PRIVACY POLICY

Last Updated: June 22, 2026

1. INTRODUCTION

This Privacy Policy ("Privacy Policy") sets out the manner in which BYTEHARBOR CONSULTANCY SERVICES PRIVATE LIMITED, a company incorporated under the provisions of the Companies Act, 2013 bearing Corporate Identity Number (CIN) U62090OD2024PTC046197 and having its registered office at Sai Paradise Society, Sailashree Vihar, Bhubaneswar, Khordha, Odisha – 751021, India (hereinafter referred to as the "Company", "Naibooking", "we", "us" or "our"), collects, receives, stores, processes, uses, transfers, discloses and protects Personal Data through its technology platform operating under the brand name "Naibooking".

This Privacy Policy applies to all users of the Naibooking ecosystem, including customers, salon owners, salon staff members, business representatives, website visitors, mobile application users, and any individual interacting with the Platform.

The Company recognizes the importance of privacy and is committed to protecting Personal Data in accordance with applicable laws, including but not limited to:

• (a) The Information Technology Act, 2000;
• (b) The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
• (c) The Digital Personal Data Protection Act, 2023 ("DPDP Act");
• (d) Any rules, regulations, notifications, guidelines, amendments or governmental directives issued thereunder from time to time.

By accessing, downloading, registering with, browsing, using, or otherwise interacting with the Platform, you acknowledge that you have read, understood and agreed to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, you should immediately discontinue access to and use of the Platform.

2. DEFINITIONS

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

2.1 "Account"

Means a registered user account created on the Platform for accessing services and functionalities offered by the Company.

2.2 "Applicable Law"

Means any law, statute, regulation, ordinance, rule, notification, circular, governmental order, judicial decision or regulatory requirement applicable within India or any jurisdiction where the Company operates.

2.3 "Booking"

Means any appointment, reservation, scheduling request, service request, membership purchase, package booking, or transaction initiated through the Platform.

2.4 "Customer"

Means any individual who accesses or uses the Platform for discovering, evaluating, booking or purchasing salon, beauty, grooming, wellness or related services.

2.5 "Device"

Means any smartphone, tablet, computer, laptop, wearable device or other electronic device used to access the Platform.

2.6 "Personal Data"

Shall have the meaning assigned to it under the Digital Personal Data Protection Act, 2023 and includes any data relating to an identified or identifiable natural person.

2.7 "Platform"

Means the Naibooking website, mobile applications, salon management systems, staff profile services, APIs, software products, communication channels and all related services operated by the Company.

2.8 "Salon Partner"

Means any salon, barber shop, beauty parlour, spa, wellness center, grooming business, franchise, service provider, independent professional or commercial establishment registered on the Platform.

2.9 "Staff Member"

Means any stylist, barber, beautician, makeup artist, therapist, professional service provider or employee who maintains a profile on the Platform.

2.10 "User"

Means any person accessing or using the Platform in any manner, including Customers, Salon Partners, Staff Members and visitors.

2.11 "Services"

Means all services, software, features, tools, content, products and functionalities made available through the Platform.

3. APPLICABILITY OF THIS PRIVACY POLICY

This Privacy Policy applies to:

• (a) Customers using the Platform;
• (b) Salon Partners subscribing to or utilizing the Company's software and business management tools;
• (c) Staff Members creating, maintaining or publishing professional profiles through the Platform;
• (d) Individuals communicating with the Company through email, telephone, messaging services or customer support channels;
• (e) Visitors accessing the Company's website or mobile applications;
• (f) Any individual whose Personal Data is processed in connection with the operation of the Platform.

This Privacy Policy does not apply to third-party websites, applications, services or platforms that are not owned or controlled by the Company. Users are encouraged to review the privacy policies of third-party services independently.

4. INFORMATION WE COLLECT

The Company may collect, receive, generate, process and retain various categories of information depending upon the nature of a User's interaction with the Platform.

