1. Who we are
WeddersKart is operated from 3rd Floor, Prestige Tech Park, Marathahalli, Bangalore, Karnataka 560103, India. We run an online marketplace that connects couples planning weddings with wedding service providers.
For the purposes of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, WeddersKart is the body corporate responsible for the personal data described here.
Our Grievance Officer can be reached at hello@wedderskart.com. Under Rule 5(9) of the SPDI Rules, complaints are acknowledged within 24 hours and resolved within one month.
2. What we collect
2.1 If you are a couple or family member
When you submit an enquiry or create an account, we collect the information you give us:
- Name and mobile number (required — this is how vendors contact you)
- Email address, wedding date, city, budget range and your written requirements (optional)
- The pages you viewed and the vendors you enquired with, so we can route your enquiry sensibly
2.2 If you are a vendor
To list a business we additionally collect business name and description, category, service city and area, pricing, portfolio images, and business registration or identity documents submitted for verification.
Payment card details are never seen or stored by us. Payments are processed by Razorpay, a PCI-DSS compliant payment gateway, and we retain only the transaction identifier and amount.
2.3 Collected automatically
Like most websites we record IP address, browser and device type, referring page, and pages viewed. We use this for security, fraud prevention, rate limiting and aggregate analytics.
3. Why we use it, and on what basis
We process personal data to provide the service you asked for, to comply with legal obligations, and for our legitimate interest in operating and protecting the platform.
- To route your enquiry to matching vendors — this is the core service and the reason your number is collected
- To verify that a vendor business is real before it appears in listings
- To send transactional messages: OTPs, enquiry confirmations, and vendor notifications
- To take payment from vendors for subscriptions, lead credits and placements
- To detect fraud, abusive submissions and duplicate enquiries
- To measure how the platform performs in aggregate, and improve it
4. Who we share it with, and who we do not
When you submit an enquiry, your name, mobile number, wedding date, city, budget band and message are shared with a maximum of five matching vendors. This is the entire point of the service and we tell you before you submit.
We do not sell personal data. We do not share your contact details with anyone other than the vendors matched to your specific enquiry. We do not add you to marketing lists operated by third parties.
4.1 Service providers we use
We share the minimum necessary data with the following processors, each bound by contract to use it only on our instructions:
- MSG91 and Twilio — sending SMS and OTPs (mobile number only)
- Meta WhatsApp Business API — vendor lead notifications
- Razorpay — vendor payments (vendor billing details only)
- Cloudinary — hosting vendor portfolio images
- Our hosting and database providers — encrypted storage and delivery
4.2 Legal disclosure
We may disclose data where required by law, by a court order, or to a government agency lawfully authorised to require it under Section 69 of the IT Act, 2000. Where we are permitted to tell you, we will.
5. How long we keep it
- Enquiries: 45 days in an active state, then archived. Retained for 3 years for dispute resolution, then deleted.
- Accounts: for as long as the account is open, and 90 days after closure.
- Payment and invoice records: 8 years, as required by Indian tax law.
- OTPs: 5 minutes, stored only as a salted hash and deleted on use.
- Server logs: 90 days.
6. Your rights
Under Indian law, and as a matter of our own policy, you can:
- Ask what personal data we hold about you and get a copy
- Correct anything inaccurate — you can edit most of it yourself
- Withdraw consent and ask us to stop processing, understanding that we cannot route enquiries without your number
- Ask us to delete your account and associated data, subject to the retention periods above
- Stop further vendor contact arising from an enquiry, at any time
- Complain to us, and escalate to the relevant authority if we do not resolve it
6.1 How to exercise them
Email hello@wedderskart.com from the address or with the mobile number on your account. We will verify it is you before acting, and respond within 30 days. There is no charge.
7. How we protect it
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and CERT-In as required under the Information Technology Act and CERT-In directions of April 2022.
- All traffic is encrypted in transit using TLS 1.2 or higher
- Passwords are stored using bcrypt; OTPs are stored only as salted hashes
- Access to production data is limited to staff who need it and is logged
- Rate limiting and abuse detection on enquiry and authentication endpoints
- Payment card data never touches our servers
8. Children
The platform is not intended for anyone under 18. The legal minimum age of marriage in India is 18 for women and 21 for men. We do not knowingly collect data from children, and will delete it if we discover we have.
9. Changes to this policy
If we make a material change we will note it on this page and, where the change affects how we use data you have already given us, tell you directly. Continuing to use the platform after a change means you accept the updated policy.
Questions about this policy?
Write to hello@wedderskart.com or 3rd Floor, Prestige Tech Park, Marathahalli, Bangalore, Karnataka 560103, India. We respond to written queries within 30 days as required under Indian law.
See also: Privacy · Terms · Refunds · Vendor Agreement · Cookies