Privacy Policy

Camrin Films Private Limited ("Camrin Films", "we", "us", or "our") is a wedding photography and cinematography studio headquartered in Thrissur, Kerala, India. We operate the website camrinfilms.com and provide professional photography, videography, and related creative services.

For the purposes of applicable data protection law, Camrin Films Private Limited is the data controller responsible for your personal information.

Contact details: Camrin Films Private Limited Thrissur, Kerala – 680001, India Email: camrinfilms@gmail.com Phone: +91 9446288811

We collect information in two ways:

a) Information you provide directly

When you fill in an enquiry form, contact form, or package builder on our website, we collect: - Full name - Email address - Phone number - Wedding date and venue / location - Service preferences and budget range - Any additional details you share in the message field

When you contact us via WhatsApp, we receive your WhatsApp profile name, phone number, and message content.

When you use our Client Portal, we collect your phone number (for OTP verification) and details related to your booked package.

b) Information collected automatically

When you visit our website, we automatically collect: - IP address and approximate geographic location - Browser type, device type, and operating system - Pages viewed, time spent, and navigation paths - Referring website or search query that brought you to us - Cookie identifiers and session data

This information is collected through cookies and third-party analytics tools described in Section 6.

We use the information we collect for the following purposes:

- To respond to your enquiry — We use your name, phone number, and email to contact you about your wedding photography requirements and provide a custom quote. - To manage your booking — Once you book with us, we use your contact and event details to coordinate logistics, send reminders, and manage your package. - To send you relevant communications — With your consent, we may send updates about your booking, delivery timelines, and occasional newsletters about our work. - To improve our website — We analyse aggregated, anonymised usage data to understand how visitors use our site and to improve its performance and content. - To comply with legal obligations — We retain certain records as required by Indian tax and company law. - To prevent fraud and ensure security — We use automated signals to detect and block malicious traffic.

If you are located in the European Union or European Economic Area, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

- Contract performance — Processing is necessary to respond to your enquiry and fulfil your booking with us. - Legitimate interests — We have a legitimate interest in improving our website, securing our systems, and marketing our services to people who have expressed interest. - Consent — Where we send marketing communications, we rely on your consent, which you may withdraw at any time. - Legal obligation — We process certain data to comply with applicable Indian law.

If you are located in India, we process your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and its implementing rules.

We do not sell your personal data. We may share your information with the following categories of third parties only as necessary:

Service providers and processors:

- Twilio / WhatsApp Business API — Used to send and receive WhatsApp messages. Your phone number and message content are transmitted through Twilio's platform. Twilio's privacy policy applies: twilio.com/en-us/legal/privacy. - Google LLC (Analytics & Tag Manager) — We use Google Analytics 4 and Google Tag Manager to analyse website traffic. Google may process data in the United States. Google's privacy policy applies: policies.google.com/privacy. - Microsoft Clarity — We use Microsoft Clarity for session recording and heatmaps to understand user behaviour. Microsoft's privacy policy applies: privacy.microsoft.com. - Amazon Web Services (AWS) — Our server infrastructure runs on AWS EC2 in the Asia Pacific (Mumbai/Hyderabad) region. Your data is stored on servers located in India. - Meta Platforms (Instagram) — We use the Instagram Graph API to sync portfolio content. No personal enquiry data is shared with Meta.

Legal and regulatory disclosures:

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Camrin Films, our clients, or others.

All third-party processors are bound by data processing agreements and are prohibited from using your data for their own marketing purposes.

Your data is primarily stored and processed in India (AWS Asia Pacific region). Some of our third-party service providers (Google, Microsoft, Twilio) may process data in the United States or other countries.

Where data is transferred outside India or the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms recognised under applicable law.

We retain your personal data for as long as necessary to fulfil the purposes described in this policy:

- Enquiry data (no booking) — Retained for 12 months from the date of enquiry, then deleted. - Client booking data — Retained for 7 years from the date of the wedding, in compliance with Indian tax and company law requirements. - Analytics data — Aggregated, anonymised analytics data may be retained indefinitely. Raw session data is retained for 14 months by default in Google Analytics. - WhatsApp messages — Message history is retained within our CRM for the duration of the client relationship and up to 2 years thereafter.

You may request earlier deletion of your data by contacting us at camrinfilms@gmail.com (see Section 9 — Your Rights).

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device.

Types of cookies we use:

Managing cookies:

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect the functionality of some parts of our website.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout.

You can opt out of Microsoft Clarity at: clarity.microsoft.com/opt-out.

Depending on your location, you may have the following rights regarding your personal data:

Under India's DPDPA 2023: - Right to access information about the personal data we process about you - Right to correction of inaccurate or incomplete personal data - Right to erasure of personal data that is no longer necessary - Right to grievance redressal

Under GDPR (EU/EEA residents): - Right of access — obtain a copy of your personal data - Right to rectification — correct inaccurate data - Right to erasure ("right to be forgotten") - Right to restriction of processing - Right to data portability — receive your data in a structured, machine-readable format - Right to object — object to processing based on legitimate interests - Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing - Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at:

Email: camrinfilms@gmail.com Phone: +91 9446288811

We will respond to your request within 30 days. We may need to verify your identity before processing your request.

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately at camrinfilms@gmail.com and we will delete it promptly.

Our website may contain links to third-party websites, including our social media profiles (Instagram, YouTube, Facebook) and external platforms. This Privacy Policy applies only to camrinfilms.com. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies before providing any personal information.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

- HTTPS encryption on all pages of our website - Access controls limiting who within our organisation can access client data - Secure cloud infrastructure hosted on AWS

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

Camrin Films Private Limited Thrissur, Kerala – 680001, India Email: camrinfilms@gmail.com Phone: +91 9446288811

Grievance Officer (India — DPDPA 2023): For grievances related to the processing of your personal data, you may contact our Grievance Officer at camrinfilms@gmail.com. We will acknowledge your grievance within 48 hours and resolve it within 30 days.

If you are located in the EU/EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.