DINGG, Privacy Policy

Last updated: 14 November 2026

1. Introduction

Vrienden Tech Private Limited ("Company," "we," "us," or "our") operates the DINGG platform, a B2B SaaS solution that empowers salons, spas, and beauty businesses ("Business Partners") to manage appointments, customer relationships, marketing, and operations. The DINGG platform includes the DINGG Vendor application (used by Business Partners), the DINGG consumer-facing application, and the DINGG website (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and protect personal information in the context of our Service. It applies to three categories of individuals:

Business Partners: Salon owners, managers, and staff who directly register for and use the DINGG platform.

End Consumers: Customers of our Business Partners whose data is processed through the DINGG platform on behalf of the respective Business Partner.

Website visitors and partners: People who visit dingg.app, ask for a demo, a call back or a quote, sign up for our newsletter, chat with us, or take part in our Partner Program. DINGG decides how this information is used.

⚠️ Important: Understanding Your Relationship with DINGG

If you are an end consumer (e.g., a customer booking an appointment at a salon), your primary relationship is with the salon or spa you visit, not with DINGG directly. The salon/spa is the data controller for your personal information and determines how your data is collected and used. DINGG acts as a data processor, handling your data on behalf of and under the instructions of the business you interact with.

For questions about how a specific business uses your data, please contact that business directly. For questions about how DINGG processes data as a platform, contact us using the details in Section 14.

By using the Service (as a Business Partner) or by interacting with a business that uses DINGG (as an end consumer), you acknowledge the practices described in this Privacy Policy. This acknowledgement is not consent: where we need your consent, we ask for it separately.

For people in India, this policy is also our notice under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP Act"), and our privacy policy under the Information Technology Act, 2000 and its rules. In the DPDP Act's terms, a data controller is a "Data Fiduciary", a data processor is a "Data Processor", and you are the "Data Principal" whose personal data is processed.

If you are in the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, Oman or Kuwait, section 10B sets out the extra information and rights your country's law gives you. If you are in the United States, see section 10C.

2. Our Role: Data Controller vs. Data Processor

DINGG operates in a dual capacity depending on the context of data processing.

When a business signs up for DINGG, we (Vrienden Tech) act as the data controller for the business owner's and staff's personal information. We determine how and why this data is processed.

When you visit dingg.app, ask for a demo, chat with us or join our Partner Program, we (Vrienden Tech) are the data controller (Data Fiduciary) for your information.

When an end consumer books an appointment or interacts with a salon that uses DINGG, the salon or spa is the data controller for that consumer's personal data. DINGG acts as a data processor, handling the consumer's information strictly on behalf of and under the instructions of the business.

Similarly, when consumers receive SMS messages, appointment reminders, or notifications from a salon through the DINGG platform, the Business Partner remains the data controller for the consumer's contact information, and DINGG processes it solely to deliver those communications on their behalf.

When DINGG uses aggregated and anonymized usage data for platform analytics and improvement, we act as the data controller for that anonymized data, which is not linked to any identifiable individual.

2.1 When DINGG Acts as Data Controller

We are the data controller for information collected directly from our Business Partners during account registration, platform usage, billing, and communications, and for information collected from website visitors and Partner Program members (sections 3.4 and 3.5). We determine the purposes and means of processing this data.

2.2 When DINGG Acts as Data Processor

When Business Partners use the DINGG platform to manage their end consumers' data (appointments, contact details, preferences, purchase history, etc.), DINGG processes this data on behalf of the Business Partner. The Business Partner remains the data controller and is responsible for ensuring it has a lawful basis (for example, consent, or another basis the applicable law allows, such as a legitimate use under India's DPDP Act) to collect and process its customers' information through DINGG.

DINGG processes end-consumer data strictly in accordance with our Business Partners' instructions and the terms of our Data Processing Agreement (DPA).

