1. Who We Are

SampEasy is a product sampling platform operated by Veritus Ventures OPC Private Limited (“we,” “us,” or “our”), a company incorporated in India. We operate the website sampeasy.com and provide QR-gated product sampling services to brands at premium gym venues.

For data-related enquiries, contact us at founder@sampeasy.com

2. Data We Collect

We collect the following categories of personal data:

Brand Contact Data: Name, email address, company name, and message content submitted via our contact form.
Consumer Sampling Data: Name, phone number, and age group of gym members who receive product samples via QR scan at our kiosks. This data is collected with explicit opt-in consent at point of receipt.
Usage Data: IP address, browser type, pages visited, and other analytics data collected automatically when you visit sampeasy.com.

3. How We Use Your Data

To respond to enquiries submitted via the contact form
To fulfil product sampling campaigns on behalf of brand partners
To deliver verified consumer lead data (CSV) to the brand that commissioned the campaign
To send automated post-sampling SMS messages to consumers on Tier 2 and Tier 3 campaigns (consumers opt in at point of scan)
To improve our platform and services

4. Legal Basis (DPDP Act 2023)

We process personal data under the Digital Personal Data Protection Act, 2023 (India). Our lawful bases are:

Consent: Consumer sampling data is collected with explicit, informed consent at point of sample.
Legitimate Interest: Brand contact data is processed to respond to your commercial enquiry.

5. Data Sharing

We share consumer sampling data (name, phone, age) with the brand partner that commissioned the specific sampling campaign — this is the primary purpose for which consent was obtained.

We do not sell personal data to third parties. We may share data with service providers who assist in operating our platform (SMS delivery, cloud infrastructure), subject to data processing agreements.

6. Data Retention

Consumer sampling data is retained for 90 days from the campaign date, after which it is securely deleted. Brand contact data is retained for as long as a commercial relationship exists, plus 12 months thereafter.

7. Your Rights

Under the DPDP Act 2023, you have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Request erasure of your personal data
Withdraw consent at any time (for consent-based processing)
Nominate a person to exercise rights on your behalf

To exercise any of these rights, email founder@sampeasy.com

8. Cookies

We use essential cookies required for the website to function. We may use analytics cookies to understand how visitors use our site. You can control cookies through your browser settings.

9. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, or destruction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, contact our Data Fiduciary at:
Veritus Ventures OPC Private Limited
admin@veritusventures.in
sampeasy.com