOT PROCEED FURTHER TOUSE/ACCESS THE PLATFORM (INCLUDING BUT NOT LIMITED TO AVAILING OUR SERVICESAND/OR PURCHASING THE PRODUCTS).

This Policy shall be read in conjunction with the T&Cs and any other terms and conditions published on the Platform.

DEFINITIONS

For the purposes of this Policy, the following terms shall have the meaning set forth below:
"Data Protection Law" shall mean any data protection, data security or privacy law, including, without limitation, the Information Technology Act, 2000 including the rules thereunder ("IT Act and Rules") and any other applicable laws governing Personal Data, communication-related data protection laws, data security or privacy laws.

"Personal Data" shall mean any personally identifiable information relating to an identified or identifiable individual, including data that identifies an individual or that could be used to identify, locate, track, or contact an individual. Personal Data includes both directly identifiable information, such as name, identification number or unique job title, and indirectly information such as date of birth, unique mobile or wearable device identifier, information that could be used to identify a household, telephone number, key-coded data or online identifier, such as Internet Protocol (IP) addresses, and includes any data that constitutes "personal data" or "sensitive personal data or information" under the IT Act and Rules, or similar terms under other Data Protection Law.

"Sensitive Personal Data or Information" with respect to a person shall mean such personal information which consists of information relating to:

• Biometric information;
• Financial information such as bank account or credit card or debit card or other payment instrument details;
• Medical records and history;
• Password;
• Physical, physiological and mental health conditions;
• Sexual orientation;
• Any detail relating to the above clauses as provided to us for providing the Services; and
• Any information received under above clauses by us for processing, stored or processed under lawful contract or otherwise.

"Services" shall mean event organizing solutions provided to Event Organizers to list their Products on the Platform, making such Products available to the Users and allied activities. The capitalized terms used but not defined herein shall have the same meaning assigned to them under the T&Cs.

INFORMATION WE MAY COLLECT AND HOW WE COLLECT IT

We may collect, store, disclose, and process the following data about you:

1. Information You Provide to Us:
You may be required to give us your Personal Data while availing our Services or purchasing Products on the Platform. You hereby agree to provide us with accurate information and ensure that you update such information as required. We may receive the following information directly from you, thereby enabling you to make use of the Platform:

(a) Identification details: name, date of birth, gender, photograph, etc. which are used for the purpose of registering yourself for the Event Organizer's events (including information provided about your emergency contact);

(b) Correspondence details: email address, telephone number, postal address, postal code, etc. which are used for the purposes of communication with you, resolving your queries, and provision of other support Services. This may include information provided by you about your emergency contact while registering for an event of the Event Organizer;

(c) Financial data: bank account details, payment account number, credit or debit card number, etc. which are used for the purpose of enabling and effecting transactions on the Platform; and

(d) Other information: information which you may provide to us when you leave us a message, during customer support conversations survey, or for assistance in case of matters related to law enforcement or investigations. Please note that we also may collect and store your Personal Data that we receive from other sources, such as the Event Organizers, for the purpose of providing their Products on the Platform. Please be advised that the Event Organizers have their own privacy policies, and you should refer to them for any questions you may have about the information they may collect about you when you register for their events through the Platform and/or purchase their Products.

2. Information We Collect Automatically:
We may also collect certain Personal Data from you automatically through our servers that keep an activity log tracing all Users of the Platform. The information our servers collect may include but is not limited to your IP address, your registered domain or home server, time of access, date of access, web page(s) visited, number of clicks, software crash reports, type of browser used, session identification number, search terms, search results, and referring website’s addresses.

3. Information We Receive from Third Parties:

We may receive information about you from third parties if you have provided your consent for such information to be shared with us. We may combine and process such data internally towards our Services. We also work closely with select third parties (including, for example, subcontractors such as advertising networks, analytics providers, search information providers, infrastructural services, including cloud service providers) and may receive information about you from such sources. We may also collect and receive information in an aggregated form from different browser types for analysis.

USE OF COOKIES AND SIMILAR TECHNOLOGY

We, and/or our third parties may use cookies, which are small text files that are stored on your computer or equipment when you visit certain online pages that record your preferences ("Cookies"). We use Cookies to track your use of the Platform and their features. Some of the Cookies that we may use are as follows:

1. Strictly Necessary Cookies: These are Cookies that are required for the operation of the Platform. They include, for example, Cookies that enable you to log into secure areas of the Platform or make use of e- billing Services.