3. Information We Collect

3.1 From Business Partners (B2B, Direct Collection)

When a salon, spa, or beauty business registers for and uses the DINGG platform, we collect:

Business registration details: business name, address, GST/tax identification, business category

Account holder information: name, email, phone number, role/designation

Staff information: names, roles, work schedules, service specializations (as entered by the Business Partner)

Billing and payment information: invoices, subscription details, payment method data (processed via secure third-party payment gateways)

Platform usage data: features used, configuration preferences, login activity, support tickets

Service catalog: services offered, pricing, duration, and associated staff assignments

3.2 From End Consumers (B2C, Processed on Behalf of Business Partners)

When end consumers interact with a business that uses DINGG (e.g., booking an appointment, receiving notifications, or completing a transaction), the following data may be processed through our platform:

Contact information: name, phone number, email address (as provided to the business)

Appointment details: booking date/time, services selected, staff preferences, booking history

Transaction records: payment amounts, invoices, loyalty points, membership details

Communication logs: appointment reminders, promotional messages, and feedback sent via DINGG on behalf of the business

Preferences and notes: service preferences, special requests, and notes added by the business staff

Note for End Consumers: DINGG does not independently collect your data. All end-consumer data is provided to us by, or generated through your interactions with, the specific salon or spa you visit. We process this data solely to provide our services to the business.

3.3 Automatically Collected Technical Data

For all users of our applications and website, we may automatically collect:

Device information: type, model, operating system, unique device identifiers

Network data: IP address, browser type, mobile network information

Usage analytics: pages visited, features accessed, time spent, interaction patterns

Log data: error reports, crash diagnostics, performance metrics

Approximate location based on IP address (precise GPS location only with explicit consent)

3.4 From Website Visitors and Demo Requests

When you ask for a demo, a call back, a quote or information on dingg.app, we collect what you type in the form. The fields we ask for are needed to arrange what you asked for; the marketing box is optional.

Contact details: your name and mobile number, and, on forms that ask for it (including our US form), your email address.

Business details: business name, city, type of business, number of branches or locations and team size. On our US form, also the software you use now, your monthly software bill (optional), the product you are interested in, and whether you want a demo or an emailed quote.

Your marketing choice: whether you ticked the optional box to receive product news and offers. The box is never ticked for you.

Your cookie choice: whether you allowed Analytics and Marketing cookies, when, and which version of this notice you saw.

Technical details sent with the form: your IP address, browser type, the page you sent the form from, the time, and the result of a Google reCAPTCHA check, so we can stop spam and keep a record of your request.

Campaign details: the campaign tags and any advert click identifier in the web address of the page you sent the form from (for example utm_source=google, or a Google or Meta click ID), so we know which campaigns and adverts bring enquiries. We keep them with your enquiry whatever your cookie choice. The record of the campaign that first brought you to the site, which we keep on your device, is kept only if you allowed Marketing cookies.

Newsletter: if you sign up for our newsletter, your email address and the date you confirmed it. We email you a link to confirm before we add you.

Chat, WhatsApp and calls: what you write to us in the website chat (CORA) or on WhatsApp, and our notes of calls with you. If you sent a form first, the chat is linked to the name, email and mobile number you gave, so we do not ask again.

Taps on WhatsApp, chat and call buttons: when you tap one of these buttons on our website, we record the tap with your IP address, browser, the page (with any campaign details in its web address) and the chat service's visitor code, so that a WhatsApp or chat enquiry can be linked to the page and campaign that brought you. We do this whatever your cookie choice and keep these records for 120 days.

DINGG is the Data Fiduciary (data controller) for this information.

3.5 Partner Program (Refer & Earn and Resellers)

If you refer a business or register as a partner, we collect your name, mobile number and email address, the details of the business you refer (business name, the owner's or manager's name and mobile number, and city), and the status of each referral. Before we pay a reward, we also collect your legal name, your UPI ID or Indian bank account details, your PAN and, if you are registered, your GSTIN. Bank and UPI details are sensitive personal data under Indian law, and we collect them only when you choose to give them in order to receive a payout.

