Privacy Policy
District India and UAE
Last updated in August, 2026.
Applicability and Scope
This Privacy Policy applies to Services offered under the District brand by Wasteland Entertainment Private Limited in India and Zomato Middle East FZ LLC in the United Arab Emirates ("UAE"). In this Privacy Policy, "District", "we", "us" and "our" refer to the relevant entity providing the Services in your location. District respects your privacy and is committed to protecting it. This Privacy Policy describes:
- the types of information that District may collect from or about you when you access or use District websites, mobile applications, partner interfaces, District-operated pages or accounts on social-media and other third-party platforms, campaign pages or forms, and other online or offline services offered under the District brand (collectively, the "Services"); and
- our practices for collecting, using, maintaining, protecting and disclosing that information.
This Privacy Policy applies to information District collects through the Services; through email, text, telephone and other electronic communications sent through or in connection with the Services; and through interactions connected with the Services. Eternal Limited owns and operates the District application and, together with other Eternal group companies, supports certain technology, payment, ticketing and operational functions described in this Privacy Policy.
This Privacy Policy does not apply to information that you provide directly to, or that is collected and processed independently by, a third party, such as a restaurant, cinema, event organiser, venue, sports facility, activity provider, store, salon, bank, payment service provider or social-media platform. It does apply to information that such a third party makes available to District in connection with the Services, including a District-operated page, account or campaign. We encourage you to review the privacy practices of such third parties before providing information to them.
Please read this Privacy Policy carefully to understand District's practices regarding your information. By accessing or using the Services or registering for a District account, you acknowledge the practices described in this Privacy Policy. Where consent is required for any processing, District will seek such consent in the manner required by applicable law. If you do not provide information that is necessary for a particular Service, District may be unable to provide that Service to you.
This Privacy Policy principally describes District's processing in connection with consumers and users of the Services. It also applies, in the manner described in the section "Other Categories of Data Processing", to individuals who interact with District as personnel, applicants, partners, contractors, vendors, advisers, business contacts or visitors.
The information we collect and how we use it
District collects information from and about users of the Services, including:
- Personal Information: Information that relates to an identified or identifiable individual. It may include information you provide directly, information generated through your use of the Services, or information obtained from third parties which, alone or together with other information available or likely to be available to us, can identify you.
- Other Information: Information connected with your account, device, activities or use of the Services that may not identify you by itself. This may include information about your internet connection, devices, usage patterns and interactions with the Services.
As described below, we collect information directly from you, automatically when you interact with the Services, and from third-party sources.
Information You Provide to Us
The information we collect on or through the Services may include:
- Account and profile information: Your name, mobile phone number, email address, password, one-time-password verification records or other authentication information, address, city, date of birth, gender, profile photograph and other information you choose to add to your account or profile. If you use a third-party sign-in service, we may receive the information that service makes available based on the permissions you grant.
- Booking, reservation and attendance information: Information relating to movies, concerts, festivals, comedy shows, cultural or sporting events, dining reservations, activities, attractions, tours, sports facilities, appointments and other experiences that you search for, save, book, attend, cancel, review or express interest in. This may include the merchant or venue, event or show, booking date and time, ticket category, seat or slot selection, party size, booking or ticket identifier, add-ons, accessibility or other requests volunteered by you, attendance or entry status, and cancellation or refund information. For a tour, activity or transfer, this may also include your itinerary, hotel or other pick-up and drop-off location and related instructions.
- Movie and event ticketing information: Information required to issue, deliver, collect, transfer, validate or support a physical or digital ticket, including contact details, delivery or pick-up information, ticket-holder or attendee information provided by you, booking confirmations, QR codes or similar ticket credentials, and records relating to entry, rescheduling, cancellation and refunds. Where required for ticket collection, event entry, an age-restricted experience, payment-card verification or a refund, we or the relevant Partner may also request information from a government-issued identity document, cardholder authorisation or related supporting material. Where you book food, beverages, merchandise or other add-ons with a movie or event, we also process the details of those selections.
- Dining information: Restaurant searches, saved restaurants, cuisine and dining preferences, table-reservation details, occasion or special requests, party size, arrival or fulfilment status, restaurant-bill information entered or confirmed through the Services, payment and refund status, and rewards, discounts or cashback associated with the transaction.
