CUSTOMER PRIVACY POLICY

Last updated: 19 January, 2026

Welcome to BLYSS’s Privacy Policy (“Privacy Policy” or “Policy”).

Blyss Infinitaas Limited, together with its affiliates (collectively referred to as “Company”, “we”, “us”, or “our”), operates an app-based platform that facilitates connections between customers seeking specific services and independent service professionals offering such services.

This Privacy Policy describes our practices relating to the collection, use, storage, processing, and disclosure of personal data that you choose to share with us when you access, use, or otherwise interact with our mobile application “BLYSS” (the “Platform”) or avail any products or services offered by the Company on or through the Platform (collectively, the “Services”). Services provided by independent service professionals through the Platform are referred to in this Policy as “Professional Services”.

At the Company, we are committed to safeguarding your personal data and respecting your privacy. In order to enable your access to the Platform, the Services, and the Professional Services, we may be required to collect and process certain information relating to you. This Policy explains the manner in which such personal data is collected, used, shared, stored, and otherwise processed.

Unless the context otherwise requires, capitalized terms used but not defined in this Policy shall have the meanings assigned to them in our Terms and Conditions, available at https://blyssworld.com/terms-and-conditions.html (“Terms”). This Policy should be read together with the Terms.

1. BACKGROUND AND KEY INFORMATION

(a) How this Policy applies

This Privacy Policy applies to all individuals who access or use the Platform, avail the Services, or otherwise engage with Professional Services through the Platform. For the purposes of this Policy, references to “you” or “your” mean the end user accessing or using the Platform.

By accessing or using the Platform, you consent to the collection, use, storage, processing, and disclosure of your personal data in accordance with this Privacy Policy.

(b) Review and Updates

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or operational requirements. We encourage you to review this Policy periodically to stay informed about how your personal data is protected.

It is important that the personal data we hold about you remains accurate and up to date. You are requested to inform us of any changes to your personal data during your continued use of the Platform.

(c) Third-Party Services

The Platform may contain links to or integrations with third-party websites, applications, plug-ins, or services (“Third-Party Services”). Accessing such Third-Party Services may allow those entities to collect or share data about you in accordance with their own privacy practices.

We do not control, operate, or endorse any Third-Party Services and are not responsible for their privacy policies or data handling practices. Once you leave the Platform or access Third-Party Services through the Platform, we encourage you to review the privacy policies of such third parties before sharing any personal data.

2. PERSONAL DATA THAT WE COLLECT

(a) Categories of Personal Data

We may collect, store, use, and otherwise process different categories of personal data about you, including the following:

i. Contact Data: Information such as your residential or mailing address, location details, email address, and mobile/telephone number.

ii. Identity and Profile Data: Information such as your name, username or other identifiers, profile photographs, and gender.

iii. Marketing and Communications Data: Information relating to your communications and interactions with us, including your address and email address, content shared in service requests, offers, feedback, comments, images, discussions on blogs or forums, and interactions through chat boxes. This also includes responses to user surveys or polls, your preferences regarding marketing communications, and records of communications (including chats and calls) with service professionals conducted through the Platform.

iv. Technical Data: Information such as your internet protocol (IP) address, browser type, internet service provider, operating system details, access times, page views, device identifiers, device type, usage frequency, website and mobile application activity, clickstream data, date and time stamps, approximate location data, and other technical information associated with the devices used to access the Platform.

v. Transaction and Payment Data: Information relating to payments and transactions, including details of the Services or Professional Services availed, limited and masked payment information as shared by authorised payment processors, and UPI identifiers used for processing payments. We do not store complete credit or debit card numbers on our systems.

vi. Usage Data: Information about how you use the Platform and the Services, including booking history, interaction patterns, taps, clicks, interests, time spent on the Platform, navigation paths, and page views.

(b) Aggregated and Anonymised Data

We may collect, use, and share aggregated or anonymised data, such as statistical or demographic information, for analytics, research, and business purposes. Such data does not identify you and is therefore not treated as personal data under applicable law.

Where aggregated data is combined with personal data in a manner that enables identification, such combined data shall be treated as personal data and processed in accordance with this Policy.

(c) Consequences of Failure to Provide Personal Data

Where the collection of personal data is necessary to comply with legal requirements or to perform our contractual obligations under the Terms, and you choose not to provide such data when requested, we may be unable to provide you with access to the Platform, the Services, or the Professional Services.

In such cases, we reserve the right to suspend, restrict, or cancel your access to the Services, as applicable.