If someone referred your business to us, we received your business name, your name, mobile number and city from them, after they confirmed that you agreed to be contacted. We use these details only to contact you about DINGG. If you tell us you are not interested, we stop contacting you and delete your details, keeping only what we need to avoid contacting you again.

4. How We Use Information

4.1 For Business Partners (Controller Purposes)

Providing, maintaining, and improving the DINGG platform and its features

Processing subscriptions, billing, and payments

Communicating about account status, product updates, new features, and support

Analyzing usage patterns to improve platform performance and user experience

Providing onboarding assistance, training, and customer support

Ensuring platform security, fraud prevention, and abuse detection

Complying with legal and regulatory obligations

4.2 For End-Consumer Data (Processor Purposes)

We process end-consumer data exclusively to provide our Service to Business Partners. This includes:

Facilitating appointment booking, rescheduling, and cancellations

Sending appointment reminders, confirmations, and follow-up messages on behalf of the business

Processing transactions and maintaining billing records for the business

Managing loyalty programs, memberships, and promotional campaigns as configured by the business

Generating business analytics and reports for the Business Partner (using their own customer data)

We do not use end-consumer data for our own marketing purposes or share it with other businesses. End-consumer data is siloed per Business Partner.

4.3 For Website Visitors and Demo Requests (DINGG as Data Fiduciary)

To arrange your demo, call back or quote: we use your details to contact you about what you asked for, by call, WhatsApp, SMS or email, and to prepare the demo for your business. In India, this is a use you asked for by sending the form (a legitimate use under section 7(a) of the DPDP Act), and you can tell us at any time to stop. Elsewhere, it is a step you asked us to take before a possible contract (see section 10B for the Gulf countries).

Product news and offers: only if you ticked the marketing box (your consent). You can stop them at any time, through the link in any email, by replying STOP on WhatsApp or SMS, or by writing to our Grievance Officer. We act on it promptly, and in any case within 10 working days.

Measuring our website and campaigns: we see which campaigns and adverts bring enquiries from the campaign details and advert click identifier sent with your enquiry or tap (section 3.4). Anything that uses cookies, or tells advertising platforms about you, needs the Analytics or Marketing consent you give in the cookie banner (see sections 5 and 6.2B).

Keeping our forms safe: we use your IP address, browser details and the reCAPTCHA result to block spam and abuse and to limit repeated submissions. This is part of handling the form you sent.

Newsletter: to send the newsletter you signed up for (your consent). Every newsletter has an unsubscribe link.

4.4 For the Partner Program

To record and track your referrals, contact the business you referred about DINGG (only after you confirm it agreed to be contacted), pay your rewards, deduct and report tax as the law requires, and prevent fraud. We use your bank or UPI details, PAN and GSTIN only to pay you and to meet tax and accounting law.

5. Cookies and Tracking Technologies

dingg.app asks before it uses any cookie or similar technology that is not strictly necessary, apart from the chat described below. The cookie banner offers Accept all, Reject all and Choose, with the same weight; scrolling or using the site is not consent.

Necessary (always on): the country you chose, booking sessions, and security checks such as Google reCAPTCHA that keep forms free of spam. reCAPTCHA sends Google information about your device and how you use the page; Google's Privacy Policy and Terms of Service apply to it.

Analytics (only if you allow it): how visitors use the site (pages visited, clicks, scrolling, device type, browser and approximate location), through Google Analytics, Microsoft Clarity, Inspectlet and Vercel Web Analytics and Speed Insights, and our own record of the page you first arrived on. Microsoft Clarity and Inspectlet show how pages are used through recordings of clicks, scrolling and mouse movement.

Marketing (only if you allow it): advertising and campaign measurement, through Google Ads, Meta, LinkedIn, Microsoft Bing, Gartner Digital Markets (Capterra and GetApp) and, for visitors in the United States, RB2B, and our own record of the campaign that brought you to the site. RB2B may match a visit to a public business profile, such as a LinkedIn profile. If you send a form with Marketing allowed, we also set a code that lasts 10 minutes, so that these platforms count your enquiry only once (see section 6.2B).