- Store, gift-card and offer information: Stores and offers you view, save or use; details of in-store payments; offers or deals you lock or redeem; gift cards you purchase or use through the Services; and related transaction, reference, redemption, refund and support records.
- Group and collaborative feature information: Information you provide when sharing a reservation or booking, splitting a bill, inviting another person, participating in a group plan, or creating or contributing to a collaborative Hotlist or similar feature. This may include the names and contact details of other participants, their participation or payment status, messages, votes, selections and content contributed to a shared feature. If you provide information about another person, you confirm that you are authorised to provide it for the relevant purpose.
- Your content and preferences: Ratings, reviews, photographs, videos, audio, comments, likes, bookmarks, Hotlists, saved places, preferences, feedback, messages, and other information or content you upload, publish, transmit or otherwise provide through the Services. Where a feature permits relevant content to be submitted, we may ask whether it was synthetically generated or materially altered and process associated labels or technical information. Information that you choose to publish or share with other users may be visible to those users or to the public, depending on the feature and the settings you select.
- Social-media and campaign information: Information you provide when you interact with a District-operated page, account or campaign, including your username or handle and information visible from your profile, comments, reactions, tags, mentions, messages, poll or survey responses, campaign or promotion entries, content submitted for a campaign, and information needed to confirm eligibility, contact participants or deliver a prize, benefit or service. A campaign may be operated for District, jointly with another company, or by District for an advertiser, sponsor, Partner or other company. Any additional information about the company involved or the use of your information may be provided with the relevant campaign.
- Your activities: Search terms, results selected, pages or listings viewed, places saved, offers viewed or used, content interactions, advertisements clicked, and information about how long you use the Services and which features you use.
- Your communications: Communications with District, our customer-support or operational teams, Partners, or other users through or in connection with the Services; information provided in complaints, disputes and refund requests; responses to surveys, polls, contests, promotions, beta tests or user-research programmes; and communications concerning business or employment opportunities. We may retain and, where permitted, record communications for support, quality, training, fraud-prevention, safety and dispute-resolution purposes.
- Transactional and payment information: Information required to process bookings, reservations, payments, refunds, rewards, cashback, memberships, subscriptions and other transactions, including your contact details, billing information, order or booking value, payment method, payment status, bank or issuer offer used, masked card or account details, payment tokens, transaction references and related risk signals. Payment-card and other payment credentials may be collected directly by PCI-compliant payment processors and not stored by District in their complete form.
- Image and video information: Photographs or videos you upload or capture through a feature, and images or video recordings collected at events organised or managed by District or at District premises for documentation, safety, security or promotional purposes. Images or CCTV collected independently by a third-party venue or merchant are governed by that third party's practices.
- Contact and third-party information: If you choose to use a feature that requires you to provide another person's contact information or grant access to selected contacts on your device, we may process the names, phone numbers or other details you choose to provide for that feature. We will use such information to provide the relevant invitation, sharing, collaboration, payment or social functionality.
- Information volunteered by you: Any other information you provide when responding to feedback requests, participating in promotions or research, using optional or beta features, seeking assistance, or otherwise interacting with the Services. Additional information requested for a new or optional feature will be used for the purposes explained at the time of collection and as described in this Privacy Policy.
Data of Minors
Our Services are generally not directed to or intended for use by individuals under the age of 18 ("Minors"), and we do not knowingly collect personal information from Minors for the purposes of creating an account or for general use of our platform. However, we recognize that certain services offered through our platform may be open to use by Minors. While our platform is not designed for Minors, we recognize that an adult user may need to provide limited information about a Minor to access certain services (for example, purchasing a ticket for a family-friendly event on District). By providing personal information of a Minor, you, the adult user, represent and warrant that:
- You are the parent or legal guardian of the Minor; and
- You give your explicit consent for Eternal to collect and process the Minor's information for the specific and limited purpose disclosed at the time of collection.
- The information collected will be used solely to facilitate the requested service and will not be used to create a user profile for the Minor or for any marketing, profiling, or other secondary purposes. You are responsible for any information you provide about a Minor. If we become aware that personal information of a Minor has been provided without the requisite and valid parental or guardian consent, we reserve the right to delete such information immediately.
