Privacy Policy

Information We Collect

1. Personal Information

We may collect the following types of personal information:

• Name, email address, phone number, and postal address
• Payment information (processed securely through Stripe)
• Profile data, including preferences and account settings
• Communications with us, including customer service inquiries
• Booking and event details
• Photography and videography preferences

2. Non-Personal Information

We may also collect non-personal information, including:

• Usage data, such as pages visited, time spent on pages, and click patterns
• Device information, including browser type, operating system, and device identifiers
• Location data (general geographic location, not precise coordinates)
• Cookies and tracking technologies (see Section 6 for details)

How We Use Your Information

We use the information we collect for the following purposes:

• Provide and deliver our photography and videography services
• Process transactions, payments, and manage bookings
• Personalise your experience and tailor our services to your preferences
• Communicate with you about bookings, services, updates, and promotional offers
• Send marketing communications (with your consent, which you can withdraw at any time)
• Improve our services, website functionality, and user experience
• Ensure security, prevent fraud, and protect against unauthorised access
• Comply with legal obligations and enforce our terms and conditions

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share your information in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our business, such as payment processors (Stripe), cloud hosting providers, and analytics services. These providers are contractually obligated to protect your information and use it only for specified purposes.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users.
• With Your Consent: We may share information with your explicit consent or as otherwise disclosed at the time of collection.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: We use industry-standard encryption (TLS/SSL) for data transmission and AES-256 encryption for data at rest.
• Access Controls: We limit access to personal information to authorised personnel only, on a need-to-know basis.
• Regular Audits: We conduct regular security audits and assessments to identify and address vulnerabilities.
• Employee Training: Our staff are trained on data protection and privacy best practices.
• Secure Payment Processing: All payments are processed through Stripe, which is PCI DSS Level 1 certified.

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest standards of data protection.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: The right to request access to the personal information we hold about you.
• Rectification: The right to request correction of inaccurate or incomplete information.
• Erasure: The right to request deletion of your personal information (subject to legal and contractual obligations).
• Restriction: The right to request restriction of processing of your information.
• Data Portability: The right to receive your personal information in a structured, commonly used format.
• Object: The right to object to processing of your information for certain purposes.
• Withdraw Consent: The right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@sujanstudio.com. We will respond to your request within 30 days, or as required by applicable law.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your preferences and activity on our website. Cookies are small text files placed on your device when you visit our website.

We use cookies for the following purposes:

• Essential cookies: Required for the website to function properly (e.g., authentication, security).
• Analytics cookies: Help us understand how visitors use our website (e.g., Google Analytics).
• Functional cookies: Remember your preferences and settings.
• Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website. For more information, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: