Privacy Policy

Introduction

This Privacy Policy describes how Side Quest Gaming Café and its affiliates (collectively "Side Quest, we, our, us") collect, use, share, protect or otherwise process your information/personal data through our website https://www.mysidequest.in/ (hereinafter referred to as Platform). Please note that you may be able to browse certain sections of the Platform without registering with us. We do not offer any product/service under this Platform outside India and your personal data will primarily be stored and processed in India. By visiting this Platform, providing your information or availing any product/service offered on the Platform, you expressly agree to be bound by the terms and conditions of this Privacy Policy, the Terms of Use and the applicable service/product terms and conditions, and agree to be governed by the laws of India including but not limited to the laws applicable to data protection and privacy. If you do not agree please do not use or access our Platform.

Collection

We collect your personal data when you use our Platform, services or otherwise interact with us during the course of our relationship, and related information provided from time to time. Some of the information that we collect is the information you provide when you register an account on the Platform: your name, your email address, the gamertag you choose, and your password (which we store only as a cryptographic hash and cannot read). If a booking is made for you at our counter rather than through an account, we record the name given and, optionally, a contact phone number, so that the booking can be identified. We do not collect your date of birth, your postal address, or biometric information of any kind, and we do not ask you for proof of identity. You always have the option to not provide information, by choosing not to use a particular service or feature on the Platform.

Payments for bookings are processed by our payment gateway, Razorpay. Your card, UPI, net-banking or other payment instrument details are collected and held by the gateway under its own privacy policy; they are never sent to us and we do not store them. What we retain of a payment is the gateway's transaction reference, the amount, and whether it succeeded, refunded or failed — which is what lets us produce your bill and process a refund. If you receive an email or a call from a person/association claiming to be Side Quest seeking any personal data like debit/credit card PIN, net-banking or mobile banking password, we request you to never provide such information. If you have already revealed such information, report it immediately to an appropriate law enforcement agency.

Cookies and Site Analytics

We measure how our Platform is used with our own, first-party analytics — no advertising networks or third-party trackers are involved. When you browse the customer-facing pages of the Platform, we record the page visited, the time of the visit, the referring website (if you arrived from one), and a general description of your device derived from your browser (for example: phone or desktop, operating system, browser name). To recognise repeat visits, we set a single cookie containing a random identifier; it identifies your browser, not you as a person, and it is not readable by scripts on the page. If you are signed in, your visits are associated with your account so that we can understand how our registered customers use the Platform; deleting your account unlinks your name from this history. We also derive an approximate, city-level location from your IP address, for which the IP address is submitted to a geolocation lookup service solely for that purpose. We do not collect your precise (GPS) location. This information is used internally — to understand which pages and services are of interest, how many visitors go on to make a booking, and on what kind of devices the Platform should work best — and is never sold or shared for marketing by third parties.

Email We Send You

We send email only in response to something you have done, and only to the address registered on your own account. There are two kinds:

• Password reset. Sent when a reset is requested from our sign-in page for an address that matches an existing account. The link it carries can be used once and expires in 30 minutes. We limit how often such a mail can be sent to the same address, so that this cannot be used to flood anyone's inbox.
• Booking receipt. Sent once, after a booking has been completed and paid for, to the account that made and paid for it. It contains the booking reference, what was booked and when, the itemised charges and the total paid.

We do not send newsletters, promotional offers, or bulk mail of any kind, and we do not sell, rent or share your address with anyone who does. We do not use purchased or scraped address lists — an address reaches us only because you typed it into our sign-up form. Our messages carry no tracking pixels and no attachments. Because these two messages are part of the service itself rather than marketing, there is no unsubscribe link on them; you can stop them entirely by deleting your account, as described below. Should we ever introduce promotional email, it would be a separate stream that you would have to opt into, with one-click unsubscribe.

Delivery is handled on our behalf by a third-party email service (currently Resend), which processes your address and the content of the message solely to deliver it to your mailbox. Your address is retained for as long as your account exists; deleting your account removes it.