Information We Collect Through Automatic Data Collection Technologies
We may automatically collect information about the computers or devices, including mobile devices, that you use to access the Services and about your use of the Services, including when you use the Services without registering or logging in.
- Service usage and activity data: Details about your interactions with the Services, including search queries, pages and listings viewed, features used, clicks, scrolls, session duration, timestamps, referral URLs, transaction-history summaries, communication events, and online or offline application status.
- Device and connection information: IP address, device type, operating system, browser type and version, application version, device settings such as language and time zone, connection type, mobile-network information, and unique device or advertising identifiers such as IDFA, Android Advertising ID or other manufacturer-assigned identifiers.
- Location information: Your selected city, approximate location inferred from information such as your IP address, and, where you grant permission, precise or real-time device location. We use location information to show nearby restaurants, cinemas, events, venues, activities, stores and sports facilities; display saved places on maps; determine location-specific availability and offers; prevent fraud; and provide other location-enabled features.
- Device permissions and feature data: Depending on the feature and permissions you grant, the Services may access your camera, photographs, media, notifications, contacts or similar device functions. For example, camera access may be used to scan a payment or entry QR code, and photo access may be used to upload content or supporting material. We process only the information made available through the permission and relevant feature.
- Payment application and hand-off information: Where required to initiate or complete a payment, UPI or similar hand-off, we may detect whether a compatible application or payment method is available on your device and receive information concerning the success or failure of the hand-off.
- Diagnostics: Crash records, error logs, performance data, debugging information, network diagnostics and other technical information used to maintain and improve the reliability and security of the Services.
- Cookies and other electronic tools: We and third parties with whom we work may use cookies, software-development kits, pixel tags, web beacons, mobile-device identifiers and similar technologies to collect and store information about your use of the Services and third-party websites or applications. We use these technologies to remember preferences, maintain sessions, conduct analytics, measure the popularity and performance of features, prevent fraud, and deliver or measure content and advertising.
- Cookie controls: You may be able to manage cookies through your browser or device settings and manage certain advertising choices through the controls made available by your device, operating-system provider or relevant third party. Disabling a technology may affect the availability or operation of some Services.
- Third-party technologies: Analytics providers, advertising networks, social-media services and other third parties accessible through or integrated with the Services may use their own cookies or similar technologies. District does not control those technologies or the third party's resulting processing, which is governed by that third party's privacy practices.
- Other information: The URL of the last webpage visited before the Services and information concerning how you arrived at or returned to the Services.
Information from Third Parties
We may obtain information about you from third-party sources, including:
- Third-party account authentication: If you choose to log in, link or connect your District account with a third-party service, you authorise us to receive information that you permit that service to share through its application programming interface and permission process. This may include your third-party user identifier, name, email address, profile photograph and other authorised information.
- Partners: Restaurants, cinemas and theatres, event organisers, venues, promoters, sports facilities, tour, transport, activity and attraction providers, stores, salons and other service providers may provide booking, fulfilment, attendance, entry, pick-up, cancellation, refund, loyalty, dispute, feedback or transaction information relating to you. Movie-ticketing and other features may also be supported by specialist platform providers acting with District or a Partner.
- Payment and offer partners: Payment gateways, banks, card networks, wallet or UPI providers, gift-card issuers, fraud-prevention providers and promotional partners may provide transaction status, payment references, eligibility, offer fulfilment, cashback, reward, dispute, chargeback or risk information.
- Other users: Another user may provide information about you when adding you to a booking or group plan, sharing a reservation, inviting you to a collaborative feature, splitting a bill, purchasing or transferring a ticket or benefit for you, or contacting support about a transaction involving you.
- Affiliates: Eternal Limited and other companies within the Eternal group may provide information to support shared identity, authentication, payments, rewards, customer support, security, fraud prevention, analytics, service integration and communications, as described in this Privacy Policy.
- Social-media, advertising and campaign sources: Social-media platforms, advertisers, sponsors, campaign clients, agencies, creators, analytics providers and other marketing or measurement partners may provide information relating to your public profile or handle, communications, campaign entries or leads, audience attributes, advertisement or campaign interactions, conversions, attribution and campaign performance.
