Privacy Policy

This privacy policy describes how Chroma Studios ("Chroma Studios", "we", "us", or "our") collects, uses, and protects the personal information you provide when you use our online platform and services. We are committed to protecting your privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant regulations.

Last updated: May 23, 2024

Information We Collect

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our services, when you participate in activities on our online platform, or otherwise when you contact us. The personal information that we collect depends on the context of your interactions with us and the online platform, the choices you make, and the services you use. The personal information we collect may include:

Personal Identifiers: Name, postal address, email address, phone number.
Payment Information: Details related to payments for services (though we typically use third-party payment processors, so we may not store sensitive payment card details ourselves, but may receive transaction information).
Service Details: Information about the specific photography services you are interested in or have commissioned, project details, preferences, and requirements.
Communications: Content of messages, emails, or calls when you contact us.
Usage Data: Information about how you access and use our online platform, such as your IP address, browser type, device information, pages visited, and time spent on the site. This may be collected automatically as you navigate the site.

How We Use Your Information

We use the personal information we collect for various purposes, including:

To Provide and Manage Services: To fulfill your requests for services (Fashion Photography, Commercial Photography, etc.), process transactions, manage your account, and provide customer support.
To Communicate With You: To respond to your inquiries, send you service-related updates, invoices, and information about changes to our terms or policies.
For Marketing and Promotion: To send you promotional communications about our services, offers, and news, where you have opted in to receive such communications. You can opt out at any time.
For Internal Business Operations: To analyze usage trends, monitor and improve our online platform and services, conduct research, and perform data analysis.
To Ensure Security: To protect our online platform, prevent fraud, and ensure the security of our systems.
To Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, or governmental requests.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Performance of a Contract: When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g., providing photography services you have booked).
Legitimate Interests: When processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms (e.g., improving our services, marketing our services, preventing fraud, maintaining security).
Consent: When you have given us clear consent to process your personal data for a specific purpose (e.g., sending you marketing emails). You have the right to withdraw your consent at any time.
Legal Obligation: When processing is necessary to comply with a legal obligation to which we are subject.

Data Sharing and Disclosure

We may share your personal information with third parties in the following circumstances:

Service Providers: We may share information with third-party vendors, consultants, and other service providers who perform services on our behalf, such as payment processing, website hosting, data analysis, email delivery, and marketing assistance. These third parties are obligated to protect your information.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
With Your Consent: We may share your information with your explicit consent.

We do not sell or rent your personal information to third parties for their marketing purposes without your explicit consent.

Data Security

We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Data Protection Rights

Under applicable data protection laws, you may have certain rights regarding your personal information, including:

The Right to Access: You have the right to request copies of your personal data.
The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The Right to Erasure: You have the right to request that we erase your personal data under certain conditions.
The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
The Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The Right to Withdraw Consent: Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
The Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority responsible for data protection in your jurisdiction.

To exercise any of these rights, please contact us using the contact information provided below. We may ask you to verify your identity before responding to such requests.

Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy (if applicable, or integrated here).

Third-Party Websites

Our online platform may contain links to third-party websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under age 18 without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

Contact Us

If you have questions or comments about this privacy policy or our data practices, please contact us at:

Chroma Studios
301 Empire Building, Veera Desai Road, Mumbai, Maharashtra, 400053, India