Chat: the chat and WhatsApp buttons are provided by CORA, a chat service by Prefero. CORA loads on every page so that the chat is ready when you need it. It keeps a visitor code on your device, with the campaign details in the web address you arrived from, so that a chat or WhatsApp conversation you start can be linked to the page and campaign that brought you. We are working with Prefero so that this campaign record waits for your Marketing choice.

Until you choose, Google Consent Mode is set to "denied" and no analytics or advertising tag loads. Your choice is kept for 12 months. You can change or withdraw it at any time from "Cookie settings" at the foot of every page; turning a category off deletes the cookies it set on dingg.app. On a salon's own booking page, only that salon's own tags load.

6. Data Sharing and Disclosure

We do not sell personal information, whether of Business Partners or end consumers.

6.1 With Business Partners (Regarding Their Customers)

Business Partners have full access to their own end-consumer data within the DINGG platform. This data is necessary for them to operate their business. DINGG does not share one Business Partner's customer data with another Business Partner.

6.2 With Service Providers

We use service providers (Data Processors) to run our operations. They include:

Website hosting: Vercel Inc.

Form and lead database: MongoDB

Sales CRM: our own CRM (DINGG ATS), which holds demo requests and referrals

Apps: cloud hosting and infrastructure providers for the DINGG apps, and push notification services

Payments: payment processing gateways

Email: Twilio SendGrid (form confirmations and team alerts), Mailchimp (newsletter) and our business email provider

SMS and calls: SMS and calling providers

Chat and WhatsApp: CORA, a chat service by Prefero, for the website chat; WhatsApp Business, by Meta, for WhatsApp messages

Spam protection: Google reCAPTCHA

Analytics and monitoring: Google Analytics, Microsoft Clarity, Inspectlet, Vercel Web Analytics and Speed Insights, and Firebase (in our apps)

Content delivery: Cloudflare, which delivers images and videos from cdn.dingg.ai and sees your IP address when it does so

Support: customer support tools

Advertising: Google Ads, Meta, LinkedIn, Microsoft Advertising, Gartner Digital Markets and RB2B, only with your Marketing consent (see section 6.2B)

Most of these providers act only on our instructions, under contracts that require them to keep personal data confidential and secure. Google (for reCAPTCHA and advertising), Meta, LinkedIn, Microsoft, Gartner Digital Markets and RB2B (for advertising) also use the data under their own privacy policies, which is why we use them only as described in sections 5 and 6.2B. On request, we will tell you which of these providers have received your personal data (section 10A).

6.2A Our US Partner, Payroc

In the United States, DINGG demos, onboarding and card payments are delivered with Payroc, DINGG's US partner. When you send our US demo form, we share your name, email, mobile number, business name, number of locations, team size, current software and monthly software bill (if you gave it) with Payroc, so that Payroc and DINGG can contact you about your demo, quote and onboarding. Payroc also handles personal data under its own privacy policy.

6.2B Advertising Platforms

If you allowed Marketing cookies when you sent a form, we tell Google and Meta that a visitor who clicked their advert asked for a demo, and later whether that enquiry became a qualified lead or a customer. We send the advert click identifier and a one-time event code, not the contents of your form, so that they can count the results of our ads.

We may also upload contact details from our records to Meta or Google, scrambled (hashed) before they leave our systems, to show our adverts to similar businesses or to avoid showing them to existing customers. For website enquiries, we do this only if you allowed Marketing cookies. You can ask us to stop at any time, and we will remove you from these lists.

6.3 Legal Requirements

We may disclose information when required by law, regulation, legal process, or government authority, or when necessary to protect the rights, safety, or property of our users, the Company, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or asset sale, personal information may be transferred. We will provide notice of any such transfer and any choices available to affected parties.