- Other sources: Subject to applicable law, we may receive information from service providers, data-enrichment providers, researchers, publicly available sources and other business partners.
- Combining information: We may combine information received from third parties with information collected directly from you or automatically through your use of the Services. We use the combined information to provide and support the Services, keep records current, detect fraud, understand users and usage patterns, improve and personalise the Services, measure marketing and advertising, and for the other purposes described in this Privacy Policy.
How we use the information we collect
We primarily collect and use information to provide the Services that you choose to use. The Services are supported by operational, technical and commercial functions that directly or indirectly enable or improve the Services. We use information collected from and about you for purposes including:
- Account administration: To register and authenticate you, maintain your account and profile, remember your settings and preferences, and communicate account, policy and service information.
- Discovery and personalisation: To identify your city or location; show restaurants, movies, events, stores, activities, attractions, sports facilities, appointments and other experiences that may be relevant to you; organise and rank content; maintain Hotlists and saved places; and personalise recommendations, offers, promotions and other aspects of the Services based on information such as your location, searches, bookings and interactions.
- Bookings, reservations and fulfilment: To check availability; create, confirm, modify, cancel and support bookings or reservations; allocate seats, slots, tickets or other entitlements; send confirmations and reminders; enable ticket delivery, collection, transfer, entry, tour or activity pick-up; communicate requests to the relevant Partner; carry out identity, age, payment-card or refund verification where required; and administer cancellations, refunds and disputes.
- Dining, store and other in-person transactions: To facilitate District Pay and other payments at restaurants, stores and other Partner premises; verify transaction details; apply offers; process split payments; confirm payment to the Partner; and administer refunds, rewards and cashback.
- Group and social features: To share reservations or bookings, invite participants, enable collaborative Hotlists and group planning, allocate or collect bill shares, display participation or payment status, and deliver other sharing or interactive functionality selected by you.
- Payments, offers and financial administration: To process and reconcile payments, booking fees, convenience fees, memberships, subscriptions, settlements, refunds, gift cards, bank or card offers, referrals, rewards and cashback; communicate transaction or benefit status; prevent duplicate or unauthorised transactions; and maintain financial and audit records.
- Customer support and communications: To answer questions, resolve complaints, investigate disputes, provide support, communicate with Partners, collect feedback, send transactional and administrative messages, notify you of changes, and conduct training and quality assurance.
- Platform maintenance, security and compliance: To diagnose technical issues, maintain the stability and functionality of the Services, authenticate users, secure accounts and transactions, detect and prevent fraud, abuse, ticket misuse, unauthorised resale, payment risk and misuse of promotions, verify or label content where relevant, enforce our Terms of Service and other agreements, protect District, users, Partners and the public, respond to complaints and comply with legal and regulatory obligations.
- Service improvement, analytics and research: To understand user behaviour, preferences, feature usage and transaction patterns; generate reports; test, develop and improve content and features; assess Partner and feature performance; conduct research and user studies; and train personnel and systems used to support the Services.
- Marketing, advertising and promotions: To send communications through email, SMS, telephone, WhatsApp, push notification, social media or other channels concerning District, Partners, offers or promotions that may interest you; plan, operate, moderate and administer District, sponsored, co-branded or client campaigns, including campaigns conducted for advertisers, sponsors, Partners or other companies; manage entries, leads, submitted content, eligibility, prizes and benefits; respond to or repost campaign interactions; select, deliver and measure advertising; create audiences; and assess campaign performance, subject to the choices and permissions available to you and applicable law.
- Analytics and advertising services: To use analytics and advertising providers to evaluate use of the Services, measure attribution and advertising performance, and support tailored content or advertising. A third-party advertiser may infer that you meet its target criteria if you interact with an advertisement. Opting out of tailored advertising, where such a choice is available, will not prevent all advertisements.
- Recording and retention of interactions: To monitor or record support calls, chats and other interactions for service quality, training, platform integrity, dispute resolution, fraud prevention, safety, enforcement and other administrative or operational purposes.
- Integration across the Eternal group: To enable shared or linked identity and authentication, cross-application features, District Pay or other payment functionality, coordinated customer support, fraud and security controls, shared infrastructure, analytics, service improvement, bundled services and relevant cross-promotional activities across Eternal group companies.
