Privacy Policy

Operating entity and applicability of this privacy notice.

FliqaIndia Private Limited ('FliqaIndia', 'Company', 'we', 'us', or 'our') is committed to maintaining the confidentiality, integrity, and security of personal information entrusted to us by website visitors, registered users, booking clients, and photography subjects.

This Privacy Policy applies to personal data collected through fliqaindia.in, our customer portal, administrative operations, communication channels (email, telephone, WhatsApp), and digital deliverable galleries.

We operate as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) and adhere to the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ('IT Rules, 2011').

Specific categories of personal data collected during the customer lifecycle.

We collect only the personal information strictly necessary to fulfill inquiries, manage bookings, coordinate creative crews, process payments, and deliver visual memories:

• Identity & Contact Data: Full name, email address, mobile phone number, WhatsApp contact number, and billing/mailing address.
• Event & Logistical Details: Ceremony types (e.g. Wedding, Haldi, Reception), event dates, venue names, city, expected coverage hours, and designated on-site family coordinator details.
• Customer Account Data: Authenticated user credentials, Firebase Authentication unique user identifiers (UID), registered email address, and profile settings.
• Transaction & Billing Records: Payment amounts, transaction reference numbers (Razorpay Payment ID, Order ID), payment method type, and GST invoice details. Note: We NEVER capture, view, or store raw credit/debit card numbers or UPI PINs.
• Communications & Inquiries: Inquiry messages submitted via web forms, support tickets, feedback ratings, and WhatsApp coordination exchanges.
• Photographic & Cinematic Media: Photographs, raw footage, edited video reels, and client likeness captured during contracted assignments.
• Technical & Diagnostic Data: IP address, device model, browser type, operating system, session cookies, and performance metrics.

Direct client interactions, automated web technologies, and service coordination.

Personal data is collected transparently through authorized channels:

• Direct Entry by You: When you submit an inquiry form, request a custom quote, register for an account, book a package, or communicate with our support desk.
• Checkout & Payment Processing: When you complete a transaction on fliqaindia.in via our secure Razorpay integration.
• Event Execution: During on-site photographic coverage as commissioned by the client.
• Automated Technologies: Standard web server logs, session cookies, and performance monitoring tools that facilitate seamless navigation and secure customer authentication.

How and why your data is utilized by our systems and teams.

FliqaIndia processes personal data exclusively for lawful purposes connected to our core services:

• Service Delivery: Reserving crew dates, briefing assigned photographers and cinematographers, coordinating venue arrival, and executing coverage.
• Booking Administration: Generating formal quotations, issuing automated booking confirmations, sending schedule reminders, and managing milestone payments.
• Deliverable Fulfillment: Curating photo catalogs, color grading, editing cinematic highlight films, and generating secure private cloud download links.
• Customer Support: Responding to inquiries, resolving billing questions, and processing feedback requests.
• Statutory Compliance: Issuing GST-compliant invoices, maintaining corporate accounting records under the Companies Act, 2013, and preventing fraudulent transactions.
• Security & Authentication: Verifying user identities via Firebase Authentication to prevent unauthorized access to customer bookings and private media galleries.

Audited cloud services, payment gateways, and hosting infrastructure.

To deliver enterprise-grade performance and security, FliqaIndia partners exclusively with vetted, industry-leading cloud and technological service providers:

Strict zero-card-retention policy and PCI-DSS compliance.

FliqaIndia adheres to a strict Zero-Financial-Data retention policy.

All online payments are processed through Razorpay, a Reserve Bank of India (RBI) authorized payment aggregator and PCI-DSS Level 1 certified processor.

When you enter card details or authorize UPI transfers, your sensitive financial information is transmitted directly from your browser to Razorpay via encrypted TLS connections. FliqaIndia never views, receives, logs, or stores your 16-digit card number, expiration date, CVV, or UPI PIN on our servers.

Essential cookies, security tokens, and user preference management.

We utilize standard cookies and local storage tokens strictly for operational and security functionality:

• Essential Authentication Cookies: Used to maintain your authenticated login session (Firebase Auth token) across pages and verify administrative access permissions.
• Shopping Cart & Booking State: Preserving selected packages and customizer configurations during your active booking session.
• Security & CSRF Protection: Validating form submissions and preventing cross-site request forgery attacks.
• Google Analytics 4 Performance Measurement: We utilize first-party Google Analytics 4 (Measurement ID: G-9DRSQH7DP9) to understand aggregate website performance, photography category views, and booking journey trends. GA4 sets first-party session cookies (_ga, _ga_*) with IP masking enabled. FliqaIndia strictly sanitizes all event streams to guarantee zero Personally Identifiable Information (such as customer names, phone numbers, email addresses, or payment credentials) is ever transmitted to Google. Advertising and remarketing cookies remain disabled by default, and visitors may accept or decline analytics cookies at any time via the Privacy & Analytics banner.
• No Cross-Site Commercial Surveillance: We do not sell your browsing history to third-party data brokers or embed predatory advertising trackers.

Strict operational sharing protocols; zero data sales.

FliqaIndia does NOT sell, rent, monetize, or trade your personal information to third-party marketing companies under any circumstances.

Personal data is shared only on a strict need-to-know basis with:

• Assigned Creative Crews: Lead photographers, cinematographers, and production managers assigned to your specific event receive event schedules, venue locations, and family contact details to execute coverage.
• Cloud & Delivery Partners: Secure hosting and cloud delivery providers solely to store deliverables and transmit automated transactional messages.
• Legal & Regulatory Authorities: Where mandatory under Indian law, court subpoenas, or formal directives issued by authorized law enforcement agencies.

Handling of client visual media, privacy protection, and portfolio permissions.

Visual memories are personal and intimate. FliqaIndia treats client photographs and films with the utmost dignity, artistic respect, and confidentiality:

• Private Gallery Delivery: Client deliverables are uploaded to private, secure cloud directories accessible solely via encrypted link or client login.
• Portfolio Showcase & Consent: We take immense pride in celebrating Indian weddings and creative storytelling. Selected photographs may be showcased on our official website or social media to exhibit our creative portfolio, ONLY where the customer has granted consent.
• Right to Opt Out / Privacy Addendum: Clients who require absolute confidentiality (celebrity clients, private family functions, or corporate proprietary events) may request a Private Assignment designation prior to the event, ensuring zero public publication.
• Consent Withdrawal: If a photograph featuring you or your immediate family is published in our portfolio and you subsequently wish it removed, you may contact privacy@fliqaindia.com. We honor removal requests from digital platforms within 5 business days.

Retention schedules for account data, communication logs, and visual archives.

Active Customer Data: Retained for the duration of your active account relationship to facilitate access to booking history, quotations, and deliverables.

Deliverables & Visual Media: Final edited high-resolution images are maintained in active cloud storage for 60 calendar days post-delivery. Clients are instructed to download and create redundant local backups upon receipt.

Statutory Accounting Data: Invoices and transaction records are maintained for up to 8 financial years as mandated by the Indian Companies Act, 2013 and Goods and Services Tax (GST) regulations.

Data Erasure: Customers may submit a written request to delete their account profile and contact details from our active databases by emailing privacy@fliqaindia.com, subject to statutory record-keeping obligations.

Reasonable security practices implemented under the Information Technology Act, 2000.

In compliance with Section 43A of the Information Technology Act, 2000 and Rule 8 of the IT Rules, 2011, FliqaIndia implements robust technological, physical, and managerial security standards:

• Encryption in Transit: Enforced TLS/HTTPS encryption with HTTP Strict Transport Security (HSTS) across all web endpoints.
• Database Encryption: AES-256 encryption at rest for all database collections in Google Cloud Firestore.
• Role-Based Access Control (RBAC): Strict administrative permissions ensuring only authorized personnel have access to specific customer files.
• Automated Vulnerability & Secret Scanning: Continuous code scanning to prevent credential leakage and software vulnerabilities.

Your rights under Indian data protection legislation.

Under the Digital Personal Data Protection Act, 2023 (as statutory rules come into phased enforcement) and existing IT laws, you are entitled to:

• Right to Access: Request a summary of personal data held about you and processing activities undertaken.
• Right to Correction: Request correction or updating of inaccurate, outdated, or incomplete personal data.
• Right to Withdraw Consent: Withdraw consent previously granted for optional activities (such as portfolio showcases or promotional emails).
• Right to Grievance Redressal: Access a dedicated Grievance Officer to resolve data protection and privacy concerns.
• Right to Nominate: Nominate an individual to exercise privacy rights in the event of death or incapacity, as provided under DPDP rules.

Protection of minors during family, wedding, and portrait assignments.

Our digital commercial services (package booking, payments, account registration) are directed exclusively to persons aged 18 years or older.

In the context of family events, weddings, and birthday shoots, photographs of minors (children under 18) are taken strictly in the presence and with the consent of parents or legal guardians as part of the overall commissioned family event coverage.

Cloud hosting locations and international data transfer compliance.

FliqaIndia's core operations are based in India. Our cloud infrastructure leverages Google Cloud / Firebase data centers adhering to international security certifications (SOC 1/2/3, ISO/IEC 27001).

Data transfers for international clients or outstation bookings comply with applicable Indian statutory transfer guidelines.

How updates are posted, versioned, and communicated.

We may update this Privacy Policy periodically to reflect technological advancements, operational changes, or new regulatory requirements under the DPDP Act.

All updates are published directly on this page with an updated 'Last Updated' date. For material changes affecting the handling of existing personal data, we will provide prominent notice via email or website notification prior to implementation.

Mandatory statutory Grievance Officer details under Rule 5(9) of the IT Rules, 2011.

In compliance with the Information Technology Act, 2000 and Rule 5(9) of the IT Rules, 2011, FliqaIndia has appointed a designated Grievance Officer for data protection and privacy matters:

• Entity Name: FliqaIndia Private Limited
• Designation: Grievance Officer / Data Protection Lead
• Grievance Email: privacy@fliqaindia.com
• General Support: support@fliqaindia.com
• Toll-Free Helpline: 1800 891 1688 (Mon–Sat, 10:00 AM – 7:00 PM IST)
• WhatsApp Privacy Desk: +91 82403 86926
• Corporate Address: FliqaIndia Private Limited, Kolkata, West Bengal, India
• Grievance Response Time: We acknowledge privacy grievances within 48 hours and strive to resolve them within 15 working days.