Privacy & your data

What we collect, why we collect it, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023.

Last updated 18 September 2026 · Applies to LaariLaara and laarilaara.com

1. Who we are

LaariLaara is a matrimony platform operated from India. For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the Data Fiduciary for the personal data described on this page, and you are the Data Principal.

Registered entity name, CIN and registered office address are published here once incorporation details are finalised. Until then, all notices and requests may be sent to the contacts in section 10.

2. What personal data we collect

We collect only what the service needs. Most of it is data you enter yourself and can edit or remove at any time.

CategoryExamplesProvided by
Account dataName, email address, phone number, password hash, gender, login and session recordsYou, at sign-up
Profile dataDate of birth, height, marital status, community, religious practice, languages, education, employment, family details, written bio and headlineYou, as you build your profile
Partner preferencesPreferred age and height range, marital status, community, language and education preferencesYou
Photographs and documentsProfile photos, and any identity, education, employment or income documents you submit for verificationYou
Activity dataProfiles you viewed, shortlisted, hid or reported; interests sent and received; matchesGenerated by your use of the service
CommunicationsMessages exchanged with other members, and support correspondence with usYou and the members you speak with
Technical dataIP address, device and browser information, and security/audit logsCollected automatically

We do not knowingly collect personal data from anyone under 18. The service is intended only for adults of legal marriageable age in India.

3. Why we process it, and on what basis

Under section 4 of the DPDP Act we process personal data either with your consent or for a certain legitimate use. The purposes are:

PurposeBasis
Creating and operating your account and profileConsent, given at sign-up
Showing your profile to potential matches and showing you theirsConsent, and your own visibility settings
Verifying identity, education, employment or income claims you choose to makeConsent, given when you submit each document
Reviewing photographs and messages to keep the community safe and matrimony-focusedLegitimate use — preventing misuse and ensuring the safety of members
Optional AI assistance, such as drafting a bio or interpreting a searchConsent, given each time you use the feature
Sending you service notifications about interests, matches and messagesConsent, adjustable in your notification settings
Security, fraud prevention, audit logging and responding to legal processLegitimate use and compliance with law

4. Who your data is shared with

Other members. Your profile, within the visibility settings you choose, is shown to other members. Photographs follow the per-photo visibility you set: everyone, members only, or connections only.

Profile managers. If a family member manages your profile, they see what their assigned permissions allow.

Data Processors. We engage service providers under contract who process data only on our instructions — cloud hosting and storage, email and messaging delivery, and content-safety review of photographs and messages.

We do not sell personal data, and we do not share it with advertisers.

5. Where your data is stored

Data is hosted on cloud infrastructure. Some processors may handle data outside India; where that happens it is subject to contractual safeguards and to any restrictions the Central Government notifies under section 16 of the DPDP Act. The list of countries and processors is kept current and available on request.

6. How long we keep it

Section 8(7) of the DPDP Act requires erasure once the purpose is no longer served. Our schedule:

DataRetained for
Account and profile dataWhile your account is active. Erased after account closure, subject to the exceptions below.
Photographs and verification documentsVerification documents are erased once a decision is recorded. Photographs are erased with the account.
MessagesWhile the conversation exists. Erased when either participant's account is erased.
Safety, moderation and audit recordsRetained after closure where necessary to protect other members or to comply with law.
Records required by lawFor the period the applicable law prescribes.

7. Your rights as a Data Principal

Chapter III of the DPDP Act gives you the following rights:

  • Access (s.11) — a summary of the personal data we hold about you, how it is processed, and who it has been shared with.
  • Correction and erasure (s.12) — correct inaccurate or incomplete data, complete it, update it, or have it erased.
  • Grievance redressal (s.13) — a route to raise a complaint with us before approaching the Data Protection Board of India.
  • Nomination (s.14) — nominate someone to exercise these rights on your behalf in the event of death or incapacity.
  • Withdraw consent (s.6(4)) — as easily as you gave it. Withdrawal does not affect processing already carried out.

Most of this is self-service: profile data is editable in your account, and export and erasure requests can be raised from your account settings. Anything else, write to the contacts in section 10. We respond within the period prescribed by the DPDP Rules.

8. Your responsibilities

Section 15 of the DPDP Act asks Data Principals not to impersonate anyone, not to suppress material information, not to register false or frivolous grievances, and to provide only authentic information. On a matrimony platform this matters more than most: other families rely on what you state about yourself.

9. How we protect it

We apply reasonable security safeguards as required by section 8(5): encryption of data in transit, access controls and audit logging on administrative actions, time-limited signed URLs for photographs and documents rather than public links, and least-privilege access for our own staff.

In the event of a personal data breach we will notify each affected Data Principal and the Data Protection Board of India in the manner and within the timelines prescribed.

10. Contact and grievances

Data Protection / Grievance Officer
Email: privacy@laarilaara.com
Postal address: published alongside our registered entity details.

If you are not satisfied with our response, you may complain to the Data Protection Board of India under section 13(3) of the DPDP Act.

For anything else, including account and safety questions, write to support@laarilaara.com.

11. Changes to this notice

If we change how we handle personal data we will update this page and, where the change is material, notify you directly before it takes effect.

This notice is provided for transparency and is not legal advice. It will be reviewed against the final DPDP Rules before the service opens to the public.