3. HOW WE COLLECT PERSONAL DATA?

Overview

We collect personal data about you through various lawful and transparent means, including the following:

a) Information Provided Directly by You

You may provide personal data directly to us when you interact with the Platform or the Services. This includes information shared by you when you:

i. Register for an account or create a user profile on the Platform;

ii. Access, use, or otherwise engage with the Services or Professional Services;

iii. Participate in promotions, user polls, feedback requests, or online surveys conducted by us;

iv. Subscribe to or request marketing or informational communications; or

v. Contact us, report an issue, seek support, or otherwise communicate with us regarding the Platform or the Services.

b) Information Collected Automatically

i. When you access or use the Platform, we may automatically collect certain Technical Data relating to your device, browsing actions, and usage patterns. This data is collected through the use of cookies, web beacons, pixel tags, server logs, software development kits (SDKs), and similar technologies.

ii. Such information may include details relating to device identifiers, browser type, operating system, access times, interactions with the Platform, and approximate location data. We may also receive Technical Data where you interact with third-party platforms or applications that utilise our cookies or similar technologies, subject to applicable law.

iii. You may control the use of cookies through your browser or device settings; however, disabling certain cookies may affect the functionality of the Platform.

c) Information Received from Third Parties

We may receive personal data about you from third parties, including:

i. Technical and usage data from analytics providers, advertising networks, and technology partners (such as social media or advertising platforms), in accordance with their privacy policies;

ii. Identity, profile, and contact-related data shared by service professionals where relevant to the provision of Services, or obtained from publicly available sources; and

iii. Personal data received from our group companies or affiliate entities for legitimate business purposes, subject to applicable legal requirements.

4. HOW DO WE USE YOUR PERSONAL DATA?

(a) Lawful Basis and Purposes of Use

We process your personal data only where permitted under applicable law. In most cases, this is necessary to provide the Services, facilitate the Professional Services, perform our contractual obligations, or comply with legal requirements.

Subject to applicable law, we use your personal data for the following purposes:

i. to verify your identity, register you as a user, and create and manage your account on the Platform;

ii. to provide, operate, and maintain the Services;

iii. to facilitate and enable the provision of Professional Services by independent service professionals;

iv. to analyse usage patterns, monitor trends, and personalise your experience on the Platform;

v. to improve the functionality, quality, and performance of the Services based on usage data and feedback;

vi. to respond to queries, complaints, and service requests, and to provide customer support;

vii. to track transactions and process payments in a secure manner;

viii. to communicate with you regarding your account, bookings, transactions, changes to the Services, and other service-related updates;

ix. to share relevant information and updates relating to Professional Services availed by you;

x. to send marketing, promotional, or informational communications relating to the Services, subject to your communication preferences and applicable law;

xi. to comply with applicable legal, regulatory, or statutory obligations;

xii. to administer, secure, and protect our business and the Platform, including for troubleshooting, internal audits, data analysis, system testing, and fraud prevention;

xiii. to improve our business operations, offerings, and service delivery models;

xiv. to perform and enforce our obligations and rights under the Terms or any other agreements entered into with you;

xv. to enforce the Terms, this Policy, and other platform policies; and

xvi. to respond to legal process, court orders, or governmental requests, and to establish, exercise, or defend legal rights.

(b) Communications and Contact

By creating an account on the Platform and using the Services, you acknowledge and consent to being contacted by us, our service professionals, affiliates, or authorised partners through email, telephone, SMS, in-app notifications, or other electronic means, strictly for purposes connected with the provision of the Services, facilitation of Professional Services, service updates, and related communications.

(c) Information Sharing to Enable Services

You acknowledge that, to enable the provision of the Services and Professional Services, we may collect, compile, and share information relating to you including information provided directly by you or generated through your use of the Platform with relevant third parties.

Such disclosures may include sharing information with service professionals, vendors, payment processors, cloud and storage providers, data analytics partners, consultants, auditors, legal advisors, and other service providers engaged by us, as well as entities within the Company’s corporate group, strictly on a need-to-know basis and for lawful purposes.

All such sharing is undertaken subject to appropriate contractual and confidentiality safeguards, where required under applicable law.

(d) Disclosures Required by Law

We may disclose your personal data without prior consent where such disclosure is required under applicable law, or pursuant to an order, direction, or request from a court, regulatory authority, law enforcement agency, or government body.

Such disclosures shall be made in good faith and in the reasonable belief that such action is necessary to comply with legal obligations, enforce this Policy or the Terms, or protect the rights, safety, or interests of the Company, users, or the public.

5. COOKIES

(a) What are Cookies

Cookies are small text files that are placed on your device by a website or its service providers through your web browser, subject to your browser settings.

Cookies enable the website or service provider systems to recognise your browser, store certain information, and remember preferences over time.