2. Analytical/Performance Cookies: These Cookies allow us to recognize and count the number of visitors and to see how visitors move around the Platform when they are using it. This helps us to improve the way the Platform works.

3. Functionality Cookies: These are used to recognize you when you return to the Platform. It enables us to remember your preferences.

4. Commercial Cookies: These Cookies are used to display personalized advertisements on the Platform as well as other third party websites.

The Event Organizers may embed certain Cookies in the Products listed on the Platform. You may occasionally also get Cookies from companies with links on the Platform. We do not control these Cookies, and these Cookies are not subject to our Policy. You have the ability to accept or decline Cookies. Most web browsers automatically accept Cookies, but, if you prefer, you can usually modify your browser setting to decline Cookies. However, if you block all Cookies (including essential Cookies) you may not be able to access all or parts of the Platform. You agree that if you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on the Platform, we may collect and/or store such information. We use Google Analytics on the Platform. Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google Analytics uses Cookies to collect anonymous traffic data to help us analyze how you use the Platform. The information generated by Cookies (including your IP address) will be transmitted to and stored by Google on servers. Google will use this information for the purpose of evaluating your use of the Platform, compiling user activity reports, and providing other services relating to the Platform's activity and internet usage. Google may also transfer this information to third parties where required to do so by Applicable Law, or where such third parties process the information on Google’s behalf. By using the Platform, you consent to the processing of data about you by Google in the manner and for the purposes described in this Policy.

CHILDREN'S PERSONAL DATA

Please note that no information is collected from any person under the age of 18 (eighteen) years. Our Services are not directed to or intended for use by children, except for children who are registered for the events of the Event Organizers by their parents or guardians. We will only collect information about children when we have the express consent from the child’s parent or guardian. The information we collect will only be used by us and the Event Organizers to provide relevant event entries and participation. We need to use the information that you give us about your children to fulfil our agreement with you to provide our Services, if you, as a parent or guardian have registered them for the event(s) of the Event Organizers or purchase any Products on the Platform.

THIRD PARTY LINKS

Please be advised that the practices described in this Policy apply only to the information we gather on the

Platform. The Platform may contain links to third party applications/websites. Please note that when you click on one of these links, you are entering another application/website over which we have no control and will bear no responsibility. We do not own or control these third party applications and when you interact with them you may be providing information directly to them or us or both. Such information provided by you is only processed for the purposes of the legitimate interests pursued by the third party. Often these third party applications/websites require you to enter your Personal Data and further, use and collect your Personal Data. The third party, in accordance with its privacy policy and the terms of use, utilizes this information. Since we do not control the privacy practices of these third parties, we encourage you to read the privacy statements/policies on all such applications/websites before deciding to use their services as their policies may differ from our Policy. You agree that we shall not be liable for any breach of the privacy of your Personal Data, or any loss incurred by your use of these third party applications/websites. This Policy DOES NOT apply to information that you provide to use, or that is collected by, any third party, such as social networks that you use which are not in connection with our Services. We encourage you to consult directly with such third parties about their privacy practices.

HOW WE MAY USE YOUR INFORMATION

By providing consent under this Policy, you grant us the permission to use, copy, transmit, process, disclose, store and back-up your Personal Data for the purposes of our Services and/or for any other purpose mentioned below. We shall not be responsible for the authenticity of any information supplied by you to us or any other person acting on our behalf. Except as otherwise provided in this Policy, we do not use or disclose information about your individual visits to the Platform or your Personal Data collected online to any parties other than those with whom we partner or are affiliated with, without your consent. We may use your information for the following purposes:

1. Personal Data obtained in connection with the Services:

We use your Personal Data in different ways, depending on the nature of the Services, communications, or other interactions between you and the Platform. Below is a table describing how we use the Personal Data, why we do it, and the legal basis for each category of use.

Categories of Personal Data	Purpose for Processing	Legal Basis for Processing Personal Data
Name and contact details	Deliver or confirm a purchase	Performance of a contract
	Send service messages email and postal mail regarding the Services such as order updates	Performance of a contract
	Enable you to enter and participate in an event	Performance of a contract
	Enable you to create a User Account	Performance of a contract and consent
	Send information by email, SMS messaging and postal mail about new events and products	Legitimate interests or consent
	By third parties to send information by email, SMS messaging and postal mail about their products or services	Consent
	Fraud prevention and detection	Legal obligation
	Provide customer services and support	Performance of a contract or legitimate interests
Date of birth information	Enable you to enter and participate in an event that have age restrictions	Performance of a contract
	Enable you to create a User Account	Performance of a contract and consent
Photograph	Enable us to share publicly if you create a User Account	Consent
Purchase/financial account info	Enable our partners/affiliates to process payment of goods and services we provide to you	Performance of a contract or legitimate interests
Emergency contact information	Enable the Event Organizers to respond to an emergency in case it arises during an event that you are participating in	Performance of contract or legitimate interests
Information we collect automatically	Enable us to perform website analytic and to make our website and the advertising displayed on it, and the marketing messages we send to you more relevant to your interest	Consent