4.1 Information Provided Directly by Users

The Company may collect information voluntarily provided by Users, including:

Customer Information

• Full name
• Mobile number
• Email address
• Residential address
• Profile photograph
• Date of birth (where voluntarily provided)
• Gender information (where voluntarily provided)
• Appointment preferences
• Service preferences
• Communication records
• Customer support requests
• Reviews and ratings

Salon Partner Information

• Business name
• Proprietor or director information
• Contact information
• Business address
• GST information
• Business registration details
• Tax information
• Subscription information
• Banking details for settlement purposes
• Employee records uploaded by Salon Partners

Staff Profile Information

• Name
• Professional designation
• Profile photograph
• Qualifications
• Certifications
• Employment history
• Portfolio information
• Skills and expertise
• Professional experience
• Availability information

4.2 Booking Information

The Company may collect information relating to Bookings, including:

• Appointment dates and times
• Service categories
• Selected Salon Partner
• Selected Staff Member
• Pricing information
• Booking history
• Cancellation records
• Refund requests
• Membership information
• Promotional usage history

4.3 Payment Information

The Company may collect information relating to transactions conducted through the Platform, including:

• Transaction reference numbers
• Payment status
• Payment amount
• Refund information
• Settlement information
• Subscription payment records

The Company does not store complete debit card numbers, credit card numbers, CVV numbers, UPI PINs, net banking passwords or similar payment authentication credentials.

4.4 Technical and Device Information

When Users access the Platform, the Company may automatically collect:

• IP addresses
• Device identifiers
• Device type
• Browser type
• Browser version
• Operating system
• Network information
• Session identifiers
• Application usage information
• Diagnostic information
• Crash reports
• Log data

4.5 Location Information

Subject to User permissions, the Company may collect precise or approximate location information to:

• Identify nearby service providers
• Improve search results
• Enhance booking experiences
• Provide location-based recommendations
• Improve Platform functionality

Users may disable location permissions at any time through device settings.

5. LEGAL BASIS FOR PROCESSING

The Company may process Personal Data on one or more of the following legal grounds:

5.1 Performance of a Contract

Where processing is necessary to provide services requested by Users, including account creation, booking management, subscription services and customer support.

5.2 Consent

Where Users voluntarily provide consent for specific processing activities.

5.3 Compliance with Legal Obligations

Where processing is necessary to comply with legal, regulatory, taxation, law enforcement or governmental requirements.

5.4 Legitimate Business Interests

Where processing is reasonably necessary for:

• Fraud prevention
• Security monitoring
• Service improvement
• Business analytics
• Operational management
• Platform administration

6. PURPOSES OF PROCESSING

The Company may process Personal Data for the following purposes:

• (a) Creating and maintaining user accounts;
• (b) Facilitating appointment bookings;
• (c) Providing software and business management services to Salon Partners;
• (d) Enabling communication between Customers and Salon Partners;
• (e) Processing subscription services;
• (f) Processing token payments, refunds and settlements;
• (g) Managing customer support requests;
• (h) Conducting security monitoring and fraud prevention activities;
• (i) Personalizing user experiences;
• (j) Improving Platform performance;
• (k) Conducting analytics, research and reporting;
• (l) Sending service-related communications;
• (m) Complying with legal and regulatory obligations;
• (n) Establishing, exercising or defending legal claims;
• (o) Maintaining business records and internal administration;
• (p) Any other purpose disclosed to Users at the time of collection or otherwise permitted by Applicable Law.

7. CUSTOMER DATA PROCESSING

7.1 Purpose of Customer Data Processing

The Company processes Customer information for the purpose of providing, maintaining, improving and securing the Platform and facilitating interactions between Customers and Salon Partners. Customer information may be processed for:

• (a) Account registration and authentication;
• (b) Appointment scheduling and management;
• (c) Service recommendations and personalization;
• (d) Customer support and grievance handling;
• (e) Payment processing and refund management;
• (f) Communication regarding bookings and services;
• (g) Fraud prevention and security monitoring;
• (h) Marketing communications where permitted by Applicable Law;
• (i) Compliance with legal and regulatory obligations.

7.2 Customer Reviews and Ratings

Customers may voluntarily submit reviews, ratings, comments, photographs or feedback relating to Salon Partners or services obtained through the Platform. Such information may be publicly displayed and made accessible to other users.

The Company reserves the right to remove, edit, restrict or refuse publication of any content that:

• Violates Applicable Law;
• Is defamatory, misleading or fraudulent;
• Infringes third-party rights;
• Contains offensive, abusive or inappropriate material;
• Violates Platform policies.

7.3 Customer Communications

The Company may record and maintain records of customer communications conducted through:

• Email
• Telephone
• Customer support channels
• In-app messaging
• Social media interactions

Such records may be used for quality assurance, dispute resolution, security and compliance purposes.

