[EFFECTIVE DATE], [timeline — set per final DPDP Rules, e.g., within 30 days], [e.g., 72 hours], [DPO NAME/EMAIL], [Confirm your position and update if the Government restricts any country you rely on.].
Operated by HASU AURORA PRIVATE LIMITED
Effective date: [EFFECTIVE DATE] · Last updated: 22 August 2026
At or before the point we collect your personal data, we provide a clear notice — in English and, on request/where required, other languages — stating:
The consent notice text is maintained in-app at registration, checkout, and the analytics consent card, and mirrors the Privacy Policy.
We process personal data on the basis of your free, specific, informed, unconditional, and unambiguous consent given by a clear affirmative action, or on the basis of a legitimate use permitted by the DPDP Act.
You can withdraw consent as easily as you gave it:
Withdrawal stops future consent-based processing; it does not affect processing already done, and some features may stop working. We (and our processors) will cease processing within a reasonable period after withdrawal.
| Right (DPDP Act) | What it means | How to use it today |
|---|---|---|
| Access (§11) | A summary of the personal data we process about you and our processing activities, and the identities of Data Fiduciaries/Processors we've shared it with. | Guests use Account → Privacy / Data & Rights → Export on Web, iOS, or Android; email support@hasuaurora.com for assistance. |
| Correction & completion (§12) | Correct inaccurate/misleading data; complete or update it. | Email support@hasuaurora.com. (In-app profile editing is planned but not yet connected.) |
| Erasure (§12) | Delete personal data we no longer need for its purpose and aren't legally required to keep. | Guests use Delete account. The service verifies identity, explains blockers, provides a 30-day cancellation period, and then deletes or anonymises eligible data while retaining only legally required records. |
| Grievance redressal (§13) | A readily available means to raise grievances with us first. | See §6 (Grievance Officer) |
| Nomination (§14) | Nominate another individual to exercise your rights if you die or become incapacitated. | Email support@hasuaurora.com with nominee details |
We verify identity before acting on a request. Self-service export and deletion publish status in the app; requests needing manual review go to our team. We respond to rights requests within [timeline — set per final DPDP Rules, e.g., within 30 days], and to grievances within the period the Rules require.
You must not impersonate others, must provide authentic information where legally required (e.g., verified ID for a booking), and must not file false or frivolous grievances.
Contact our Grievance Officer for any DPDP-related concern, request, or complaint. This is your first point of contact before approaching the Board.
If you are not satisfied with our response, you may complain to the Data Protection Board of India (details and process as published by the Board).
We maintain safeguards and an incident-response process. In the event of a personal-data breach, we will notify the Data Protection Board of India and each affected Data Principal in the manner and within the timelines required by the DPDP Rules, including a description of the breach, likely consequences, and the measures taken.
The Platform's core data is hosted in Singapore and analytics in the United States (see Privacy Policy §11). We may transfer personal data outside India in accordance with the DPDP Act, and will comply with any restriction on transfers to specific countries or territories that the Central Government notifies. [Confirm your position and update if the Government restricts any country you rely on.]
We apply reasonable security safeguards (Privacy Policy §13) and bind our Data Processors by contract to protect personal data, process it only on our instructions, and assist with Data Principal requests and breach handling. A current subprocessor list is maintained in-app and linked from the site footer.
We will update this addendum as the DPDP Rules are finalised and as our processing changes, and post a new "Last updated" date.
Contact: support@hasuaurora.com · Grievance Officer: Sukshith GM, support@hasuaurora.com.