Privacy policy

Effective 13 November 2026

This notice describes information collected through S P Studio enquiries, client accounts, photography bookings and custom-frame requests.

Who handles your information

SP Studio, a registered partnership firm, operates this website and manages studio requests under the S P Studio brand. Principal address: H.No. 268, Rajiv Colony, Chandigarh 160015, India. Grievance and Privacy Contact: Akhil Kushwaha.

For privacy questions, correction or deletion requests, email general@spstudio.co.in or WhatsApp +91 62393 67490. Include your ticket number where available; never send your account password.

Information we collect

Enquiries: name, email, phone, service, message, date, city or venue and information you voluntarily provide. Packages may also include ceremony preferences, functions, coverage, travel, pickup/drop, accommodation and other event details. We do not need proof of your religion to offer a tradition-specific package.

Frames: uploaded photograph, filename, file type/size, print permission, size, finish, quantity and instructions. A photograph may contain other people, including children; supply it only when you have the necessary permissions.

Accounts and operations: account identity, password hash, sessions, request status, estimates, final quotations, staff assignments and communications. Passwords are stored as hashes, not as readable account passwords. If social sign-in is enabled later, the selected provider may supply the identity information disclosed in its sign-in screen.

Technical data: requests to our hosting providers may include IP address, browser/device information and security logs. Our request-limit mechanism stores hashed identifiers and expiry information to manage abuse. For studio staff, an access-controlled activity log records the staff identity, action or route, date/time, outcome and diagnostic request reference. It does not intentionally record passwords, private tracking/setup codes, submitted request bodies or photograph contents. We do not collect bank passwords, OTPs or card PINs in enquiry forms.

Why we use it

We use information to answer requests, prepare and revise quotations, confirm and perform agreed services, produce frames, deliver work, manage accounts, provide customer updates, handle complaints and refunds, prevent misuse and meet legal record-keeping duties.

An uploaded frame photograph is used to assess and fulfil that request. It is not automatically added to the public gallery or treated as permission for marketing. Please do not send identification documents or unrelated sensitive information through the general enquiry box.

Access, service providers and private tracking

Authorised studio personnel can access information needed to manage requests. Shopify and Cloudflare provide the current website/hosting and request-storage services. Printers, editors, couriers or other service providers may receive the information needed for an agreed job where used.

Service providers may process information in locations covered by their services. We do not promise India-only storage or make an unverified certification claim. Transfers and disclosures must follow applicable law and the studio’s arrangements with its providers.

A private tracking code allows its holder to view the ticket’s service, status, estimates, quotation and customer-facing studio updates. The guest tracker excludes contact details, original frame uploads, the original enquiry message and internal notes. Keep the code private. A replacement code invalidates the old code.

A photograph can be viewed by authorised studio staff and the client account linked to its frame request. Deleting a client login does not automatically erase the linked request, frame originals, invoices or backups. A complete privacy request must be handled separately.

Portfolio, marketing and photographs of children

Separate, specific permission is needed before publishing identifiable client photographs in a portfolio, social-media post or advertisement. A booking, upload or account registration is not automatic advertising consent.

Please contact us about an objection to an image or withdrawal of a marketing permission. We will review the rights involved, remove material from channels we control where appropriate and explain any limits involving copies already distributed or legal obligations.

Bookings and accounts should be arranged by an adult. Where photographs of children are involved, appropriate parent/guardian permission and other applicable requirements must be addressed. The website does not provide a child account or automated age-verification service.

Retention and security

Client photographs and video clips normally have a retention period of two years after final delivery, with earlier deletion available on a verified request. This media period is separate from the retention of enquiry/account details, receipts, accounting records and security logs, which depends on their purpose and applicable legal requirements. See the client media retention and data deletion request policies for the scope, verification process, backups and exceptions. The website does not provide automatic permanent erasure when an item is moved to Trash.

Contact us to ask what remains associated with your request or to request correction, access, deletion or withdrawal of a permission. We may need proportionate verification and may retain records required for a legal obligation or an active dispute. We will explain the outcome and any lawful exception.

We use access controls, hashed account passwords, private tracking codes and security measures appropriate to the service. No website can promise absolute security. Report suspected unauthorised access promptly so the studio can investigate and take the required action.

Cookies and changes

Essential session cookies support account/admin sign-in. Shopify and other providers may set additional cookies described in their own services. See the cookie notice for details and browser controls.

If new marketing tools, analytics, sign-in providers or materially different uses are introduced, the notice and any required consent process must be updated before those uses begin. This policy is not a substitute for obtaining a permission required for a specific use.

Saved selections and payment receipts

A cart saves references to the package or frame requests you choose. We use a necessary secure cart cookie and, when you sign in, may associate the cart with your account. A cart estimate is not a confirmed price, booking or payment. Online payment is not currently connected. We will update the payment information and relevant provider disclosures before enabling a gateway.

A receipt e-record and its PDF contain the client and completed-payment details entered by authorised studio staff. Only authorised staff and the associated client account can open a protected e-record. A downloaded PDF is a copy that can be shared by its holder; contact us if information is incorrect. Receipt numbers and minimal number-reservation history are preserved to prevent reuse.