Privacy Policy

1. Who we are

This website is operated by Kriti Studio, the registered trade name of Rajat Pal, a proprietorship registered in India under GSTIN 09CVWPP3468C1ZX, with its principal place of business at 79, Unnamed Road, Near Pablikhas Railway Station, Modi Puram, Meerut, Meerut, Uttar Pradesh, 250110, India.

In this policy, "we", "us" and "our" refer to Kriti Studio. "You" refers to anyone visiting this website or contacting us about a commission.

2. Information we collect

Information you give us directly

When you enquire about or place a commission, we may collect:

• Your name, and the name of your business where a company is paying
• Your email address, telephone or WhatsApp number
• Your delivery address, and billing address where these differ
• Your GSTIN, where you require a tax invoice
• Any names, dates or wording you ask to be included in the artwork

Photographs you send us

A portrait commission requires you to send us a photograph, which will usually show an identifiable person — you, a family member, a partner, a child or a person who has died. We recognise these are personal and often deeply sentimental, and we treat them accordingly:

• Reference photographs are used only to draw your commission
• They are never sold, shared with data brokers, or used for advertising
• They are never supplied to any third party for machine-learning or AI training
• They are not published anywhere — what we may show publicly is the finished drawing, not your original photograph

Information collected automatically

Our web server keeps standard access logs recording the IP address making the request, the date and time, the page requested, the referring page and the browser user-agent. These are used only to keep the site secure and to diagnose faults.

3. How we use your information

• To reply to your enquiry and prepare a quotation
• To draw, frame, pack and deliver the commission you have placed
• To send you progress photographs while the piece is in hand
• To issue invoices and keep the accounting and GST records Indian law requires
• To keep this website secure and working correctly

We do not use your information for automated decision-making or profiling, and we do not add enquirers to a marketing list.

4. Legal basis for processing

We process personal data on the basis of your consent, the performance of a contract (delivering the commission you have placed), and our legal obligations under Indian taxation and accounting law. Our handling of personal data is aligned with the Digital Personal Data Protection Act, 2023.

5. Sharing your information

We do not sell, rent or trade your personal information. We share it only where necessary:

• Couriers — your name, delivery address and phone number, so that the artwork can be delivered to you.
• Framing vendors — where you have ordered framing, the finished artwork is handled by a framer. Your contact details are not shared with them.
• Professional advisers — our accountant, for statutory bookkeeping and GST filing.
• Authorities — where we are required to disclose information by law, court order or a lawful government request.

6. Showing finished work publicly

We may photograph completed commissions and show them on this website and on our social media channels. This is how a portrait studio demonstrates its work.

You can opt out of this at any time, before or after delivery, simply by telling us. If a commission is a surprise gift, tell us and we will hold publication until after the occasion. We do not publish the client's name alongside a piece unless you have agreed to it, and we never publish your original reference photograph.

7. How long we keep information

Enquiries that do not become commissions are deleted within twelve months. Reference photographs are retained while your commission is in progress and for a reasonable period afterwards in case a reprint, repair or a follow-up piece is requested — if you would like your reference photographs deleted sooner, ask us and we will delete them. Invoices and accounting records are retained for eight years as required under Indian tax law. Server access logs are rotated and deleted within thirty days.

8. Your rights

You may, at any time, ask us to:

• Confirm what personal data of yours we hold, and give you a copy
• Correct anything inaccurate or incomplete
• Delete information we no longer have a legal reason to keep, including your reference photographs
• Withdraw a consent you previously gave, including consent to display your commission
• Explain how we obtained your information

Write to contact@kritistudio.in and we will respond within thirty days. We may ask you to verify your identity first.

9. Security

This website is served exclusively over an encrypted HTTPS connection. Reference photographs and client correspondence are held on access-controlled devices. While no method of transmission or storage is completely secure, we take reasonable technical and organisational measures appropriate to the sensitivity of what we hold.

10. Children

We frequently draw portraits of children, always commissioned by a parent or guardian. By sending us a photograph of a child, you confirm you are their parent or guardian, or that you have that person's permission. We do not knowingly accept commissions or collect personal data directly from anyone under 18.

11. Cookies and third-party links

This website sets no advertising or tracking cookies and runs no third-party analytics or advertising scripts. If that changes we will update this policy and, where required, ask for your consent first.

This website links to our profiles on Instagram and Facebook. Those are plain links — no content or tracking script from either platform is loaded on this site. We are not responsible for the privacy practices of those platforms, and we encourage you to read their own policies before interacting with us there.

12. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised, and material changes will be highlighted here.

13. Contact and grievances

For any question about this policy, or to raise a grievance about how your personal data has been handled, contact: