Chitrak Productions (“we,” “us,” or “our”) operates the website chitrakproductions.com (the “Website”). This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our Website, make a payment, or engage our services. This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and the Digital Personal Data Protection Rules, 2025, as applicable and in force.
1. Data Fiduciary Information
For the purposes of the DPDP Act, Chitrak Productions is the Data Fiduciary. You can contact us regarding any data privacy matters at:
Email: chitrakproductions@gmail.com
Address: 514, 8th Cross road, 3rd Phase JP Nagar, Bangalore 560078
2. Personal Data We Collect
We collect and process the following categories of personal data:
a) Information You Provide
- Name, email address, phone number, and company name (when you fill out a contact form, request a quote, or engage our services)
- Billing and payment information (processed securely through Razorpay; we do not store your credit/debit card numbers, UPI IDs, or bank account details on our servers)
- Project-related information, briefs, brand assets, and communications shared during the course of an engagement
b) Information Collected Automatically
- Device information (browser type, operating system, screen resolution)
- IP address and approximate geographic location
- Pages visited, time spent on pages, referring URLs, and other website usage data
- Cookies and similar tracking technologies (see Section 8 below)
3. Purpose of Data Collection
We collect and process your personal data for the following specific, lawful purposes:
- To respond to your enquiries and provide quotes
- To deliver the video production and related creative services you have engaged us for
- To process payments through Razorpay
- To communicate with you regarding project updates, deliverables, invoices, and support
- To improve our Website, services, and user experience
- To comply with applicable legal and regulatory obligations
4. Consent
By submitting your personal data through our Website (via contact forms, payment pages, or other input mechanisms), you provide your free, specific, informed, and unambiguous consent for us to collect and process your data for the purposes stated above.
You have the right to withdraw your consent at any time by contacting us at the email address listed in Section 1. Withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal, and may impact our ability to provide ongoing services.
5. Data Sharing
We do not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipients, only to the extent necessary:
- Razorpay (payment processing): Your payment data is processed by Razorpay Software Private Limited in accordance with their privacy policy and PCI-DSS compliance standards. We do not have access to your full card or bank details.
- Service providers: Trusted third-party tools for website hosting, analytics, email communication, and cloud storage, engaged under appropriate data processing agreements.
- Legal and regulatory authorities: Where disclosure is required by law, regulation, court order, or governmental request.
6. Data Storage and Retention
Your personal data is stored on secure servers within India. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:
- Project-related data: Retained for a period of 3 years from the completion of the project, unless a longer retention period is required for legal or contractual reasons.
- Payment transaction records: Retained as required under applicable tax and financial regulations.
- Website analytics data: Retained in anonymised or aggregated form.
After the applicable retention period, personal data is securely deleted or anonymised.
7. Data Security
We implement reasonable security safeguards to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls limiting data access to authorised personnel, regular review of data collection and storage practices, and use of reputable, security-certified third-party service providers.
While we take reasonable precautions, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.
8. Cookies
Our Website uses cookies and similar technologies to enhance your browsing experience, analyse website traffic, and understand user preferences. You can control cookie preferences through your browser settings. Disabling cookies may affect certain functionality of the Website.
We use the following types of cookies:
- Essential cookies: Required for the Website to function (session management, security).
- Analytics cookies: Used to understand how visitors interact with the Website (e.g., Google Analytics). Data collected is anonymised.
- Marketing cookies: Used only if you opt in, to show relevant information about our services.
9. Your Rights
Under the DPDP Act and applicable law, you have the following rights as a Data Principal:
- Right to access: You may request confirmation of whether we process your personal data and obtain a summary of your data and processing activities.
- Right to correction and erasure: You may request correction of inaccurate data or erasure of data that is no longer necessary for the purpose for which it was collected.
- Right to grievance redressal: You may raise a complaint regarding the processing of your personal data by contacting us at the email address in Section 1.
- Right to nominate: You may nominate another individual to exercise your data rights on your behalf, in accordance with the DPDP Act.
To exercise any of these rights, please email us at chitrakproductions@gmail.com. We will respond to your request within a reasonable timeframe and in no case later than 30 days.
10. Children’s Data
Our Website and Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without verifiable parental consent, we will take steps to delete that data promptly.
11. Third-Party Links
Our Website may contain links to third-party websites (e.g., YouTube, Vimeo, social media platforms). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal data.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated policy will be posted on this page with a revised “Last Updated” date. We encourage you to review this page periodically.