6.5 Transfers Outside India and Outside Your Country

DINGG is based in India. Your personal data is stored and processed in India and in the countries where our service providers run their servers, including the United States. If you are in a Gulf country, this means your data is transferred out of your country, to India and to those countries.

We choose providers that protect personal data under contract, and we require those that act on our instructions to keep it confidential and secure and to use it only for the services they provide to us.

We transfer personal data outside India only as the DPDP Act allows, and never to a country or territory the Government of India has restricted under section 16 of the DPDP Act.

7. Data Retention

7.1 Business Partner Data

We retain Business Partner account data for the duration of the active subscription and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. Upon account termination, data will be securely deleted or anonymized within a defined retention period, subject to applicable legal requirements.

7.2 End-Consumer Data

End-consumer data processed on behalf of Business Partners is retained for as long as the Business Partner's account is active and as instructed by the Business Partner. Upon termination of a Business Partner's account, associated end-consumer data will be deleted or anonymized in accordance with our Data Processing Agreement and applicable laws.

7.3 Technical and Analytics Data

Aggregated and anonymized analytics data may be retained indefinitely for product improvement purposes. We keep log data, and records of how we processed personal data, for as long as we need them for security and as the law requires.

7.4 Website, Demo Request and Partner Program Data

Demo, call-back and quote requests: while we are in touch with you about DINGG and for as long as we need them afterwards to follow up and to keep accurate sales records; then we delete or anonymise them. If you become a customer, section 7.1 applies.

Chat and WhatsApp conversations: for as long as we need them to answer you and to keep a record of what we told you.

Taps on WhatsApp, chat and call buttons: 120 days.

Marketing choices: while you are subscribed. After you unsubscribe, we keep your mobile number or email on a do-not-contact list so that we do not message you again, with the record of your choice as proof.

Newsletter: until you unsubscribe.

Partner Program: referral records for as long as a referral can earn a reward or be disputed, and payout and tax records for eight financial years, as Indian law requires.

Cookie choices are kept for 12 months.

If you ask us to erase your details, we do so within 30 days, unless the law requires us to keep them; we then keep only what that law requires, and only for that purpose.

8. Data Security

We implement industry-standard technical and organizational measures to protect personal information, including:

Encryption of data in transit (HTTPS)

Role-based access controls and multi-factor authentication

Regular security audits and vulnerability assessments

Secure cloud infrastructure with redundancy and disaster recovery

Contracts that require our service providers to take security safeguards

Employee and contractor confidentiality agreements and security training

Per-Business-Partner data isolation to prevent cross-tenant access

No system is entirely immune to security risks. While we strive to protect all data entrusted to us, we cannot guarantee absolute security.

8.1 If There Is a Personal Data Breach

If a breach affects your personal data, we will tell you without delay, using the contact details you gave us: what happened, what it may mean for you, what we are doing about it, what you can do to protect yourself, and whom to contact. We will report it to the Data Protection Board of India, to CERT-In and to any other regulator within the times the law sets. Where we process data for a salon, we tell the salon promptly so that it can inform its clients.

9. Rights of Business Partners

As a Business Partner, you may exercise the following rights regarding your data:

Access: Request a copy of the personal data we hold about you and your business account.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request account deletion, subject to legal and contractual retention requirements.

Data Export: Export your business data, including customer records, in a structured format.

Opt-Out: Unsubscribe from marketing communications at any time.

To exercise these rights, contact us using the details in Section 14. If you are in India, section 10A also applies; in the Gulf countries, section 10B; in the United States, section 10C.

10. Rights of End Consumers

Primary Point of Contact: Since your salon or spa (the Business Partner) is the data controller for your personal information, you should direct data-related requests, such as access, correction, or deletion, to the business you interacted with.

If you are unable to resolve your request with the business, or if you have concerns about how DINGG processes data as a platform, you may contact us directly. We will work with the relevant Business Partner to address your request.

