Fancrew Privacy Policy

Fancrew Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at A-18, BLK-III PH-III, KV-II SEC 82, Noida, Gautam Buddha Nagar, Noida, Uttar Pradesh, India, 201301 and carrying on business under the name and style of "Fancrew" (hereinafter referred to as "Fancrew", "We", "Us" or "Our"), respects the privacy of persons who visit, register on or use the Fancrew website available at https://Fancrew.in (the "Website").

This Privacy Policy explains how We collect, receive, use, store, disclose, retain and otherwise process information relating to an identified or identifiable individual ("Personal Data") when You visit or use the Website as a visitor, Content Creator or Crew Member.

It should be read together with the Fancrew Website Terms and Conditions and any specific notice shown to You at the time particular Personal Data is collected. Capitalised terms not defined in this Privacy Policy have the meanings assigned to them in the Fancrew Website Terms and Conditions.

This Privacy Policy is intended to comply with the Information Technology Act, 2000 and the rules made thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable. It also reflects the Digital Personal Data Protection Act, 2023 and the rules made thereunder, to the extent those provisions are in force and apply to Fancrew (collectively, "Applicable Data Protection Law").

Please read this Privacy Policy carefully before using the Website or providing Personal Data to Us. By continuing to access or use the Website, You ("You" or "Your") acknowledge that You have read and understood this Privacy Policy, and such continued use shall be deemed acceptance of this Privacy Policy as it applies to Your use of the Website.

Where Applicable Data Protection Law requires consent for a particular processing activity, Fancrew will seek Your consent separately through a clear affirmative mechanism. Acceptance of this Privacy Policy will not replace such specific consent.

The Personal Data collected depends on how You use the Website. We endeavour to collect only such Personal Data as is reasonably necessary for the purpose stated at the point of collection or described below.

Certain information may constitute sensitive personal data or information under Applicable Data Protection Law. We collect and process such information only where it is required for a stated purpose and in accordance with Applicable Data Protection Law.

We may collect Personal Data:

• Directly from You when You register, complete a profile, post or apply for a Project, communicate through the Website, upload files, make or receive a payment, seek support or exercise a privacy right;
• Automatically when You access or use the Website, through logs, cookies and similar technologies;
• From another User where that information is reasonably necessary for a Project, payment, complaint or Dispute; and
• From Payment Partners, identity-verification providers, connected-account providers and other service providers, or from public sources, where permitted by law.

Where a field is optional, You may choose not to provide it. If Personal Data is required to create an Account, verify identity, facilitate a payment or provide a requested feature, refusal to provide it may prevent Us from providing that feature.

This Privacy Policy, together with any notice displayed at the point of collection, describes the Personal Data proposed to be processed and the purpose for which it is required. Where specific consent is required for collection, use, storage, disclosure, retention or other processing, We will request it in clear and plain language and through an affirmative action, such as a checkbox, consent button or account setting.

You may withdraw consent through the mechanism made available at the time of consent or by contacting Us at the details set out below. Withdrawal will not affect processing already undertaken lawfully. After a valid withdrawal request, We will stop the processing concerned within a reasonable period, unless retention or further processing is permitted or required by Applicable Law. Withdrawal may affect features that cannot reasonably be provided without the relevant Personal Data.

We may process Personal Data without consent where Applicable Law permits or requires it, including for compliance with law, response to a lawful order, prevention of fraud or security incidents, protection of rights or safety, or other lawful uses recognised under Applicable Data Protection Law.

A Creator or Crew profile may contain information intended to be visible to other Users or the public, including the display name, photograph, biography, professional category, skills, location, portfolio, social links, ratings and reviews. The Website will identify the fields intended for public display where reasonably practicable. You should not publish information that You do not wish to make public. Public information may be indexed, copied or cached by third parties beyond Fancrew's control.

If You provide Personal Data relating to another person, including a team member, authorised representative or person appearing in Creator Materials or Deliverables, You must have lawful authority to provide that information and, where required, have given the person an appropriate notice and obtained consent. You should not upload government identifiers, financial information, health information or other sensitive information to a public profile, Project posting or portfolio.

We do not sell or rent Personal Data as a product. We may disclose only such Personal Data as is reasonably necessary to:

• The relevant Creator or Crew Member, to facilitate a Project, communication, payment, review, complaint or Dispute;
• Payment Partners, banks, KYC and verification providers, cloud hosting and storage providers, communication providers, analytics, security, monitoring and customer-support providers engaged to support the Website;
• Our professional advisers, auditors and insurers, subject to duties of confidentiality;
• A competent government authority, court, law-enforcement agency or regulator where disclosure is required by law or a lawful order, or is reasonably necessary to prevent fraud, investigate misuse or protect rights, property or safety; and
• A proposed or completed purchaser, investor, successor or reorganised entity in connection with a merger, acquisition, financing, restructuring or transfer of business, subject to appropriate safeguards and Applicable Law.

Service providers are permitted to process Personal Data only for the services for which they are engaged, subject to contractual and legal obligations appropriate to the nature of the processing. Personal Data voluntarily disclosed by You to another User will also be subject to that User's own handling practices, for which Fancrew is not responsible.

Subject to Your consent, where required under Applicable Law, We may use Your name, contact details, role, profile preference and information relating to Your use of the Website to send newsletters, offers, updates and other promotional communications, personalise marketing content and assess the relevance and effectiveness of such communications. You may withdraw Your consent or opt out of promotional communications at any time through the unsubscribe facility, Your Account settings or by contacting Us.