2. Use of Anonymous Information:

We may use information that we collect automatically to help us determine how viewers use the Platform and who our users are in order to improve the Platform. We may also use this information to provide information in an aggregated and anonymised form to our partners and other third parties about how our users collectively use the Platform. We may also use or share this information (other than Personal Data) in any other manner that we deem appropriate or necessary, subject to your consent.

3. Third Parties:

We may occasionally have third party representatives, agents, affiliates, and partners perform functions on our behalf, such as marketing, analytics, etc. We are also required to share your information with the Event Organizer whose Products you have purchased on the Platform. These entities may have access to your Personal Data, but only as needed to perform their services. These entities will be bound by the same standard of data protection obligations as we are under this Policy.

4. Emergency Situations:

We may also use or disclose Personal Data if required to do so by Applicable Law or in the good-faith belief that such action is necessary to: (a) conform to Applicable Law or comply with legal process served on us or the Platform; (b) protect and defend the our rights or property, the Platform, or our users, and (c) act under emergency circumstances to protect the personal safety of us, our affiliates, agents, the users of the Platform or the public.

HOW WE SHARE YOUR PERSONAL DATA

Your Personal Data will be used by Spectacom's affiliates for the purposes described above and for accounting, tax, and other administrative purposes. We shall keep the Personal Data confidential and take steps to prevent unauthorized disclosures of the same to the best of our ability. However, you agree we may disclose such information to:

1. Our personnel, representatives, agents, advisors, affiliates, partners and service providers including but not limited to services of registration, timekeeping, processing, analytics, IT services, data storage, payment processing, survey and market research;

2. Third parties in accordance with the contractual arrangements we have in place with them. Such third parties shall be bound by the same standards of data protection as we are under this Policy. We may share your Personal Data with third parties so that they can send you communications about their products and services, however we will only share your Personal Data under these circumstances if we receive your prior express consent. If we determine it to be necessary, we may also disclose your Personal Data to a third party:

(a) to comply with any Applicable Law, a court order, a request from law enforcement or other legal process;

(b) to protect the legitimate rights, privacy, property, interest or safety of the Platform, our personnel, customers, business partners or the general public;

(c) in relation to a change in ownership or control of the Platform such as a merger, sale, acquisition, or bankruptcy. In such an event, we will notify you and take your prior consent before your Personal Data is transferred and becomes subject to a different privacy policy; or

(d) to prevent and detect actual or potential fraud or other illegal activities.

3. Persons to whom we are required to make disclosure under Applicable Laws and regulations.

DATA SECURITY

1. The Platform will maintain appropriate security measures to minimize the risk that Personal Data will be lost, used without authorization, or accessed without authorization. We do this by having in place a range of appropriate technical and organizational measures, including firewalls, encryption measures, and disaster recovery plans. All information you provide to us is secured on our servers. In public areas, you should exercise caution and not leave your computer/device unattended. The use of established malware and virus protection software and applications for your device is recommended.
2. Please remember that if you post any of your Personal Data in the public areas of the Platform, such information may be collected and used by others over whom we have no control.

3. We limit access to your Personal Data to those who have a legitimate business need to use it. Those who process your information will do so only in an authorized manner and are subject to a duty of confidentiality commensurate with our confidentiality obligations to you. We have implemented procedures to deal with suspected security incidents involving Personal Data and will notify the applicable regulators and you of such incidents as required by Applicable Law.

4. You understand and acknowledge that any transmission through the internet is not completely secure and is at your own risk. However, we will do our best to protect your Personal Data. We cannot guarantee or give any warranties in this regard, and hereby disclaim all liabilities for any breach of security, malicious attacks, error, omission or commission concerning the data transmitted through the Platform or leading to a breach of data or information of the User.

5. Users are responsible for maintaining the confidentiality of the User Account information. You agree to (i) immediately notify Spectacom of any unauthorized use of the User Account or any other breach of security; (ii) ensure that you exist/log out from the User Account at the end of each session. You acknowledge that Spectacom cannot and shall not be held liable for losses or damages arising from your failure to comply with this clause. You may be held liable for losses incurred by Spectacom or any other user due to authorized or unauthorized use of your User Account as a result of your failure in keeping your User Account information secure and confidential.