Depending on your jurisdiction, your rights may include:

Access: Understanding what personal data is held about you.

Correction: Requesting updates to inaccurate data.

Deletion: Requesting removal of your data (subject to the Business Partner's policies and legal requirements).

Opt-Out of Communications: Opting out of promotional messages sent via DINGG (note: transactional messages like appointment confirmations may still be sent).

10A. Your Rights in India (DPDP Act)

If you are in India, you have these rights over personal data for which DINGG is the Data Fiduciary, including details you gave us by sending a form:

Access: a summary of the personal data we hold about you and what we do with it, and the names of the other Data Fiduciaries and Data Processors we have shared it with, with a description of what we shared.

Correction and erasure: to correct, complete or update your data, and to have it erased when it is no longer needed for the purpose you gave it for, unless the law requires us to keep it.

Withdraw consent: at any time, as easily as you gave it: "Cookie settings" at the foot of every page for cookies; the unsubscribe link in any email, or STOP in reply to a WhatsApp message or SMS, for marketing; or a message to our Grievance Officer for anything else. Withdrawing does not affect what was done before it. We act on it promptly, and in any case within 10 working days, and we tell our service providers to stop too.

Complain to us: write to our Grievance Officer (section 14). We answer within 30 days.

Nominate: to name a person who can exercise these rights for you if you die or become unable to. Write to our Grievance Officer with your nominee's name and contact details.

How to make a request: write to our Grievance Officer at support@dingg.app, from the mobile number or email address you used with us, or tell us that number or address so that we can find your records. We may send a one-time code to that number or address to confirm that the request is yours. We will not ask for more information than we need.

Consent Managers: you can also give, manage or withdraw your consent through a Consent Manager registered with the Data Protection Board of India.

The Data Protection Board of India: if you are not satisfied with our answer to your complaint, or we do not answer within 30 days, you may complain to the Data Protection Board of India, in the way the Board sets out on its official website.

Where a salon or spa is the Data Fiduciary for your data (section 2.2), please contact that business first; we will help it answer you.

10B. Your Rights in the Gulf Countries

If you are in the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, Oman or Kuwait, this section adds to the rest of this policy.

Who we are: Vrienden Tech Private Limited (DINGG), of Pune, India, is the controller of the personal data you give us on dingg.app. We do not have an office in your country; you can reach us through section 14 or on WhatsApp.

Arranging the demo, call back or quote you asked for: a step you asked us to take before a possible contract (and, in Saudi Arabia, also our legitimate interest in answering business enquiries). If you do not give the fields the form asks for, we cannot arrange it.

Product news and offers: your consent, given with the optional box. You can withdraw it at any time.

Analytics and Marketing cookies: your consent, given in the cookie banner.

Keeping our forms free of spam: our legitimate interest in protecting our website where your country's law allows it, and otherwise as part of handling your request.

Where your data goes: to our systems in India and to the service providers in section 6.2, including in the United States. Section 6.5 explains how we protect it. We use your data for direct marketing only if you ticked the marketing box.

How long we keep it: see section 7.4.

Your rights: you can ask us to tell you what personal data we hold about you and how we use it, to give you a copy, to correct or complete it, to delete it, to stop using it for marketing, and to withdraw any consent at any time. Depending on your country, you may also ask us to restrict or stop other processing, or to send your data to another company. Write to our Grievance Officer (section 14). We answer within 30 days.

Your regulator: if you are not satisfied with our answer, you can complain to your country's data protection authority:

United Arab Emirates: the UAE Data Office, or the authority that takes over its role.

Saudi Arabia: the Saudi Data and AI Authority (SDAIA), through the National Data Governance Platform, dgp.sdaia.gov.sa.

Qatar: the National Cyber Security Agency, privacy@ncsa.gov.qa.

Bahrain: the Personal Data Protection Authority, info@pdp.gov.bh.

Oman: the Ministry of Transport, Communications and Information Technology, mtcit.gov.om.