8. SALON PARTNER DATA PROCESSING

8.1 Business Information Collection

The Company may collect and process information relating to Salon Partners, including:

• Business details
• Proprietor information
• Director information
• Registration documents
• Tax information
• GST details
• Subscription information
• Operational information
• Banking details
• Employee information

8.2 Business Management Services

The Company may process Salon Partner information for:

• (a) Subscription management;
• (b) Appointment management;
• (c) Customer relationship management;
• (d) Business analytics;
• (e) Inventory management;
• (f) Staff management;
• (g) Billing and invoicing functionality;
• (h) Membership and loyalty program administration;
• (i) Marketing tools and promotional services;
• (j) Multi-location management services.

8.3 Compliance Obligations

Salon Partners acknowledge and agree that they are independently responsible for complying with Applicable Laws relating to:

• Consumer protection
• Taxation
• Employment
• Professional licensing
• Data protection obligations applicable to their independent operations

The Company shall not be responsible for the independent data processing activities undertaken by Salon Partners outside the Platform.

9. STAFF PROFILE DATA PROCESSING

9.1 Professional Profile Services

The Platform may permit Staff Members to create professional profiles for employment, networking, customer engagement, portfolio display or service-related purposes. Information may include:

• Name
• Profile photograph
• Professional qualifications
• Certifications
• Employment history
• Skills and expertise
• Service portfolio
• Availability information
• Professional achievements

9.2 Public Visibility

Certain information submitted by Staff Members may be visible to:

• Customers
• Salon Partners
• Recruiters
• Other Platform users

Staff Members acknowledge and consent to such public visibility.

9.3 Content Responsibility

Staff Members remain solely responsible for ensuring that information submitted through their profiles:

• Is accurate
• Does not violate Applicable Law
• Does not infringe third-party rights
• Does not contain misleading information

The Company reserves the right to remove, suspend or modify profiles that violate Platform policies.

10. PAYMENT PROCESSING AND RAZORPAY DISCLOSURE

10.1 Payment Gateway Services

The Platform may utilize third-party payment service providers, including Razorpay and other authorized payment processors, to facilitate transactions. Payments may include:

• Booking confirmation payments
• Token payments
• Subscription fees
• Membership purchases
• Promotional transactions
• Other service-related payments

10.2 Third-Party Processing

Payment transactions are processed by independent payment service providers. Such providers may collect:

• Payment instrument information
• Transaction information
• Device information
• Fraud prevention information

Users acknowledge that payment providers maintain independent privacy policies and terms governing their services.

10.3 Payment Security

The Company does not store:

• Complete debit card numbers
• Complete credit card numbers
• CVV information
• UPI PINs
• Banking passwords
• Payment authentication credentials

Payment security obligations remain subject to the standards implemented by the relevant payment service provider.

10.4 Refunds and Settlements

Where applicable, the Company may process refund requests, settlement information and transaction-related records for operational, accounting, taxation and dispute resolution purposes.

11. GOOGLE ANALYTICS AND ANALYTICS TECHNOLOGIES

11.1 Analytics Services

The Platform may utilize Google Analytics and similar analytics technologies to better understand user interactions and improve Platform performance. Analytics technologies may collect:

• Device information
• Session information
• Usage patterns
• Navigation data
• Performance metrics
• User engagement statistics

11.2 Purpose of Analytics

Analytics information may be used for:

• Measuring Platform performance
• Improving user experience
• Understanding customer behavior
• Monitoring service quality
• Product development
• Business reporting

11.3 Third-Party Analytics Providers

Users acknowledge that analytics providers may process information in accordance with their own privacy policies and applicable laws.

12. PUSH NOTIFICATIONS

12.1 Notification Services

The Platform may send push notifications to Users for:

• Booking confirmations
• Appointment reminders
• Status updates
• Promotional campaigns
• New feature announcements
• Security alerts
• Service-related communications

12.2 User Controls

Users may disable push notifications through:

• Device settings
• Application settings
• Operating system preferences

Disabling notifications may affect the delivery of certain service-related updates.

13. COOKIES AND TRACKING TECHNOLOGIES

13.1 Use of Cookies

The Company uses cookies and similar technologies to improve functionality, security, analytics and user experience. Cookies are small data files stored on a user's device.

13.2 Categories of Cookies

Essential Cookies

Required for:

• Authentication
• Security
• Session management
• Platform functionality

Functional Cookies

Used to:

• Remember preferences
• Improve usability
• Store user settings

Analytics Cookies

Used to:

• Analyze usage patterns
• Monitor Platform performance
• Improve products and services

Advertising and Marketing Cookies

Used to:

• Measure campaign effectiveness
• Improve marketing activities
• Deliver relevant promotional content

13.3 Web Beacons and Similar Technologies

The Platform may use pixels, SDKs, tags, web beacons and similar technologies. These technologies assist with analytics, communications, advertising and security.