- Aggregation, de-identification and advanced processing: To aggregate, anonymise or de-identify information and use the resulting information for analytics, research, planning, reporting, product development and other lawful purposes. We may use automated tools, including artificial-intelligence technologies, to support personalisation, search, customer support, fraud detection, safety, service improvement and operational efficiency, subject to appropriate controls and applicable law.
- Other disclosed purposes: For any other purpose explained to you when the information is collected, or with your consent where required.
How we share the information we collect
We use personal information to provide the Services you choose to receive. To facilitate and support the Services, we may disclose information collected from or about you in the following ways:
- Affiliates: To Eternal Limited and other subsidiaries or affiliates under common ownership or control for shared infrastructure, identity and authentication, payments, rewards, fraud prevention, safety, customer support, analytics, technology, administration, legal compliance and service integration. Information may also be used for relevant marketing or cross-promotional activities, subject to applicable choices, permissions and law.
- Partners: To the restaurants, cinemas, theatres, event organisers, venues, sports facilities, activity and attraction providers, stores, salons and other providers involved in a booking, reservation, transaction, offer or experience, as described in the section "Information Shared with Partners".
- Other users and recipients selected by you: To people with whom you choose to share a reservation, booking, ticket, bill, payment request, Hotlist or other content or feature. Information visible to them will depend on the feature and your selections.
- Service providers: To contractors, vendors and service providers that perform services for us, including hosting, cloud storage, communications, customer support, ticketing technology, ticket delivery, identity and authentication, payment processing, fraud detection, analytics, advertising, research, survey administration, promotions, content moderation, security, professional services and technical support. Such providers are ordinarily authorised to use the information for the services they provide to us, subject to their contracts and applicable law.
- Payment, banking and offer participants: To payment gateways, banks, card networks, wallet and UPI providers, payment-application providers, gift-card issuers and resellers, fraud-prevention providers, offer sponsors and reward or cashback participants to initiate, authenticate, process, reconcile, refund, dispute, reward or audit a transaction or offer.
- Advertising, sponsorship and campaigns: To advertisers, sponsors, campaign clients, agencies, creators, advertising networks, social-media platforms and measurement or marketing partners to plan, operate, administer, fulfil or measure advertisements, promotions and campaigns, including campaigns we conduct for them. We may share information about a participant with the relevant company where needed for the campaign, prize, benefit or requested service, and may provide aggregated or de-identified campaign reporting. Where we disclose personal information to a third party for its own marketing, we will do so with consent where required.
- Social networks and third-party services: If you interact with a District page, account, advertisement or campaign on a social-media or other third-party service, use social credentials to sign in, or choose to share content to or from that service, District and the service may each receive information concerning your interaction. District processes information it receives as described in this Privacy Policy; the service's processing is governed by its own privacy practices.
- Legal purposes: To law-enforcement bodies, government agencies, courts, regulators, complainants and other authorised persons when we believe in good faith that disclosure is required or permitted by law or is reasonably necessary to respond to legal process or a complaint, investigate or prevent unlawful activity, protect rights and safety, or establish, exercise or defend legal claims.
- Audit, assurance and platform safety: To internal and external auditors, insurers, professional advisers, affiliated entities, payment participants, Partners and other relevant organisations for fraud detection and prevention, safety, risk management, audits, investigations, assurance, financial controls and compliance.
- Enforcement: To enforce or apply our Terms of Service and other agreements, including for billing, collection, platform integrity and dispute resolution.
- Corporate transactions: To an actual or potential buyer, investor, successor or other relevant person in connection with a merger, investment, financing, restructuring, reorganisation, divestiture, sale or transfer of all or part of District or its assets, subject to appropriate confidentiality and legal requirements.
- With your consent or direction: To any other third party where you direct us to share the information or provide consent for the disclosure.
Information Shared with Partners
When you initiate or participate in a booking, reservation, payment, offer, ticket purchase or other transaction through the Services, we share information with the relevant restaurant, cinema, theatre, event organiser, venue, promoter, tour or transport operator, sports facility, activity or attraction provider, store, salon or other provider (collectively, "Partners") to enable the Partner and District to process and fulfil the transaction.
