Privacy Policy & DPDP Notice
This Privacy Policy explains how The Seven Steps Studio collects, uses, and safeguards your personal data in compliance with the Digital Personal Data Protection Act (DPDP Act, 2023) of India.
Last Updated: September 2026 | Governing Law: DPDP Act 2023 (India)
1. Notice of Data Collection (Data Fiduciary Role)
Under the DPDP Act 2023, The Seven Steps Studio operates as a Data Fiduciary, and you (our website visitor or prospective client) are the Data Principal.
When you fill out our contact inquiry form, we collect the following personal data:
- Full Name: To address you and personalize our communications.
- Email Address & Phone Number: To send booking confirmations, quotes, and event schedule details.
- Service & Budget Requirements: To tailor our photography/videography proposals.
- Message & Event Details: To understand event dates, locations, and personal preferences.
2. Purpose Limitation & Processing
We collect and process your data solely for the following specified purposes:
- Responding to your contact or service inquiries.
- Preparing customized service packages, quotes, and contracts.
- Sending confirmation messages and updates regarding your booking.
Note: We do NOT sell, rent, or trade your personal data to third parties for marketing purposes.
3. Your Rights as a Data Principal
Under Section 11 & 12 of the DPDP Act 2023, you retain full ownership and rights over your personal data:
Right to Withdraw Consent
You may withdraw your consent at any time. Upon withdrawal, we will cease processing your personal data unless required by legal obligation.
Right to Erasure (Deletion)
You can request complete deletion of your stored inquiry records from our system and spreadsheets.
Right to Access & Correction
You have the right to request a summary of your personal data processed by us or correct inaccurate information.
Grievance Redressal
You have the right to readily available grievance redressal in respect of any act or omission regarding your data.
4. Data Security & Retention Safeguards
Inquiry submissions are securely transmitted and stored using encrypted cloud infrastructure (Google Apps Script & Google Workspace). We employ reasonable security safeguards:
- Restricted access control limited strictly to authorized studio management personnel.
- Multi-Factor Authentication (2FA) enforced across storage endpoints.
- Data retention limited to the period necessary to fulfill inquiry responses or contractual wedding assignments.
5. Grievance Officer & Data Contact
If you wish to exercise your rights (access, correction, erasure, or consent withdrawal) or have any questions or grievances under the DPDP Act 2023, please reach out to our designated Data Representative:
Studio: The Seven Steps Studio
Email: thesevenstepsstudio@gmail.com
Phone: +91 9230197003
Address: Kolkata, West Bengal, India