13.4 Cookie Management

Users may manage cookie settings through browser controls. Disabling certain cookies may affect Platform functionality and performance.

13.5 Consent to Cookie Usage

By continuing to use the Platform, Users consent to the use of cookies and similar technologies as described in this Privacy Policy, subject to applicable legal requirements.

14. RIGHTS OF DATA PRINCIPALS UNDER THE DIGITAL PERSONAL DATA PROTECTION ACT, 2023

14.1 Recognition of User Rights

The Company recognizes and respects the rights available to individuals under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and shall endeavor to facilitate the exercise of such rights in accordance with Applicable Law. Subject to verification requirements and legal limitations, Users may exercise the rights described below.

14.2 Right to Access Information

Users may request information regarding:

• (a) Categories of Personal Data processed by the Company;
• (b) Purposes for which Personal Data is processed;
• (c) Categories of recipients with whom Personal Data has been shared;
• (d) Summary of Personal Data being processed;
• (e) Information required under Applicable Law.

14.3 Right to Correction and Updating

Users may request correction, completion or updating of inaccurate, incomplete or outdated Personal Data maintained by the Company. The Company may require supporting documentation where reasonably necessary to verify such requests.

14.4 Right to Erasure

Users may request deletion of Personal Data where:

• (a) The purpose for which the information was collected has been fulfilled;
• (b) Consent has been withdrawn;
• (c) Retention is no longer necessary under Applicable Law;
• (d) Processing is no longer required for legitimate business purposes.

The Company reserves the right to retain information where required by law or for legitimate legal, security or regulatory purposes.

14.5 Right to Withdraw Consent

Where processing is based upon consent, Users may withdraw consent at any time. Withdrawal of consent shall not affect the lawfulness of processing undertaken prior to such withdrawal. Users acknowledge that withdrawal of consent may limit or prevent the Company's ability to provide certain services.

14.6 Right to Grievance Redressal

Users may raise concerns relating to:

• Collection of Personal Data
• Processing activities
• Data security
• Rights requests
• Privacy concerns

The Company shall endeavor to respond within a reasonable period and in accordance with Applicable Law.

14.7 Right to Nominate

To the extent permitted under Applicable Law, Users may nominate another individual to exercise rights on their behalf in the event of death or incapacity.

15. CONSENT MANAGEMENT

15.1 Obtaining Consent

The Company may seek consent through:

• Registration forms
• Account creation processes
• Mobile application permissions
• Website interactions
• Electronic communications
• Consent notices and disclosures

15.2 Nature of Consent

Consent provided by Users shall be deemed to be:

• Free
• Specific
• Informed
• Unambiguous
• Capable of withdrawal

15.3 Withdrawal of Consent

Users may withdraw consent by:

• (a) Updating account settings;
• (b) Disabling device permissions;
• (c) Contacting customer support;
• (d) Submitting a request to the Grievance Officer.

The Company may continue processing Personal Data where such processing is authorized or required by Applicable Law.

15.4 Consequences of Withdrawal

Withdrawal of consent may result in:

• Inability to access certain Platform features
• Suspension of certain services
• Inability to process bookings
• Account limitations

16. DATA RETENTION

16.1 General Retention Principles

The Company shall retain Personal Data only for such period as is reasonably necessary to:

• Fulfill the purposes described in this Privacy Policy
• Provide services
• Meet legal obligations
• Resolve disputes
• Enforce agreements
• Protect legal rights

16.2 Illustrative Retention Periods

The Company may retain information for periods including but not limited to:

• Account Information: Until account deletion and thereafter as required by law.
• Booking Information: Up to five (5) years or such longer period as may be required by Applicable Law.
• Transaction Records: As required by taxation, accounting and regulatory obligations.
• Customer Support Records: Up to three (3) years from closure of the relevant support interaction.
• Analytics Information: For periods reasonably necessary to support Platform improvement and business operations.

16.3 Extended Retention

The Company may retain information beyond standard retention periods where necessary for:

• Legal proceedings
• Regulatory investigations
• Security incidents
• Fraud prevention
• Contract enforcement
• Business continuity

17. DATA DELETION PROCEDURES

17.1 User Requests

Users may request deletion of Personal Data through:

• Customer support channels
• Email communications
• Requests submitted to the Grievance Officer

17.2 Verification

Prior to processing deletion requests, the Company may verify the identity of the requesting individual to prevent unauthorized deletion.