(b) Use of Cookies

We use cookies and similar technologies to distinguish you from other users of the Platform and to enhance your overall experience.

In particular, cookies help us to remember your preferences and settings for future visits; understand how users interact with the Platform; analyse usage trends and traffic patterns; improve the performance, functionality, and security of the Platform; and deliver relevant content and advertisements, where permitted by applicable law.

We may engage third-party service providers to assist us in analysing user behaviour and improving the Platform.

Such service providers are authorised to process information collected on our behalf solely for these purposes and are contractually restricted from using such information for any independent purpose.

(c) Third-Party Cookies

Certain pages or features of the Platform may contain cookies or similar tracking technologies placed by third parties.

We do not control the placement or use of such third-party cookies and are not responsible for their privacy practices.

We encourage you to review the privacy and cookie policies of such third parties before interacting with their services.

(e) Personal Correspondence

If you send us personal correspondence, such as emails or messages, or if third parties send us correspondence relating to your activities on the Platform, we may collect and retain such information as part of our records for customer support, compliance, and operational purposes.

6. DISCLOSURES OF YOUR PERSONAL DATA

a) Categories of Recipients

We may disclose or share your personal data with the following categories of recipients, strictly for the purposes described in Section 4 (Purpose of Collection and Use) and in accordance with applicable law:

(i) Service professionals engaged through the Platform, to the extent reasonably necessary to enable them to provide you with the Professional Services requested by you.

(ii) Internal third parties, including other companies within the group of companies, for legitimate business purposes such as internal administration, operational support, compliance, analytics, and improvement of our Services, subject to appropriate safeguards.

(iii) External third parties such as:

Service providers and business partners, such as trusted third parties, associate partners, vendors, consultants, and contractors who perform services for us or on our behalf. These services may include hosting and operating the Platform, providing technical or customer support, payment processing, transaction facilitation, marketing assistance, data analysis, and other operational functions necessary for delivering the Services;

Analytics providers and advertising partners who assist us in understanding user behaviour, measuring performance, and improving the Platform. Such entities may use cookies and similar technologies in accordance with their own privacy policies and applicable law;

Other registered users of the Platform, where such disclosure is initiated by you, necessary for the performance of the Services, or made pursuant to your express consent; and

Regulatory, statutory, governmental, or judicial authorities, where disclosure is required under applicable law, regulation, legal process, or enforceable governmental request, or where necessary to protect our legal rights, prevent fraud, or ensure compliance with legal obligations.

b) Third-Party Obligations

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

7. YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA

(a) Access, Review, and Correction

You represent and warrant that all personal data provided by you to us is accurate, complete, and up to date.

Where you use our Services, we make reasonable efforts to provide you with the ability to access, review, and correct personal data that is inaccurate or incomplete, subject to applicable law and any statutory or contractual limitations.

You may request a copy of your personal data held by the Company by writing to us at info@blyss.net.in.

We shall respond to such requests within 7 (seven) working days, or such other period as may be prescribed under applicable law, after verifying your identity and the validity of the request.

(b) Opt-out of Marketing Communications

Where we send you marketing or promotional communications by email or other electronic means, we provide you with the option to opt out of receiving such communications by following the unsubscribe or opt-out instructions contained in those messages.

You acknowledge and agree that it may take up to 10 (ten) business days for your opt-out request to be fully processed.

Notwithstanding the foregoing, we may continue to send you non-promotional communications that are necessary for the administration of your account, the provision of the Services, or to comply with legal or regulatory obligations.

8. DELETION OF ACCOUNT AND PERSONAL DATA

Subject to applicable law and notwithstanding anything contained in the Terms, you may request deletion of your user account and the personal data associated with it by writing to info@blyss.net.in.

Upon receipt of a valid request and after verification, the Company shall process such request within 7 (seven) working days, or within such additional time as may be permitted under applicable law.

Upon deletion of your account, your access to the Platform and all Services shall stand terminated, and you acknowledge that you may no longer be able to access any data, content, or Services associated with such account.

For the avoidance of doubt, the Company may retain certain categories of personal data and transactional records, including but not limited to payment information, invoices, communications, and logs, to the extent required or permitted under applicable law, for compliance with legal, regulatory, accounting, audit, dispute resolution, or enforcement obligations, or for the establishment, exercise, or defence of legal claims.

9. TRANSFERS OF YOUR PERSONAL DATA

We comply with applicable laws in relation to the storage, processing, and transfer of personal data.

In connection with your use of the Services, the personal data that we collect from you may be transferred to, stored in, or processed in jurisdictions other than the jurisdiction in which you reside.

Such transfers may occur where our servers, cloud infrastructure, affiliates, vendors, partners, or service providers are located outside your country of residence.