Kuwait: the Communication and Information Technology Regulatory Authority (CITRA), citra.gov.kw.

10C. If You Are in the United States

Notice at collection: on our US forms we collect identifiers and contact details (name, email, mobile number); business information (business name, number of locations, team size, current software and, if you give it, your monthly software bill); and internet activity (IP address, browser, the pages you visit, and the campaign and any advert click identifier that brought you to the site). We use them to arrange your demo and quote, to contact you, to keep our forms safe, to see which campaigns bring enquiries and, only if you allow Marketing cookies, to measure our advertising with the advertising platforms. We share them with Payroc (section 6.2A) and with our service providers (section 6.2), and we keep them as section 7.4 says.

Selling and sharing: we do not sell your personal information. We share it for cross-context behavioral advertising (with Google Ads, Meta, LinkedIn, Microsoft Bing, Gartner Digital Markets and RB2B) only if you allow Marketing cookies. To opt out, choose Reject all, or turn Marketing off under "Cookie settings" at the foot of any page.

Your rights: depending on the state you live in, you may have the right to know what personal information we hold about you, to get a copy, to correct or delete it, and to opt out of its sale or sharing. We will not treat you differently for using these rights. To use them, write to support@dingg.app. An authorized agent may write for you with your signed permission. We will confirm your identity before we act.

Calls, texts and email: we call and text you about your demo and quote at the number you gave, when you ask us to by sending the form. We do not make marketing calls or send marketing texts using automated technology, or AI or prerecorded voice, unless you have given your prior express written consent; that consent is never a condition of purchase. Reply STOP to any text to stop texts, and use the unsubscribe link in any email to stop marketing email.

11. Third-Party Links and Integrations

Our Service may contain links to or integrate with third-party websites, applications, or services. These third parties operate independently and have their own privacy policies. We are not responsible for their privacy practices and recommend reviewing their policies before providing any personal information.

12. Children's Privacy

The DINGG website and the DINGG Vendor application are meant for businesses, and we do not knowingly collect personal data from children. Under India's DPDP Act, a child is anyone under 18. In the United States, we do not knowingly collect personal information from anyone under 13. Elsewhere, the age your local law sets applies. If we learn that we hold a child's data without the consent of a parent or lawful guardian, we delete it.

Salons, spas and clinics that use DINGG are responsible for getting the verifiable consent of a parent or lawful guardian, where the law requires it, before they enter a child client's details, and must not use DINGG to track children or to send them targeted advertising.

If you are a parent or guardian and believe your child's information has been collected through our Service, please contact our Grievance Officer.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform capabilities.

For Business Partners, we may also notify you via email or in-app notification for significant changes. If a change affects how we use personal data you gave us with your consent, we will ask for your consent again before the change applies to you. We do not treat continued use of our website or apps as consent.

The date of the latest change is shown at the top of this policy.

14. Contact Us

For any questions, concerns or requests about this Privacy Policy or our data practices, write to our Grievance Officer (below).

Vrienden Tech Private Limited (DINGG), Office 5, Madhuban Building, Lane Number 5, Koregaon Park, Pune, Maharashtra 411001, India.

For end-consumer data requests, please contact the specific salon or spa you visited in the first instance. If further assistance is needed, reach out to us and we will coordinate with the relevant Business Partner.

We reply to every request and complaint within 30 days of receiving it, sooner where the law of your country sets a shorter time. If we need to confirm who you are, we will tell you within 7 days, and the 30 days run from when you reply.

This policy is in English. If you are in India, you can ask our Grievance Officer for it in Hindi or in any other language listed in the Eighth Schedule to the Constitution of India, and we will send it to you.

Grievance Officer (DPDP Act and Information Technology Act)

Akshay Poorey, Grievance Officer

Email: support@dingg.app

Phone: +91 74992 62543

Address: Vrienden Tech Private Limited, Office 5, Madhuban Building, Lane Number 5, Koregaon Park, Pune, Maharashtra 411001, India