17.3 Deletion Process

Upon receiving a valid request, the Company may:

• (a) Delete Personal Data;
• (b) Anonymize Personal Data;
• (c) Restrict processing of Personal Data;
• (d) Archive information where required by law.

17.4 Information Not Eligible for Immediate Deletion

Certain information may be retained where necessary for:

• Legal compliance
• Tax obligations
• Accounting requirements
• Security investigations
• Fraud prevention
• Dispute resolution
• Contract enforcement

17.5 Backup Systems

Residual copies of information may remain in backup systems for a limited period until routine deletion cycles are completed.

18. CROSS-BORDER DATA TRANSFERS

18.1 International Processing

The Company may transfer, store, access or process Personal Data outside India in connection with:

• Cloud hosting
• Data storage
• Analytics
• Security monitoring
• Customer support
• Business continuity operations

18.2 User Acknowledgment

By using the Platform, Users acknowledge that Personal Data may be transferred to jurisdictions outside India.

18.3 Applicable Safeguards

Where such transfers occur, the Company shall implement reasonable safeguards designed to protect Personal Data.

19. AWS HOSTING AND INTERNATIONAL PROCESSING

19.1 Cloud Infrastructure

The Platform may utilize cloud infrastructure services provided by Amazon Web Services (AWS) and other authorized service providers. Such infrastructure may support:

• Application hosting
• Database management
• Storage systems
• Backup systems
• Disaster recovery
• Security monitoring

19.2 International Infrastructure

AWS and other service providers may operate servers and infrastructure in multiple jurisdictions. As a result, Personal Data may be stored, processed or accessed in locations outside India.

19.3 Security Measures

The Company shall endeavor to utilize commercially reasonable security measures provided through such infrastructure services. The Company does not guarantee uninterrupted operation or absolute security of third-party infrastructure.

20. INTERNATIONAL DATA PROTECTION SAFEGUARDS

To protect Personal Data during international processing activities, the Company may implement measures including:

• (a) Contractual obligations with service providers;
• (b) Access control mechanisms;
• (c) Encryption technologies;
• (d) Security monitoring procedures;
• (e) Vendor due diligence processes;
• (f) Internal privacy and security policies.

While reasonable measures are undertaken, Users acknowledge that no system of storage, processing or transmission can be guaranteed to be completely secure. The Company shall not be liable for circumstances beyond its reasonable control, including failures attributable to third-party infrastructure providers, communication networks or force majeure events.

21. SECURITY MEASURES

21.1 Commitment to Security

The Company recognizes the importance of safeguarding Personal Data and has implemented reasonable technical, administrative and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, misuse, destruction or loss.

21.2 Security Controls

Security measures may include:

• (a) Role-based access controls;
• (b) Authentication mechanisms;
• (c) Encryption technologies where appropriate;
• (d) Secure hosting infrastructure;
• (e) Security monitoring and logging systems;
• (f) Backup and disaster recovery systems;
• (g) Internal access restrictions;
• (h) Periodic security reviews.

21.3 User Responsibility

Users are responsible for maintaining the confidentiality of their login credentials and for all activities conducted through their Accounts. Users must immediately notify the Company of any suspected unauthorized access or security incident.

21.4 No Absolute Guarantee

While the Company employs commercially reasonable security measures, no electronic transmission, storage system or security framework can be guaranteed to be completely secure. Accordingly, the Company cannot guarantee absolute security of Personal Data.

22. MARKETING COMMUNICATIONS

22.1 Promotional Communications

The Company may send promotional communications relating to:

• New services
• Product launches
• Offers and discounts
• Membership programs
• Loyalty programs
• Marketing campaigns
• Business updates

22.2 Consent-Based Marketing

Where required by Applicable Law, marketing communications shall be provided based upon User consent.

22.3 Opt-Out Rights

Users may opt out of promotional communications by:

• (a) Using unsubscribe links;
• (b) Updating account preferences;
• (c) Contacting customer support;
• (d) Writing to the Grievance Officer.

22.4 Essential Communications

The Company may continue to send communications necessary for:

• Account management
• Security notifications
• Transaction confirmations
• Booking updates
• Legal notices
• Service-related communications

Such communications shall not be considered marketing communications.

23. CHILDREN'S PRIVACY

23.1 Age Restrictions

The Platform is intended solely for individuals who are thirteen (13) years of age or older.

23.2 No Knowing Collection

The Company does not knowingly collect Personal Data from children.