Depending on the Service, the information shared may include your name, phone number, email address, booking or order identifier, ticket or QR credential, reservation date and time, party size, seat or slot, attendee information provided by you, selected add-ons, special requests, hotel or other pick-up and drop-off location, transaction or payment status, refund or dispute information, and information needed to administer a loyalty benefit, offer, reward, cashback, verification or entry process. A delivery or logistics provider may receive the information needed to deliver a physical ticket or other item.
District may work with specialist platform or group companies to provide particular Services. This may include Orbgen Technologies Private Limited in connection with movie-ticketing services and Eternal Limited in connection with District Pay, payment, reward, authentication, support or other shared functionality, in each case where applicable. Such entities may receive information necessary to provide and support the relevant functionality.
Partners may receive your information in circumstances similar to those in which they would receive it if you booked, visited or paid them directly. A Partner may independently process information it receives for fulfilment, entry management, customer service, legal compliance, fraud prevention, loyalty administration and other purposes permitted by applicable law and its own privacy practices. District does not control a Partner's independent collection or subsequent processing. We encourage you to review the relevant Partner's privacy practices.
Payment information: When you use a payment method through the Services, payment credentials may be collected, tokenised and stored by a payment gateway, bank, card network, wallet, UPI provider or other payment service provider. District shares transaction and authentication information with such providers and may receive masked payment details, tokens, status, reference, risk, refund and dispute information. A payment provider may retain credentials to support future transactions in accordance with its terms, your instructions and applicable law.
Data Storage
District may process and retain personal information on its systems in India and on systems operated by affiliates and service providers in India or other countries. This means that information may be processed outside the country in which you use the Services. We take measures intended to ensure that such processing is consistent with applicable law and the protections described in this Privacy Policy.
We retain information for as long as reasonably necessary for the purposes for which it was collected or otherwise processed, including to provide the Services, maintain transactional and financial records, resolve disputes, prevent fraud and abuse, enforce agreements, protect legal rights and comply with legal, tax, accounting or regulatory requirements. Retention periods may vary according to the type of information, Service and applicable requirement.
Your Information
Correspondence: You can manage certain email and notification preferences through the Services or by using the unsubscribe or opt-out instructions in commercial communications. You may continue to receive transactional, administrative, security, policy and legal communications that are necessary to operate the Services or manage our relationship with you.
Review and correction: You may review and update certain account information through the Services. You may also contact us to request review or correction of personal information that you have provided and that is inaccurate or deficient. We may need to verify your identity and the request before taking action.
Permissions and consent: You can manage device permissions through your device settings. Where processing is based on your consent, you may withdraw that consent using an available feature or by contacting us. Withdrawal will not affect processing already undertaken and may prevent us from providing the Service for which the information is required.
Deletion: You may request deletion of your District account using the option available in the Services or by contacting us. Once an account and its associated information have been deleted, they may not be capable of restoration. Account deletion does not cancel an existing booking or transaction and does not require deletion of information that District is permitted or required to retain.
Copies and backups of your information may remain for a limited period in backup or recovery systems and in records retained for legal compliance, transaction reconciliation, fraud and risk mitigation, dispute resolution, safety and enforcement of our rights.
Limitations: Requests concerning your information may be limited where permitted by applicable law, including where a request is abusive or unreasonably excessive; would affect the rights, privacy or safety of another person; relates to privileged information or existing or anticipated legal proceedings; would prejudice an investigation, negotiation or fraud-prevention measure; or conflicts with a legal or record-retention requirement.
Additional Provisions for Users in the UAE
If you use the Services in the UAE, Zomato Middle East FZ LLC is responsible for the processing described in this Privacy Policy. Your information may be processed in India and other countries where District, Eternal group companies or our service providers operate. We use contractual or other measures required by applicable law when transferring personal information outside the UAE.
In addition to the choices described in "Your Information", you may, where applicable, ask for information about our processing, obtain or transfer a copy of your personal information, restrict or stop certain processing, including direct marketing, or ask us to review a decision based solely on automated processing. You may also raise a complaint with the UAE Data Office. These requests are subject to applicable conditions and exceptions, and we may verify your identity before acting on them. You can submit a request using the contact details below.
Other Categories of Data Processing
In addition to the consumer processing described above, District may process personal information about individuals who interact with us in other capacities. The general provisions of this Privacy Policy concerning sources, sharing, storage, security, rights and contact details also apply to this processing.
