Privacy Policy

Raahi Wedding
A brand under Kirthi Kumar Photography and Films

Effective Date: May 8, 2025
Last Updated: May 8, 2025

1. Introduction

Welcome to Raahi Wedding ("we," "us," or "our"), a brand under Kirthi Kumar Photography and Films. We are committed to protecting the privacy of our clients, website visitors, and anyone whose personal information we collect in the course of providing our wedding photography and filmmaking services.

This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have over it. It is prepared in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Digital Personal Data Protection Rules, 2025, issued by the Ministry of Electronics and Information Technology (MeitY), Government of India.

By using our website or engaging our services, you acknowledge that you have read and understood this policy.

2. How We Obtain Your Consent

We collect and process your personal data only with your free, specific, informed, and unambiguous consent. Consent is obtained through one or more of the following means:

A written inquiry form or booking form on our website, which includes a clear consent checkbox before submission.
A signed service agreement or contract executed prior to your event.
A written communication (email or message) in which you voluntarily share your details and engage our services.

Consent is never bundled within general terms and conditions, nor is it obtained through pre-ticked boxes. You may withdraw your consent at any time by writing to us at the contact details in Section 15. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, but may affect our ability to deliver services that are in progress.

3. Information We Collect

3.1 Information You Provide to Us

Contact Information: Name, email address, phone number, and mailing address when you fill out an inquiry form, book our services, or contact us.
Event Details: Wedding date, venue, location, schedule, and any other details relevant to your event.
Billing Information: Payment details processed securely through our third-party payment providers. We do not store full card numbers on our servers.
Communications: Messages, emails, or other correspondence you send us, including feedback and queries.

3.2 Information We Collect Automatically

When you visit our website, we may collect:

Usage Data: Pages visited, time spent on pages, links clicked, and referring URLs.
Device & Technical Data: Browser type, operating system, IP address, and device identifiers.
Cookies: Small data files stored on your device to improve your browsing experience and understand how our site is used. See Section 7 for more details.

4. How We Use Your Information

We process your personal data only for the purposes for which it was collected. Specifically, we use it to:

Respond to your inquiries and provide our photography and filmmaking services.
Process bookings, contracts, and payments.
Deliver your photographs, films, and other agreed deliverables.
Send service-related communications such as booking confirmations, shoot reminders, and delivery notifications.
Send promotional content, newsletters, or portfolio updates — only where you have separately and explicitly consented to receive such communications.
Improve our website, services, and client experience.
Comply with applicable legal and tax obligations.

We do not use your personal data for automated decision-making or profiling.

5. Photographs and Video Content

By engaging our services, you acknowledge and agree that:

Delivery of Media: Photographs and films are delivered to you through secure digital platforms (such as password-protected gallery links). Delivery links remain active for 90 days from the date of delivery, after which access may expire. You are responsible for downloading and backing up your files within this period.
Portfolio Use: Unless you explicitly opt out in writing before your event date, we may use a curated selection of images or footage for our portfolio, website, social media channels, and promotional materials. We exercise discretion in the images selected and do not share images that are sensitive or unflattering in nature.
Guests and Third Parties: Photographs featuring wedding guests or third parties will be used for portfolio purposes only in a manner that is respectful and contextually appropriate. Where images prominently feature identifiable individuals other than the primary couple, we will seek specific consent or avoid such use.
Opt-Out: You may request that your images not be used for any promotional purposes by notifying us in writing prior to your event, or at any time thereafter. Requests made after images have already been published will be acted upon within 30 days, subject to platform-specific removal timelines.

6. Sharing of Your Information

We do not sell, rent, or trade your personal information. We may share it in the following limited circumstances:

Service Providers (Data Processors): We engage trusted third parties to support our operations, including cloud storage platforms, file delivery services, payment gateways, and email communication tools. These processors are contractually bound to handle your data only as instructed by us and in compliance with applicable data protection laws. They are not permitted to use your data for their own purposes.
Legal Requirements: We may disclose your information when required to do so by law, court order, or a competent governmental or regulatory authority.
Business Transfers: In the unlikely event of a merger, acquisition, or transfer of our business, your personal data may be transferred as part of that transaction. We will notify you in advance where required by law.

6.1 International Data Transfers

Some of our service providers (such as cloud storage or gallery delivery platforms) may process or store data on servers located outside India. Where such transfers occur, we ensure that:

The transfer is to a country or territory not restricted by the Government of India under the DPDPA.
Adequate contractual protections are in place, including data processing agreements that bind the recipient to standards consistent with Indian data protection law.
Personal data transferred internationally is limited to what is strictly necessary for the purpose.

7. Cookies and Tracking

Our website may use cookies and similar tracking technologies to:

Remember your preferences and browsing session.
Analyse website traffic and usage patterns (e.g., via Google Analytics).
Support embedded content from third-party platforms (e.g., Instagram feeds, YouTube reels).

Cookies placed by third-party tools are governed by the privacy policies of those respective platforms. You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

8. Our Website Platform — Wix

Our website is built and hosted on Wix.com (Wix.com Ltd., headquartered in Tel Aviv, Israel). In the context of your data, our roles are as follows:

We (Kirthi Kumar Photography and Films / Raahi Wedding) are the Data Fiduciary / Controller — we determine the purposes and means of processing your personal data.
Wix acts as our Data Processor — they process data on our behalf solely to provide us with website and hosting services, under a Data Processing Agreement.

