Privacy Policy

Veedo – The Studio (“Veedo”, “we”, “us”) operates the website veedo.in and the studio at 1st Floor, Span Business Center, Karuvelil Road, Mamangalam, Kochi – 682025, Kerala, India. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

1. Who we are

For the purposes of the DPDP Act, Veedo – The Studio is the Data Fiduciary. Any individual whose data we process is a Data Principal. You can contact us at any time using the details in §9 below.

2. What we collect

We collect only what we need to take a booking and run the studio. Specifically:

• Enquiry & booking form data: name, email, phone (WhatsApp), preferred date, studio choice, shoot type, project notes.
• Lead-magnet form data: name, email, optional phone, shoot interest (if you opt in to download our prep checklist).
• Payment-related data: we do not store full card or bank details. Payment processors (UPI apps, gateway providers, card processors) handle these and we receive only a transaction reference and amount.
• Communication records: WhatsApp messages, emails, and call notes related to your booking.
• Site usage data: standard server logs (IP, user agent, referrer, pages visited) and, if enabled, anonymous analytics from Google Analytics 4 and Microsoft Clarity (cookies + session recordings). See §6.
• Photo / video taken at the studio: only with your explicit consent if used in our marketing material.

3. Why we collect it (lawful purpose)

• To respond to your enquiry and confirm a studio booking.
• To take payment and issue invoices.
• To deliver the service — including coordinating timing, parking, equipment, and on-site logistics.
• To improve the website via anonymous analytics (lawful interest).
• To meet legal obligations — tax records, GST filings, and any legally compelled disclosure.

Under the DPDP Act, we process data based on your consent (booking and marketing emails) or our legitimate use (responding to enquiries you actively initiate, fulfilling a contract you've booked).

4. Who we share it with

We don't sell your data. We share it only with service providers strictly necessary to operate the studio:

• Resend — sends transactional email (booking confirmations, replies).
• WhatsApp / Meta — when you message us on WhatsApp.
• Payment processors — for processing UPI / card / bank payments.
• Google Analytics & Microsoft Clarity — anonymous site analytics. You can opt out via your browser's “Do Not Track” or by blocking cookies.
• Accounting / tax professionals — for GST and tax compliance.
• Government authorities — only when legally compelled.

5. How long we keep it

• Booking records, invoices: 8 years (Indian tax retention requirement).
• Enquiries that didn't convert: 24 months, then deleted.
• Marketing email lists (lead magnet): until you unsubscribe.
• WhatsApp message history: as long as the WhatsApp conversation thread exists with you, or 24 months — whichever is shorter.
• Server logs & analytics: aggregated after 26 months (GA4 default).

6. Cookies & analytics

The site uses essential cookies for navigation, and optional analytics cookies (Google Analytics 4 with the ID G-T15SHKEFPX, and Microsoft Clarity if enabled). You can block these in your browser settings without affecting your ability to use the site.

We do not use third-party advertising cookies on the site.

7. Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or out-of-date data.
• Erase data once it's no longer needed for the purpose collected (subject to legal retention requirements).
• Withdraw consent at any time, after which we'll stop processing for that purpose (you can still re-engage by booking again).
• Nominate another individual to exercise these rights if you're incapacitated or deceased.
• File a grievance with the Data Protection Board of India if you believe we've mishandled your data.

To exercise any of these, email veedostudio@gmail.com with the subject “DPDP request”. We'll respond within 30 days.

8. Children

Veedo's services are not directed at children under 18. We don't knowingly collect data from anyone under 18. Baby and maternity shoots are booked by the parent / guardian, whose data we collect — not the child's.

9. Contact & grievance officer

For any privacy question or DPDP request, contact:

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version always lives at veedo.in/privacy. Material changes will be flagged on the homepage for two weeks before taking effect.