Look Me Box ("we", "us") provides software that box cricket venues use to manage their boxes, bookings and cash, and a website where players can book a slot. This policy explains what personal data we collect, why we collect it, who can see it and the choices you have. It applies to the Look Me Box mobile app, our website at https://www.lookmebox.com and the services behind them.
We handle personal data in line with India's Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.
Who this policy covers
- Venue owners, staff and admins who sign in to the Look Me Box app.
- Players and customers whose booking is made at a venue, in the app or on our website.
- Visitors to our website, including anyone who sends us an enquiry.
What we collect
When you use the app (owners, staff and admins)
- Account details: your name, mobile number, role, the venues you are linked to and your language choice.
- Sign-in data: one-time login codes, the device name and platform you sign in from, and your IP address. Login codes are stored only in scrambled (hashed) form and expire after 5 minutes.
- Activity records: a log of actions such as creating or cancelling a booking and recording cash, with the time and the account that did it.
When a booking is made
- The name and mobile number of the person or team booking. The mobile number is optional when staff book at the counter.
- The venue, box, date, time and price of the booking, and the cash paid against it.
- For bookings made on our website, the IP address used.
When you contact us or visit our website
- What you send in a form: your name, mobile number, optionally your email, and your message, along with your IP address.
- Our website does not set tracking or advertising cookies. The box cricket mini game saves your best score in your own browser's local storage, and it never leaves your device.
We do not collect card or bank details, because all payments are made in cash at the venue. We do not use advertising trackers and we do not sell personal data.
Why we use it
- To create and secure your account and sign you in with a one-time code.
- To take, show, change and cancel bookings, and to record cash against them.
- To show venue owners and admins the income reports and booking history for their venues.
- To reply to enquiries and, if you asked us to, tell you when new features launch.
- To keep the service safe, for example by limiting repeated login attempts and form submissions and by looking into misuse.
- To meet our legal, tax and accounting obligations.
We rely on your consent, which you give when you sign in, make a booking or submit a form, and on the other lawful uses permitted by law, such as meeting legal obligations.
Who can see it
- Venue owners and their staff can see the bookings and customer details for their own venues. Staff only see the venue they work at, and cannot see income reports.
- Look Me Box admins can see data across venues so they can run and support the service.
- Service providers that help us run the service, such as our hosting provider and the SMS provider that delivers login codes (which receives your mobile number and the code). They may use the data only to provide their service to us.
- Government authorities, when the law requires us to share it.
When you book at a venue, that venue is responsible for any use it makes of your details beyond the booking itself, for example if it contacts you directly.
How long we keep it
- Booking and payment records are kept while the venue uses Look Me Box, and afterwards for as long as they are needed for accounting, tax and legal purposes.
- Login codes expire after 5 minutes. Sign-in sessions expire after 60 days, or earlier if you log out or your account is removed or blocked.
- Enquiries are kept for as long as we need them to respond to you and follow up, unless you ask us to delete them sooner.
- When an account is removed, we delete or anonymise its personal data unless the law requires us to keep it.
How we protect it
- Login codes and sign-in tokens are stored only in hashed form, never as plain text.
- Access depends on role: staff, venue owners and admins each see only what their role needs.
- Blocking an account ends all of its sign-in sessions immediately.
No system is completely secure. If a breach affects your personal data, we will inform you and the relevant authorities as the law requires.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to delete it, where the law does not require us to keep it;
- withdraw your consent, although this may mean we can no longer provide the service to you;
- nominate someone to exercise these rights on your behalf;
- raise a grievance with us and, if it is not resolved, with the Data Protection Board of India.
To use any of these rights, contact us using the details below. We may need to confirm your identity first. Staff and customers of a venue can also ask the venue owner to update or remove their details.
Children
The service is meant for adults and businesses. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe a child's data has been given to us, contact us and we will delete it.
Changes to this policy
We may update this policy as the service changes. When we do, we will change the "Last updated" date above, and for significant changes we will let you know in the app or on our website.
Contact and grievance officer
- Business: Look Me Box
- Grievance officer: Grievance Officer, Look Me Box
- Email: support@lookmebox.com
- Phone: 9876512345
We will acknowledge your request promptly and aim to resolve it within 30 days.