6. If you suspect any misuse or loss of or unauthorized access to your Personal Data, please let us know immediately. Please raise your concern with info@spectacom.in, in the first instance, and we will investigate the matter and update you as soon as possible on the next steps.

7. We may also subject ourselves to regular checks by third party security evaluation specialists and restrict access to your Personal Data by our personnel on a need-to-know basis only. Once we have received your Personal Data, we will use strict procedures and security features to try and prevent, as far as is reasonably possible, unauthorized access to your Personal Data.

RETENTION, STORAGE AND TRANSFER OF PERSONAL DATA

1. We will keep your Personal Data for the time necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements. The retention period may be extended in accordance with the Applicable Law and the Personal Data shall only be used for such a period that is absolutely necessary for us to comply with the Applicable Law.

2. To determine the appropriate retention period, we consider the categories, amount, nature and sensitivity of Personal Data, the potential risk of harm from unauthorized use of disclosure of the Personal Data, the purposes for which we process the Personal Data, if we can achieve the purposes through other means, and the applicable legal requirements.

3. While we will endeavour to permanently erase your Personal Data once it reaches the end of its retention period, some of your Personal Data may still exist within our systems, for example if it is waiting to be overwritten. For our purposes, this data has been put beyond use, meaning that, while it still exists in the electronic ether, our personnel will not have any access to it or use it again. This Personal Data is subject to retention for purposes of complying with Applicable Laws, resolving disputes, enforcing the terms of our Policy, and protecting our rights.

4. Your Personal Data may be transferred to and stored in locations outside of India by us or our affiliates. We will comply with the applicable Data Protection Laws for such transfer.

YOUR RIGHTS
1. You may deal with Personal Data available with us in the following ways:

(a) To check whether we hold Personal Data about you and to access such data;

(b) To ask for a copy of the Personal Data we hold about you in a structured, commonly used, and machine readable format (or, when this is possible, ask for such Personal Data to be communicated on your behalf to another data controller);

(c) To require us to correct the Personal Data relating to you that is inaccurate or deficient when communicated to us by you in writing, as soon as reasonably practicable;

(d) To ascertain our policies and practices in relation to Personal Data and the kind of Personal Data held by us;

(e) To object to the use of your Personal Data where we do so for one of the following reasons: (i) because it is in our legitimate interests to do so; (ii) to enable us to perform a task in the public interest or exercise official authority; (iii) to send you direct marketing materials; or (iv) for scientific, historical, research, or statistical purposes.

(f) To withdraw consent, where we have obtained your consent to process your Personal Data for certain activities; and

(g) To ask us to erase and forget your Personal Data.

2. To exercise your rights above, please send us requests on info@spectacom.in. We will process such requests within 1 (one) month of receipt of the request, which time period may be extended by 2 (two) further months where necessary. You may nominate any other individual to exercise your rights under this Policy in the event of your death or incapacity.

RIGHT TO OPT-OUT

1. You have provided us your Personal Data in connection with the use, browsing, and access of the Platform, to purchase the Products listed on the Platform and to process any application for Services from us, where failure to supply such Personal Data may result in the application for Services being rejected or inability to provide the Products to you.

2. We cannot use your Personal Data without your consent. You have the right to opt-out or withdraw consent to the use of such Personal Data by sending us an email on info@spectacom.in . If you decide to opt-out, you are indicating that you DO NOT wish for us to use your Personal Data and DO NOT wish for us to provide your Personal Data to any other persons for their use. If you withdraw the consent to provide us with any of your Personal Data at any point in time, we shall have the option to not provide the Services and/or Products for the purpose of which the said Personal Data was sought. Such opt-out will not apply to any co-branding partner to whom you have consented or shall consent to the provision of your Personal Data separately.

SERVICE PROVIDERS

1. We may use a variety of third party service providers to help us provide our Services to you. Service providers may be used, including without limitation, for the following purposes:

(a) To authenticate your identification information and documents;

(b) To process your payments;

(c) To check information against public databases;

(d) For fraud prevention and risk assessment;

(e) To allow the provision of Services through third party platforms and software tools;

(f) To provide customer Service and for marketing; and

(g) To process and handle claims.

2. The third party service providers shall have limited access to your Personal Data for performance of the above tasks and in accordance with our strict directions and policies. Such service providers shall be bound by the same standards of data protection as we are under this Policy.