8.1 Data Wix Collects Automatically

When you visit our website, Wix may automatically collect certain technical information independent of our contact forms or bookings. This includes:

IP address and approximate geographic location.
Browser type, device type, and operating system.
Pages visited, session duration, and navigation paths.
Referring URLs and search terms.

This data is collected by Wix's infrastructure and analytics systems to operate the platform. For full details on how Wix handles this data, please review the Wix Privacy Policy.

8.2 Third-Party Apps and Integrations

Our Wix site may use third-party tools and embedded services such as Google Analytics, Instagram feeds, or contact form integrations. Data collected by these third-party services operates under their own privacy policies and is not automatically included in data export or deletion requests processed through Wix. If you submit a data access or deletion request to us, we will also contact any relevant third-party services on your behalf to fulfil the request in full.

8.3 Limitation of Data Deletion via Wix

When we process a deletion request using Wix's built-in tools, please note that:

Data submitted through custom-coded elements or third-party apps on our site may not be automatically erased.
We take responsibility for identifying and deleting any such residual data manually, and will confirm completion to you in writing.

8.4 Cookie Consent on Our Site

Our Wix website displays a cookie consent banner on your first visit, giving you the ability to accept or decline non-essential cookies before any such cookies are set. You may update your cookie preferences at any time through the banner or your browser settings.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law.

The following specific retention timelines apply:

Type of Data Retention Period

Client contact and booking details 5 years from the date of the event
Payment and billing records 7 years (as required under Indian tax law)
Email and written communications 3 years from the date of last communication
Raw/edited photographs and films (our working copies)12 months from the date of final delivery
Website usage data and cookies as set by the respective platform (typically 12–26 months)
Marketing consent records until consent is withdrawn, plus 1 year
Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data. You may also request early deletion of your data under the rights described in Section 12.

10. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, alteration, or disclosure. Our security practices include:

Encrypted storage of client files on password-protected platforms.
Access controls limiting data access to authorised personnel only.
Secure transmission of files via HTTPS-enabled platforms.
Regular review of our data-handling practices and third-party service providers.

While we take every reasonable precaution, no method of data transmission or storage over the internet can be guaranteed to be fully secure.

11. Data Breach Notification

In the event of a personal data breach — meaning any unauthorised access to, disclosure of, or loss of your personal information — we will:

Notify the Data Protection Board of India (DPBI) within 72 hours of becoming aware of the breach, regardless of its severity or extent.
Notify you directly if the breach is likely to result in harm to your rights or interests. Such notification will include the nature of the breach, the data involved, the potential consequences, and the steps we are taking to address it.
Take immediate steps to contain the breach and prevent any further exposure of your data.

12. Your Rights as a Data Principal

Under the DPDPA, you have the following rights in relation to your personal data. All requests will be acknowledged within 48 hours and resolved within 90 days of receipt.

Right to Access: You may request a summary of the personal data we hold about you and the purposes for which it is being processed.
Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
Right to Erasure: You may request deletion of your personal data, subject to any overriding legal obligations (such as tax record retention requirements).
Right to Withdraw Consent: You may withdraw consent for any processing activity at any time. This will not affect services already rendered or legally required records.
Right to Grievance Redressal: You may raise a complaint or concern with our Grievance Officer and expect a substantive response within the timelines stated in Section 15.
Right to Nominate: You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity, by informing us in writing.

To exercise any of these rights, write to our Grievance Officer at the contact details in Section 15.

13. Protection of Minors

Under the DPDPA, a minor is defined as any individual under the age of 18 years. We do not knowingly collect or process personal data of minors without the verifiable consent of a parent or lawful guardian.

If you are a minor, you may not submit personal information through our website or engage our services directly. All bookings must be made by an adult aged 18 or above.

If you are a parent or guardian and believe that a minor's personal data has been collected without appropriate consent, please contact our Grievance Officer immediately. We will delete such information promptly upon verification.

14. Third-Party Links

Our website may contain links to third-party websites such as social media platforms, vendor directories, or payment gateways. We are not responsible for the data collection, security, or privacy practices of those external sites. We encourage you to review their privacy policies independently before sharing any personal information with them.

15. Grievance Redressal

If you have any concerns, complaints, or requests regarding the handling of your personal data, please contact our designated Grievance Officer:

Grievance Officer: Kirthi Kumar Barik
Organisation: Raahi Wedding, under Kirthi Kumar Photography and Films
Email: hello@kirthikumarphotography.com
+91 9538009352 | Bengaluru India

We will acknowledge your complaint within 48 hours and endeavour to resolve it within 30 days of receipt.

If you are not satisfied with our resolution, or if you believe your rights under the DPDPA have been violated, you may escalate your complaint to the Data Protection Board of India (DPBI), the statutory body established under the Act. For further information, visit the Ministry of Electronics and Information Technology at meity.gov.in.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will notify active clients by email. We encourage all visitors to review this page periodically.

Your continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

This privacy policy has been prepared with reference to the Digital Personal Data Protection Act, 2023 (DPDPA) and the DPDP Rules, 2025. It is recommended that this document be reviewed by a qualified legal professional before publication to ensure it is fully tailored to your specific business operations and current with any subsequent regulatory developments.