- Job applicants: We may collect contact details, resumes, qualifications, employment history, references, interview and assessment information, compensation expectations, eligibility or background-verification information, and communications concerning an application. We use the information to administer recruitment, assess suitability for current or future roles, conduct permitted checks, communicate with applicants, maintain recruitment records and comply with legal obligations. We may share it with Eternal group companies and recruitment, assessment, background-check and technology providers.
- Employees, interns and workforce contractors: We may process identity and contact information, emergency contacts, employment or engagement records, attendance and access information, payroll, bank, tax and benefits information, performance and training records, travel and expense information, workplace communications, security records and information needed to manage the working relationship. We use it for workforce administration, payroll and benefits, access and security, resource planning, performance and training, investigations, health and safety, legal compliance and the establishment or defence of claims. We may share it with Eternal group companies and relevant payroll, benefits, insurance, travel, background-verification, technology, professional and government recipients.
- Partner personnel and independent service providers: This includes merchant, cinema, venue and organiser personnel; promoters; artists and performers; tour, transport, sports, activity, store and salon personnel; production or event crew; and other individuals engaged to support District's Services or operations. We may collect business contact details, role and authority, identity or verification documents where required, tax and bank information, onboarding records, contracts, listing or inventory information, activity on Partner applications, publisher tools and dashboards, communications, support records, service quality or performance information, settlement information and compliance records. We use it to onboard and manage Partners and service providers, authenticate users, maintain listings and availability, administer bookings and transactions, calculate and make settlements, provide support, prevent fraud, monitor contractual compliance, resolve disputes and satisfy legal or tax requirements.
- Vendors, advisers and other business contacts: We may process names, business contact details, roles, communications, contracts, due-diligence or verification information, invoices, payment details and records concerning the business relationship. We use it to procure and receive services, manage contracts and access, make payments, maintain accounts, communicate, conduct audits and due diligence, protect our operations and comply with law.
- Directors, shareholders and corporate-governance contacts: We may process identity, contact, appointment, ownership or interest, verification, meeting, communication, payment and corporate-record information to administer governance, statutory and corporate records, securities or ownership matters, meetings, distributions, financing, audits, conflicts and legal or regulatory obligations.
- Event and office visitors: Where District organises or manages an event or controls premises, we may process registration, accreditation, contact, access, attendance, image, video, CCTV, vehicle and incident information for admission, event or premises administration, security, safety, documentation, promotion, investigations and legal compliance.
Information described in this section may be shared with affiliates, service providers, counterparties, professional advisers, insurers, auditors and government or legal authorities where reasonably necessary for the relevant relationship or purpose and subject to applicable law.
Security: How we protect your information
We have implemented physical, electronic, technical and managerial measures intended to safeguard personal information, prevent unauthorised access and maintain data security. These measures take into account the sensitivity of the information, the nature of our processing and the current state of technology. We follow generally accepted industry practices to protect personal information during transmission and after receipt.
Third-party service providers that provide payment-gateway and payment-processing services are expected to maintain applicable payment-card industry compliance.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You play an important role in protecting your information and should not share your password, one-time password, ticket or booking credentials, account access, payment credentials or other security information with anyone.
If we receive instructions through an authenticated account or valid credential, we may treat those instructions as authorised, subject to our fraud, risk and security controls.
Miscellaneous
Third-party links and services: The Services may contain links to or integrations with third-party websites, applications or services. Your use of such features may result in the collection, processing or sharing of information by the third party. District is not responsible for the content or privacy practices of third-party services and does not make representations concerning them. This Privacy Policy does not cover information you provide directly to, or that is independently collected by, such third parties. We encourage you to review their privacy practices.
Policy amendments: We may amend this Privacy Policy from time to time to reflect changes in law, our data practices, the features of the Services or technology. Please check this page periodically for changes. We will post an updated version and revise the "Last updated" date. Where required by law, we will provide additional notice or seek consent for a change.
Contact Us
If you have questions or concerns relating to the processing or use of your information, wish to make a request described in this Privacy Policy, or have a question about this Privacy Policy, you may contact the Data Protection Officer at privacy@zomato.com.