Payments, payouts, refunds, chargebacks and KYC or bank verification may be processed by a Payment Partner or another authorised service provider. The relevant provider may collect Personal Data directly from You under its own terms and privacy notice. Fancrew ordinarily receives transaction references, payment status, limited masked payment information and verification results; We do not ordinarily store complete payment-card credentials or internet-banking passwords.

We may retain payment, tax, KYC and transaction records for the period required under Applicable Law or reasonably necessary for reconciliation, fraud prevention, audits, refunds, chargebacks and Disputes.

The Website may use cookies, local storage, pixels, tags and similar technologies. Some are strictly necessary to authenticate Users, maintain secure sessions, prevent fraud and provide requested features. Others may be used, where enabled, to remember preferences, measure performance and usage, improve the Website or support communications and marketing.

Where consent is required for a non-essential cookie, We will request it through the cookie banner or preference tool before placing that cookie. You may change Your choices through Your Cookie Settings or through Your browser settings. Blocking strictly necessary cookies may impair login, payment or other core functionality. Third parties providing analytics or embedded features may place their own cookies and process information under their privacy notices.

We take reasonable security practices and procedures appropriate to the nature of the information and the risks involved. These may include access controls, encryption or masking where appropriate, secure transmission, credential protection, monitoring and audit logs, backups, incident-response measures, and contractual safeguards for service providers. Access is restricted to persons who require the information for an authorised purpose.

No website, transmission or storage system is completely secure. You are responsible for keeping Your password and one-time password confidential and for promptly notifying the Grievance Officer if You suspect unauthorised access to Your Account. If a Personal Data breach occurs, We will investigate, contain and address it and provide notices to affected persons or competent authorities where required by Applicable Law.

We retain Personal Data only for as long as it is required for the purpose for which it was collected or for a lawful related purpose. In determining the retention period, We consider the status of Your Account and Projects, the nature and sensitivity of the information, payment and tax requirements, security and fraud risks, limitation periods, complaints or Disputes, and requirements imposed by law or a lawful authority.

Account registration information may be retained after cancellation or withdrawal of registration for the period prescribed for intermediaries under Applicable Law. Financial, tax, KYC, transaction, Project, communication, security and Dispute records may be retained for the applicable statutory or reasonably necessary period. Residual copies may remain in protected backups until they are overwritten in the ordinary course, subject to restricted use.

When Personal Data is no longer required and no legal basis for retention remains, We will delete it, anonymise it or take reasonable steps to put it beyond use. Deletion of an Account does not require deletion of information that We must retain by law, information necessary to establish or defend legal claims, or content that forms part of another User's transaction record; such information will be restricted to the relevant purpose where appropriate.

Notwithstanding the withdrawal of consent or a request for deletion of Personal Data, We may retain limited copies of such Personal Data for lawful archival, record-keeping, disaster-recovery and backup purposes, subject to Applicable Law. Any Personal Data retained for such purposes will remain protected, access-restricted and will not be used for active business or marketing purposes. Such Personal Data will be deleted or overwritten in accordance with Our applicable retention and backup cycles, unless a longer retention period is required or permitted under Applicable Law.

Subject to Applicable Data Protection Law and verification of Your identity, You may request:

• A summary of Personal Data being processed and information about the processing;
• Correction, completion or updating of inaccurate or incomplete Personal Data;
• Erasure of Personal Data that is no longer required to be retained;
• Withdrawal of consent for processing based on consent;
• Redressal of a privacy grievance; and
• Nomination of another individual to exercise rights in the circumstances and manner provided by Applicable Data Protection Law.

You may update certain information through Your Account or submit a request using the contact details below. We may ask for information reasonably necessary to verify Your identity and locate the relevant records. We may refuse or limit a request where permitted by Applicable Law and will explain the reason where required.

You may unsubscribe from promotional emails through the unsubscribe link or change available communication preferences. We may continue to send essential messages concerning Account security, Projects, payments, legal notices or requested support.

The Website is intended for persons who are at least 18 years of age. We do not knowingly permit a person under 18 years of age to create an Account. If We become aware that Personal Data has been collected directly from a child without the consent or authority required by Applicable Law, We may restrict the Account and take reasonable steps to delete the information.

A Creator who provides Personal Data concerning a child in connection with a lawful Project must have the verifiable consent of the child's parent or lawful guardian and any other permission required by law. Fancrew may request evidence of such authority and may restrict the relevant content or Project until satisfied.

The Website may contain links to or integrations with third-party websites and services. Fancrew does not control their privacy or security practices. You should review the applicable third-party privacy notice before providing information or connecting an account.

Fancrew will not ask You to disclose Your password, complete payment-card details or internet-banking password by unsolicited email, message or telephone call. If You receive a communication that appears suspicious, do not respond or use the link provided; report it to the Grievance Officer.

We may update this Privacy Policy to reflect changes in the Website, Our processing practices or Applicable Law. The revised Privacy Policy will be published on the Website with an updated date. Where a change is material, We may also provide notice through the Website, Your Account or email. Your continued use of the Website after the effective date of the revised Privacy Policy shall be deemed acceptance of the revised Privacy Policy; however, We will obtain separate consent where Applicable Data Protection Law requires consent for a materially different processing purpose.

For questions, requests or complaints concerning this Privacy Policy or Our processing of Personal Data, please contact:

• Entity: Fancrew Private Limited
• Grievance Officer / Data Protection Contact: Grievance Officer, Fancrew
• Email: support@fancrew.in

Please provide sufficient information to identify Your Account and explain Your request. We will acknowledge and address the grievance within the period prescribed by Applicable Law.

Where available and applicable, You may pursue further remedies before the competent data-protection authority after first using Fancrew's grievance-redressal mechanism.