Hitched & Clicked ("we," "us," "our") is a wedding photography and videography studio. This policy explains what personal data we collect, why, how long we keep it, who we share it with, and how you can exercise your rights over it. It applies to our couples (clients), our crew, and anyone who submits an enquiry through our website, Instagram, or Facebook.
We are a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDPA). This policy is written to meet that Act's notice requirements.

1. What we collect

From couples who enquire or book with us:
Names, phone number, email address
Wedding date(s), venue(s), and city/region
Budget range, if shared
Any free-text details you share about your wedding in an enquiry form
Contract, quote, and payment records
Photos and videos delivered as part of your booking
From enquiries submitted via Instagram/Facebook lead ads:
The same fields above, as you enter them into Meta's lead form
We never receive your Instagram/Facebook password or account access — only the answers you submit to our specific form
From crew members we engage:
Name, phone number, email address
Assignment details (which event, call time, venue)
Automatically:
Access logs when a tokenized link (used to send crew their assignment details) is opened, for security and accountability purposes

2. Why we collect it (purpose)

We collect and use personal data only for specific, stated purposes:

Purpose & What it covers

Service delivery: Planning, shooting, editing, and delivering your wedding photography/videography, and coordinating crew to do so.

Future marketing: Contacting past couples about offers or availability — only with your separate, explicit consent.

Portfolio use: Featuring your photos/videos on our website, Instagram, or portfolio.

Vendor referral: Sharing your contact details with a wedding vendor you've asked us to refer you to — only with your separate, explicit consent.

Testimonial use: Publishing a quote or review you've given us, attributed to you — only with your separate, explicit consent.

Each of these is a distinct consent — agreeing to have us shoot your wedding does not automatically mean we can use your photos in our portfolio or contact you for marketing later. You can grant or withdraw consent for any of these purposes independently, at any time, by contacting us (see Section 6).

3. Crew and the assignment link

Crew we engage for a wedding receive a private, one-time link by email (or WhatsApp, once available) showing only their own assignment: call time, venue, their role, and the on-site lead's contact for coordination. This link never shows the couple's name, contact details, or anything about payment. Every time this link is opened, we log that access as a disclosure, as required under DPDPA.

4. How long we keep it

We keep personal data only as long as necessary for the purpose it was collected for, then delete or anonymize it:

Data & Retention period:

Financial records (invoices, payments) : 8 years (statutory/tax requirement)
Client contact and wedding details : Contract term + 12 months
Enquiries that don't convert to a booking : 24 months
Delivered photos/videos (our copies) :12 months after delivery, by default
Crew phone numbers : 12 months after their last assignment
Crew assignment-link records : 14 days after the event ends
Access logs : 3 years

When a retention period ends, deletion is reviewed by a person before it happens — we do not auto-delete without human review.

5. Who we share it with

a. Crew, limited to operational details needed to do their job (Section 3) — never your financial information.
b. Meta/Instagram/Facebook, only in the direction of receiving your lead-form submission if you enquired that way — we do not send your data back to Meta for advertising purposes.
c. Service providers who help us run the studio (e.g. our payment processor, cloud hosting), bound by their own confidentiality/data obligations.
We do not sell personal data, and we do not share it with anyone else without your consent, except where required by law.

6. Your rights
You can ask us, at any time, to:

a. Access a copy of the personal data we hold about you
b. Correct inaccurate data
c. Withdraw consent for marketing, portfolio use, vendor referral, or testimonial use (service-delivery data tied to an active or recent booking can't be withdrawn while we still need it to fulfil that booking, or while a legal retention period like the 8-year financial record rule applies)
d. Request erasure of your data, subject to the retention rules above — where we're legally required to keep something (e.g. an invoice for tax purposes), we'll retain only what's needed and remove identifying details from it, and tell you exactly what was kept and why
To exercise any of these rights, contact us at [email protected]. We'll respond within a reasonable time and confirm what action was taken.

7. Security
We store your data on hosted infrastructure with access restricted to our two studio operators. Photos and videos are never stored or transmitted through this policy's covered systems in a way third parties can access without authorization.

8. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent change. Material changes affecting how we use your data will be communicated to you directly where practical.

9. Contact us
Hitched & Clicked Email: [email protected]