Privacy Policy

The enquiry form on this website asks for your name, email address, mobile number and a message, and optionally your event date and location. Nothing else on this marketing site collects personal information, and no account is needed to use it.

If you go on to book the Studio, we additionally hold the details needed to quote, contract, invoice and deliver: the event schedule and venue, billing details for a GST-compliant invoice, the names and contact details you nominate for coordination, any documents you choose to upload to your booking, and the sign-in details for your client portal account.

We do not collect or store your payment details. When you pay an invoice, you are handed to the payment gateway's own secure page, and your card number, CVV and UPI PIN are entered there and never reach the Studio. What comes back to us is confirmation that a payment succeeded, the amount, and a masked reference such as the last four digits of a card.

You are not required to give us anything beyond what is needed to answer your enquiry or perform the contract. If you would rather not use the form, the Studio's email address and phone number are published on this site.

To reply to your enquiry, prepare a quotation, and discuss dates and requirements. An enquiry automatically opens a record in the Studio's internal system so that it is followed up rather than lost.

To perform a booking: issuing quotations, contracts, invoices and receipts, coordinating on the day, and delivering the finished photographs.

To keep the accounting and tax records a business is required by law to keep.

We do not use your information to build advertising profiles, we do not sell it, and we do not share it with advertising networks.

When you submit the enquiry form, the Studio sends you an acknowledgement by email and by WhatsApp to the address and number you provided, so that you know the enquiry arrived. Replying is not required.

Booked clients receive transactional messages tied to the engagement: quotation and contract links, the one-time code used to sign a contract, invoices with their payment links, payment receipts and delivery notices. These are part of performing the contract rather than marketing, and they stop when the engagement ends.

The Studio does not run a newsletter or send promotional campaigns from this website. If that ever changes, it will be a separate opt-in and not a consequence of having enquired.

This marketing website sets no cookies of its own and does not use advertising or tracking cookies. There is no consent banner because there is nothing to consent to.

Page views are counted using a privacy-preserving analytics service that is cookieless and does not build a cross-site profile of you. It records aggregate figures such as which pages were viewed and roughly where in the world the request came from. No custom events are recorded and no analytics are collected on individual visitors.

The enquiry form is protected by a bot-check service, which runs a challenge in your browser to confirm a person is submitting the form. It receives your IP address for that check.

Two places do set a cookie, and both are strictly functional: the client portal, once you sign in to view your bookings and invoices, and the Studio's private staff administration application. Each stores only a session token that keeps you signed in. Neither is used for tracking, advertising or analytics, and neither follows you to other websites.

Paying an invoice takes you to the payment gateway's own page, which sets its own cookies under its own privacy policy — necessarily, since that is how it keeps a payment session secure.

The Studio uses a small number of service providers to run the business. Each processes information only to provide its service to the Studio, under contract, and none is permitted to use it for its own purposes:

Payment gateways — Razorpay and PhonePe. These process your payments and are the only parties that see your card or UPI credentials. To take a payment they receive your name, email address, mobile number, the amount and the invoice reference. Both are PCI-DSS compliant providers regulated in India, and each handles that data under its own privacy policy as well as its contract with the Studio.

A managed database service, which stores the Studio's records; cloud object storage, which holds website imagery in a public store and client documents and delivered photographs in a separate private store; an email delivery service, for transactional email; a WhatsApp business messaging provider, for the messages described above; a bot-protection service, for the enquiry form; a website hosting and analytics provider; and a sign-in provider used only by the Studio's own staff, never by clients or visitors.

Beyond these, we disclose personal information only where the law requires it, or to the Studio's accountants and legal advisers where necessary. Some of these providers operate outside India, so information may be processed outside India under appropriate safeguards.

Delivered galleries, uploaded documents and client photographs are held in a private store and are served only through short-lived links that expire. They are not indexed by search engines and are not publicly browsable.

Whether the Studio may show your photographs in its portfolio, on social media or in competition entries is decided by your signed contract, not by this policy. If your contract restricts that use, the Studio honours it. You may also ask the Studio at any time to withdraw a specific image from public display, and we will do so.

Enquiries that do not lead to a booking are kept while there is a realistic prospect of the conversation resuming, and are then deleted on request or in the ordinary course.

Records relating to a booking — contracts, invoices, receipts, payment and refund records, and the accounting entries behind them — are kept for as long as the law requires business and tax records to be retained, and are then deleted. Payment records in particular cannot be deleted on request while that period is running, because keeping them is a legal obligation rather than a choice.

Delivered photographs are kept as archive material unless you ask us to delete them, subject to any archival period stated in your contract.

You may ask the Studio for a copy of the personal information it holds about you, ask for inaccurate details to be corrected, ask for information to be deleted where it is no longer needed for the purposes above or for a legal obligation, and withdraw a consent you previously gave.

To exercise any of these, email the Studio at the address at the foot of this page. We will respond within a reasonable period. There is no charge.

If you are not satisfied with how the Studio has handled your information or your request, you may raise a grievance with the Studio using the same address, and you may escalate to the relevant data protection authority.

Access to client records is limited to Studio staff who need it, each with their own account and permissions. Private files are stored separately from public website media and are reachable only through expiring links. Traffic to this site, to the client portal and to the Studio's systems is encrypted in transit.

Because payments are taken on the gateway's own page, your card and UPI credentials never enter the Studio's systems and cannot be exposed by a breach of them.

No system is perfectly secure. If a breach affecting your personal information occurs, the Studio will notify you and the relevant authority as required by law.

The Studio's services are offered to adults, and this website is not directed at children. Where children appear in commissioned photographs, the Studio acts on the instructions of the commissioning adult and on the terms of the signed contract.

This policy may be updated as the Studio's practices or the law change. The effective date and the last-updated date at the top of this page always reflect the version you are reading. Material changes affecting existing clients will be notified directly.