Privacy Policy

Ultra X Studios (“Ultra X Studios”, “we”, “us”) is an entertainment studio based in India. We run www.ultraxstudios.com and experience.ultraxstudios.com (together, “the sites”), including the Ultra X, Mehfil X and Bhakti X pages.

We decide why and how the personal data described here is used, which makes us the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023. This policy is also published under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

You can reach us at experience@ultraxstudios.com or +91 90825 39114.

It covers the sites, the forms on them, and the emails and messages we exchange with you because of them.

It does not cover other companies’ sites and apps, even when we link to them, such as ticketing platforms, Instagram, YouTube, Spotify or WhatsApp. Their own privacy policies apply there.

What you give us:

• Enquiry form (“Tell us about your event”): your name, email address, phone number, the experience you are asking about, and your message.
• WhatsApp forms on our event pages: the details you type are put into a WhatsApp message on your own device. Nothing reaches us until you press send in WhatsApp. When you do, we receive the message along with your WhatsApp number and profile name.
• Sign-ups (waitlists or newsletters, if and when we offer them): usually your email address, and sometimes your name, phone number or city.
• Anything you send us directly by email, phone or WhatsApp.

What is collected automatically when you use the sites:

• Cookies and similar identifiers (see “Cookies, analytics and advertising” below).
• Usage data: the pages you view, what you click, how far you scroll, which forms you start or send, the page or ad that brought you here, and the date and time.
• Device data: browser, operating system, device type, screen size and language.
• Approximate location, such as your city or region, worked out from your IP address. We do not collect your precise location.

We do not ask for financial details, health information, passwords or other sensitive personal data, and we ask you not to send them.

• To reply to your enquiry, plan and quote for your event, and stay in touch about it.
• To send you a confirmation that your enquiry reached us.
• To send you updates you have signed up for. Every such email has a way to stop them.
• To run the sites, keep them secure, fix problems and understand which pages are useful.
• To measure how our advertising performs and to show our ads to people likely to be interested, including people who have visited the sites.
• To meet our legal obligations and to protect our rights.

We do not sell your personal data, and we do not use it for anything unrelated to the purposes above without asking you first.

We use your personal data with your consent, which you give when you send a form, sign up or agree to cookies, or where the law allows it without consent: for example when you choose to give us your details for a specific purpose (such as an enquiry) and have not said you do not want them used.

You can withdraw consent at any time, as easily as you gave it: use the unsubscribe link in an email, change your cookie choices, or write to experience@ultraxstudios.com. Withdrawing does not affect what we did before, but we may then not be able to reply to an open enquiry.

Cookies are small files a site stores in your browser. Similar tools include pixels and tags. We use them for three things:

• Essential: to make the sites load and work. These cannot be switched off on the sites.
• Analytics: we use Google Tag Manager to manage these tools and Google Analytics 4 to understand how the sites are used. Google Analytics sets cookies and collects identifiers, usage and device data and approximate location. We look at it in aggregate, not to identify you.
• Advertising: we advertise on Google and may advertise on other platforms, such as Meta (Facebook and Instagram). These platforms may use cookies, pixels and identifiers on the sites to measure whether an ad led to a visit or an enquiry, and to build audiences, for example to show our ads again to people who visited.

Google’s use of this data is explained at How Google uses information from sites that use its services. Each other advertising platform explains its own use in its privacy policy.

Your choices:

• Block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the sites working.
• Stop Google Analytics on every site with the Google Analytics opt-out browser add-on.
• Turn off personalised ads from Google in My Ad Center, and from Meta in its ad preferences.
• On a phone, use the “limit ad tracking” or “delete advertising ID” option in your device settings.

Where the sites ask for your cookie choice, you can change it at any time.

We share personal data only with those who help us run the sites and our events, and only what they need:

• Vercel, which hosts the sites.
• Resend, which delivers the enquiry emails to us and the confirmation email to you.
• Our email provider, where your messages to us are kept.
• Google, for tag management, analytics and advertising, and other advertising platforms as described above.
• WhatsApp (part of Meta), when you choose to message us there.
• Venues, artists and event partners, when they need your details to deliver an event you have arranged with us.

We also share data when the law requires it (for example, a lawful request from a government authority), to protect our rights or anyone’s safety, or if our business or part of it is transferred to another company, which would then be bound by this policy.

Tickets for our shows are sold on third-party platforms such as BookMyShow and District. When you buy there, that platform collects your details and payment under its own terms and privacy policy. It may share with us the details we need to run the event, such as your name and ticket type.

If we offer tickets or payments on the sites in future, payments will be handled by a payment provider. We will not see or store your full card or bank details.

The sites link to Instagram, YouTube, Spotify, WhatsApp and ticketing platforms. When you follow a link, you leave our sites and that service’s own terms and privacy policy apply. We are not responsible for how they handle your data.

Some of the providers named above store or process data on servers outside India, for example in the United States or Europe. We use providers that protect personal data to a recognised standard, and we will not transfer data to any country the Government of India restricts.

• Enquiries and the emails and messages around them: for as long as we are discussing or delivering your event, and then for up to three years so we can refer back to them, unless you ask us to delete them sooner.
• Records we must keep by law, such as contracts and invoices for an event you booked: for as long as the law requires.
• Sign-ups: until you unsubscribe or ask us to remove you.
• Analytics data: Google Analytics keeps it for the period set in our account, at most fourteen months, after which only aggregated reports remain.

When we no longer need personal data, we delete it or make it anonymous.

The sites use encrypted connections (HTTPS). Access to enquiries is limited to the people at the studio who handle them, and we use established providers with their own security programmes. We follow reasonable security practices as required by Indian law.

No system is completely secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

Under the Digital Personal Data Protection Act, 2023 you can:

• Ask for a summary of the personal data we hold about you and how we use it, and who we have shared it with.
• Ask us to correct, complete or update it.
• Ask us to erase it, unless we must keep it by law.
• Withdraw your consent at any time.
• Nominate someone to exercise these rights for you if you die or are unable to.
• Have a complaint about how we handle your data addressed by our Grievance Officer.

To use any of these, write to experience@ultraxstudios.com. We may ask you to confirm your identity first. We will reply within 30 days.

If you are not satisfied with our response, you can complain to the Data Protection Board of India.

The sites are not meant for anyone under 18, and we do not knowingly collect personal data from children. If you are under 18, please ask a parent or guardian to contact us for you; we will need their verifiable consent before using a child’s data.

We do not track children or show them advertising based on their behaviour. If we learn that we have a child’s data without a parent’s consent, we will delete it.

For any question or complaint about your personal data or this policy, contact:

• Grievance Officer, Ultra X Studios
• Email: experience@ultraxstudios.com
• Phone: +91 90825 39114
• Address: Mumbai, Maharashtra, India

We will acknowledge your message promptly and resolve it within 30 days of receiving it.

We may update this policy when our sites, our services or the law change. The date at the top shows when it last changed. If a change is significant, we will say so on the sites, and where the law requires it we will ask for your consent again.