UAB "Laborix Group" ("we", "us", "our"), a Lithuanian private limited company with registered office at Aušros g. 16-2, Jakšių k., Pernaravos sen., Kėdainių r. sav., LT-58229, Lithuania, is the data controller for personal data processed through goldenticketguide.com. This Privacy Policy explains what we collect, why, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and other applicable laws (including India's Digital Personal Data Protection Act, 2023 where relevant).
1. What we collect
a. Information you give us
- Waitlist signup: your email address.
- At checkout (once launched): email, first and last name, Indian 6-digit zipcode, and your UPI Virtual Payment Address (VPA). We require these because they are mandatory parameters of the cross-border UPI payment flow.
- Support correspondence: anything you send us by email.
b. Information we receive from our payment provider
After each payment, our payment provider sends us a transaction identifier, status, amount, and a reference to the payment method used (never the full card number or UPI PIN). We never see or store sensitive payment credentials.
c. Technical information
Our hosting provider automatically logs standard request data (IP address, user agent, timestamp) for security and reliability. We do not use advertising or third-party analytics cookies on this site.
2. Why we process it (lawful bases)
- Performance of a contract (GDPR Art. 6(1)(b)): to process your purchase and deliver the Telegram invite link.
- Legal obligation (Art. 6(1)(c)): to comply with tax, invoicing, and payment-aggregation rules — including sharing transaction data with our RBI-licensed payment aggregator in India.
- Legitimate interests (Art. 6(1)(f)): to prevent fraud, keep the service running, respond to support requests, and (for the waitlist only) tell you when the bundle launches.
- Consent (Art. 6(1)(a)): where you explicitly opt in to anything beyond the above.
3. Who we share it with
We share personal data only with the specific service providers we need to run the Service, under contracts that require them to protect your data:
- Our RBI-licensed payment aggregator in India — to process your UPI payment and remit funds to us (recipient of your email, name, zipcode, VPA, and transaction details).
- Our transactional email provider — to deliver your Telegram invite link and purchase receipt (recipient of your email address and order metadata).
- Our database and hosting providers — to store order records and serve the website.
- Telegram FZ-LLC — for your use of the Channel itself, subject to Telegram's own privacy policy.
We do not sell your personal data. We do not share it with advertisers or data brokers.
4. International transfers
We are based in Lithuania (EU/EEA). Your payment data is transferred to India for processing by our payment aggregator — this is intrinsic to the Service, since the aggregator is an RBI-licensed entity operating in India. Where personal data leaves the EEA, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses or equivalent) and only share the minimum information required.
5. How long we keep it
- Waitlist email: deleted within 30 days of the bundle launch, or earlier if you ask us to.
- Order records: retained for as long as you have active access to the Channel, plus the period required by applicable accounting, tax, and anti-money-laundering law (typically 10 years in Lithuania and India).
- Support correspondence: up to 2 years from last contact.
- Server logs: up to 90 days.
6. Your rights
Under GDPR you have the right to: access your data; correct inaccurate data; erase your data (where no overriding legal basis to keep it applies); restrict or object to certain processing; receive your data in a portable format; and withdraw any consent you have given. You also have the right to lodge a complaint with a supervisory authority — in Lithuania, the State Data Protection Inspectorate (VDAI).
If you are an Indian data principal under the DPDP Act, you have equivalent rights including access, correction, erasure, and grievance redressal.
To exercise any right, email contact@goldenticketguide.com. We respond within one month.
7. Children
The Service is not directed to children under 18 and we do not knowingly collect data from minors. If you believe we have collected data from a minor, email us and we will delete it.
8. Cookies
We do not use advertising, analytics, or tracking cookies on this site. Essential cookies may be set by our hosting provider for security and to make the site function correctly.
9. Changes
We may update this Privacy Policy. The "Last updated" date at the top of the page tells you when it was last changed. Material changes will be announced in the Channel and/or by email to buyers.
10. Contact
Data controller: UAB "Laborix Group", Aušros g. 16-2, Jakšių k., Pernaravos sen., Kėdainių r. sav., LT-58229, Lithuania. Email: contact@goldenticketguide.com.