23.3 Removal of Children's Information

If the Company becomes aware that Personal Data belonging to a child has been collected without appropriate authorization, reasonable efforts shall be undertaken to:

• (a) Remove such information;
• (b) Restrict access to such information;
• (c) Prevent further processing.

23.4 Parental Requests

Parents or legal guardians who believe that a child has provided Personal Data may contact the Company for assistance.

24. GRIEVANCE OFFICER

In accordance with applicable legal requirements, the Company has designated a Grievance Officer to address concerns relating to privacy, data protection and Personal Data processing.

Users may submit complaints, concerns, requests or grievances relating to:

• Personal Data processing
• Data correction requests
• Data deletion requests
• Consent withdrawal
• Privacy concerns
• Security incidents

The Company shall endeavor to respond within reasonable timelines and in accordance with Applicable Law.

25. DISCLAIMER OF WARRANTIES

The Platform is provided on an "as is" and "as available" basis. To the fullest extent permitted by Applicable Law, the Company disclaims all representations and warranties, whether express, implied, statutory or otherwise, including warranties relating to:

• Merchantability
• Fitness for a particular purpose
• Non-infringement
• Availability
• Reliability
• Accuracy of information
• Security
• Uninterrupted operation

The Company does not warrant that:

• (a) The Platform will always be available;
• (b) The Platform will be error-free;
• (c) Defects will always be corrected;
• (d) The Platform will be free from viruses or malicious code.

26. LIMITATION OF LIABILITY

To the maximum extent permitted by Applicable Law:

• (a) The Company shall not be liable for any indirect, incidental, special, punitive or consequential damages;
• (b) The Company shall not be liable for loss of profits, revenue, goodwill, business opportunities, data or reputation;
• (c) The Company shall not be liable for actions, omissions or conduct of Salon Partners, Staff Members or third parties;
• (d) The Company shall not be liable for interruptions caused by internet service providers, cloud infrastructure providers, payment processors or third-party vendors;
• (e) The Company shall not be responsible for unauthorized access resulting from circumstances beyond its reasonable control.

Nothing in this Privacy Policy shall exclude liability where such exclusion is prohibited by Applicable Law.

27. INDEMNITY

Users agree to indemnify, defend and hold harmless the Company, its directors, officers, employees, affiliates, agents and representatives from and against any claims, liabilities, losses, damages, costs or expenses arising from:

• (a) Violation of this Privacy Policy;
• (b) Violation of Applicable Law;
• (c) Misuse of the Platform;
• (d) Submission of unlawful, misleading or infringing information;
• (e) Unauthorized use of another person's information.

28. THIRD-PARTY SERVICES

The Platform may integrate with or rely upon third-party service providers including but not limited to:

• Razorpay
• Amazon Web Services (AWS)
• Google Analytics
• Communication service providers
• Customer support systems
• Security service providers

Such third parties may independently collect, process or store information in accordance with their own privacy policies. The Company is not responsible for privacy practices adopted by third-party service providers. Users are encouraged to review the privacy policies of such providers independently.

29. FORCE MAJEURE

The Company shall not be liable for any delay, interruption, loss, damage or failure resulting from events beyond its reasonable control, including:

• Natural disasters
• Government actions
• Regulatory restrictions
• Internet outages
• Cyber attacks
• Infrastructure failures
• Labor disputes
• Acts of war
• Pandemic-related disruptions

30. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Subject to Applicable Law, the courts located in Bhubaneswar, Odisha shall have exclusive jurisdiction over disputes arising from or relating to this Privacy Policy.

31. AMENDMENTS TO THIS PRIVACY POLICY

The Company reserves the right to amend, modify, revise or replace this Privacy Policy at any time. Such amendments may be made due to:

• Changes in law
• Regulatory requirements
• Business operations
• Product developments
• Security considerations
• Industry standards

Updated versions shall be published on the Platform and shall become effective upon publication unless otherwise specified. Users are encouraged to periodically review this Privacy Policy. Continued use of the Platform following publication of updates shall constitute acceptance of the revised Privacy Policy.

32. CONTACT INFORMATION

For any questions, concerns, requests or communications relating to this Privacy Policy, Users may contact:

33. ENTIRE PRIVACY POLICY

This Privacy Policy constitutes the entire privacy notice governing the collection, processing, storage, transfer and protection of Personal Data by BYTEHARBOR CONSULTANCY SERVICES PRIVATE LIMITED in connection with the Naibooking Platform.

If any provision of this Privacy Policy is determined to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

The failure of the Company to enforce any provision of this Privacy Policy shall not constitute a waiver of such provision or any other rights available to the Company under Applicable Law.