Where personal data is transferred outside India or your jurisdiction, the Company ensures that such transfers are undertaken in accordance with applicable data protection laws and subject to appropriate safeguards, including contractual protections, confidentiality obligations, and security standards designed to protect your personal data.

By accessing or using the Platform and/or submitting your personal data to us, you expressly consent to the transfer, storage, and processing of your personal data in jurisdictions outside your country of residence, as described in this Policy.

You acknowledge that such jurisdictions may have data protection laws that are different from those of your home country; however, we will take reasonable steps to ensure that your personal data is treated securely and in accordance with this Policy and applicable law.

10. DATA SECURITY

(a) Security Measures

We implement appropriate security measures and privacy-protective features on our Platform including encryption, password protection, call masking, and physical security measures to protect your personal data from unauthorised access and disclosure, and follow standards prescribed by applicable law.

(b) User Responsibility

Where you have chosen a password that enables you to access certain parts of the Services or Professional Services, you are responsible for keeping this password secret and confidential.

We will not be responsible for any unauthorised use of your information, or for any lost, stolen, or compromised passwords, or for any activity on your user account due to such unauthorised disclosure of your password.

In the event your password has been compromised in any manner whatsoever, you should promptly notify us to enable us to initiate a change of password.

11. DATA RETENTION

a) Retention Period

You acknowledge and agree that we will retain your personal data only for such period as is reasonably necessary to fulfil the purposes for which it was collected, including the provision of the Services and Professional Services, compliance with our contractual obligations, resolution of disputes, enforcement of our legal rights, and compliance with applicable laws, regulations, or lawful requests from competent authorities.

Upon deletion or termination of your account, we may retain certain categories of personal data for a reasonable period thereafter, to the extent required or permitted under applicable law, including for accounting, audit, tax, regulatory, or legal compliance purposes.

Once such retention is no longer required, we will securely delete, anonymise, or de-identify such personal data in accordance with applicable law and our internal retention policies.

b) Anonymised and Aggregated Data

In certain circumstances, we may convert your personal data into anonymised or aggregated data such that it can no longer be used to identify you.

Such anonymised or aggregated data does not constitute personal data under applicable law and may be retained and used by us for research, analytics, business intelligence, statistical, or operational purposes for an indefinite period, without further notice or obligation to you.

12. BUSINESS TRANSITIONS

You acknowledge that in the event of any business reorganisation, restructuring, merger, amalgamation, demerger, acquisition, sale, transfer, or disposal of all or a portion of our business or assets, your personal data may be transferred to, disclosed to, or acquired by a successor entity, acquirer, or third party as part of such transaction.

In such circumstances, we will ensure that the recipient of your personal data is bound by obligations that are substantially similar to those set out in this Policy or otherwise required under applicable law, and that your personal data continues to be processed in a manner consistent with this Policy.

13. USER GENERATED CONTENT

The Platform may allow you to upload, post, or otherwise make available content, including comments, feedback, reviews, photographs, videos, or other information (“User-Generated Content”).

You understand and acknowledge that any User-Generated Content that you choose to make public on the Platform may be accessible to other users and members of the public and may be viewed, shared, or copied by third parties.

We do not control how third parties may use User-Generated Content once it is made public and cannot guarantee that such content will not be misused in a manner inconsistent with this Policy or your expectations of privacy.

To the fullest extent permitted under applicable law, we disclaim all liability in relation to any unauthorised use, disclosure, or misuse of User-Generated Content by third parties.

You represent and warrant that any User-Generated Content uploaded, posted, or shared by you complies with all applicable laws and does not infringe the rights of any third party.

You understand and agree that you shall be solely responsible for all content shared by you on the Platform and for any consequences arising from such sharing.

14. UPDATES TO THIS POLICY

We may update or modify this Privacy Policy from time to time to reflect changes in our practices, Services, legal or regulatory requirements, or for other operational reasons.

The revised Policy will be made available on the Platform and/or communicated to you through reasonable means, including via email, where required by applicable law.

To the extent permitted under applicable law, your continued access to or use of the Platform or Services after the revised Policy becomes effective shall constitute your acceptance of the updated Policy.

We encourage you to periodically review this Policy to stay informed about how we collect, use, and protect your personal data.

15. GRIEVANCE OFFICER

If you have any questions, concerns, complaints, or grievances regarding this Policy or the processing of your personal data, you may contact us using the details provided below.

We will make reasonable efforts to acknowledge and resolve your grievance within the timelines prescribed under applicable law.

Email: grievanceofficer@blyssworld.com

© Blyss Infinitaas Limited. All rights reserved.