Usage

We use personal data to provide the services you request: to create and maintain your account, to take and hold your bookings, to process payments and refunds for them, to send you the messages described above, to resolve disputes and troubleshoot problems, to detect and protect against error, fraud and other criminal activity, to enforce our terms and conditions, to understand in aggregate how the Platform is used, and as otherwise described to you at the time of collection of information. You understand that your access to these services may be affected in the event permission is not provided to us.

Sharing

We do not sell your personal data, and we do not share it with anyone for their own marketing. We disclose it only to the service providers that make the Platform work, each of which processes it on our behalf and only for that purpose: our payment gateway (Razorpay), which handles your payment and holds the instrument details we never see; our email delivery provider, which delivers the messages described above; the geolocation lookup service described under Cookies and Site Analytics; and the hosting provider on whose servers the Platform and its database run. These disclosures are what allow us to provide the service to you, to comply with our legal obligations, to enforce our user agreement, and to prevent, detect, mitigate and investigate fraudulent or illegal activity related to our services. We may disclose personal and sensitive personal data to government agencies or other authorised law enforcement agencies if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process. We may disclose personal data to law enforcement offices, third party rights owners, or others in the good faith belief that such disclosure is reasonably necessary to: enforce our Terms of Use or Privacy Policy; respond to claims that an advertisement, posting or other content violates the rights of a third party; or protect the rights, property or personal safety of our users or the general public.

Security Precautions

To protect your personal data from unauthorised access or disclosure, loss or misuse we adopt reasonable security practices and procedures. Once your information is in our possession or whenever you access your account information, we adhere to our security guidelines to protect it against unauthorised access and offer the use of a secure server. However, the transmission of information is not completely secure for reasons beyond our control. By using the Platform, the users accept the security implications of data transmission over the internet and the World Wide Web which cannot always be guaranteed as completely secure, and therefore, there would always remain certain inherent risks regarding use of the Platform. Users are responsible for ensuring the protection of login and password records for their account.

Data Deletion and Retention

You have an option to delete your account by visiting your profile and settings on our Platform; this action would result in you losing all information related to your account. You may also write to us at the contact information provided below to assist you with these requests. We may, in the event of any pending grievance, claim, upcoming booking or unsettled payment, refuse or delay deletion of the account. Once the account is deleted, you will lose access to the account. We retain your personal data information for a period no longer than is required for the purpose for which it was collected or as required under any applicable law. However, we may retain data related to you if we believe it may be necessary to prevent fraud or future abuse or for other legitimate purposes. We may continue to retain your data in anonymised form for analytical and research purposes.

Your Rights

You may access, rectify, and update your personal data directly through the functionalities provided on the Platform.

Consent

By visiting our Platform or by providing your information, you consent to the collection, use, storage, disclosure and otherwise processing of your information on the Platform in accordance with this Privacy Policy. If you disclose to us any personal data relating to other people, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy. By registering an account you consent to us sending you, at the address on that account, the service email described under "Email We Send You" — password resets you have requested, and receipts for bookings you have paid for. If you have given us a phone number for a booking, you consent to us calling or messaging you about that specific booking. We will not contact you for any other purpose without asking you first. You have an option to withdraw your consent that you have already provided by writing to the Grievance Officer at the contact information provided below. Please mention "Withdrawal of consent for processing personal data" in your subject line of your communication. We may verify such requests before acting on our request. However, please note that your withdrawal of consent will not be retrospective and will be in accordance with the Terms of Use, this Privacy Policy, and applicable laws. In the event you withdraw consent given to us under this Privacy Policy, we reserve the right to restrict or deny the provision of our services for which we consider such information to be necessary.

Changes to this Privacy Policy

Please check our Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our information practices. We may alert/notify you about the significant changes to the Privacy Policy, in the manner as may be required under applicable laws.

Grievance Officer