NON-PERSONAL INFORMATION COLLECTED BY US

1. Non-personal data or information is information that does not personally identify you. When you visit and interact with the Platform or third parties with whom we have contracted to provide services, non- personal information, like a list of website pages visited by you, could be collected.

2. We may collect data by using web beacons, clear GIFS, pixel tags or similar means, which will inform us when you visit the Platform. Non-personal information like the domain name, the areas of the Platform you visit, your operating system, your browser version, and your URL, can be identified, which can be used to enhance your online experience by understanding your web usage patterns.

3. We may use or disclose non-personal information for any purpose from time to time, for instance, we may embed e-mail addresses with images. In such cases where we combine non-personal information with Personal Data, the combined information will be treated by us as Personal Data as per this Policy.

DATA PROTECTION

1. We will: (i) comply with all applicable Data Protection Laws; (ii) comply with all standards that relate to Data Protection Law and the privacy and security of your Personal Data; (iii) refrain from any action or inaction that could cause breach of any Data Protection Laws; (iv) do and execute, or arrange to be done and execute, each act, document and thing we deem necessary in our business judgment to keep us compliant with the relevant Data Protection Laws; and immediately report theft or loss of Personal Data.

2. Any Personal Data collected or accessed by us shall be limited to that which is strictly necessary to perform our obligations in relation to the Services offered on by us or to fulfil any legal requirements. We shall use such Personal Data only as necessary in this regard and not for any other purpose. We shall maintain such Personal Data in strict confidence in accordance with the provisions of this clause. We shall not share any Personal Data that is collected or possessed by us with any third party for any reason except as expressly stated in this Policy.

3. You agree that other than as stated in this Policy, we shall have the right to collect and/or use or analyse the Personal Data on an anonymised basis and in no way shall the Personal Data be used in a way that can lead to or reveal your identity. 4. We advise you not to include Sensitive Personal Data in any emails you may send to us. Please do not send credit/debit card numbers or any other Sensitive Personal Data to us via email.

LIMITATION OF LIABILITY

For any breach of the provisions of this Policy, our liability shall be limited to the processing fees paid for the Products purchased and/or any fees paid for our Services.

MODIFICATION OF THIS POLICY

We reserve the right to update, replace or amend this Policy from time to time, to comply with Applicable Law or to meet our changing business requirements. We will publish the revised Policy on the Platform. Any change will be effective immediately. You are encouraged to review this Policy from time to time to note any changes we make, as they will be binding on you. Continued use of the Platform, availing our Services or purchasing the Products listed on the Platform constitutes agreement of the User to the terms contained herein and any amendments thereto.

SEVERABILITY

Whenever possible, each section of this Policy shall be interpreted in a manner so as to be valid under Applicable Law. However, if any terms and conditions of this Policy are found to be illegal, invalid or unenforceable by any court of competent jurisdiction, such terms and conditions of the Policy shall be ineffective only to the extent of such prohibition or invalidity, without invalidating the remainder of such Policy and the rest of this Policy shall remain in full force and effect.

GOVERNING LAW AND JURISDICTION

This Policy shall be governed by Indian laws as applicable and any disputes regarding or arising out of this Policy shall be subject to the exclusive jurisdiction of the courts at New Delhi.

NOTICES

All notices and communications shall be in writing, in English and shall be deemed given if delivered personally or by commercial messenger or courier service, or mailed by registered or certified mail (return receipt requested) or sent by email, with due acknowledgment or complete transmission to the following address:

Postal Address: Plot No. 809, Phase-5 Udyog Vihar, Gurugram, Haryana– 122016, India

Email id: info@spectacom.in

Notices provided by personal delivery will be effective immediately. Notices provided by overnight courier will be effective 1 (one) business day after they are sent. Notices provided by registered mail will be effective 3
(three) business days after they are sent.

You may opt-out of receiving future email, SMS and postal mail marketing and other messages and newsletters from us by contacting us on the email above.

GRIEVANCE OFFICER AND DATA PROTECTION OFFICER

Please address your grievances, feedback, or questions, without limitation, with respect to the collection, processing, usage, disclosure, security of your information or any element of this Policy; or your intention to exercise one of your data protection rights in writing to:

1. Our Grievance Officer. If you are located in India:

Name: Abishek Agarwal

Email Address: abishek.agarwal@spectacom.in

2. Our Data Protection Officer (DPO), if you are located outside of India:

Name: Abishek Agarwal

Email Address: abishek.agarwal@spectacom.in

Last Updated: July 26, 2023