Privacy Policy
How ByMegha Photography collects, uses and protects your personal information — in plain, simple language.
Last updated: 28 October 2026This Privacy Policy explains how ByMegha Photography ("ByMegha", "we", "us" or "our"), a photography studio run by Megha and based in Kozhikode, Kerala, India, handles your personal information when you visit bymegha.in, get in touch with us or book a photography session. We are committed to protecting your privacy and to handling your data in line with India's Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.
By using this website or our services, you agree to the practices described in this policy. If you do not agree, please do not use the website or share your information with us.
At a glance
We only collect what we need to plan, photograph and deliver your session.
We never sell or rent your personal information.
We ask before featuring your photos publicly — and you can change your mind at any time.
You can ask to see, correct or delete your information by emailing meghavk2002@gmail.com.
Information we collect
We collect personal information that you share with us directly, along with a limited amount of technical information collected automatically when you use this website.
Contact details — your name, phone number, email address and social media handle when you enquire by WhatsApp, phone, email or Instagram.
Booking and event details — dates, venues, timings, the names of the people to be photographed and any preferences you share so we can plan your session.
Photographs and video — images of you, your family and your guests captured during a session. Because images can identify you, we treat them as personal data.
Payment and billing details — invoice details, billing address and transaction references. Payments are handled by your bank or payment provider; we never see or store your card number, CVV or UPI PIN.
Communications — the messages, feedback and reviews you send us.
Technical information — IP address, browser and device type, pages visited and similar data collected through cookies and server logs.
How we use your information
We use your information only for clear, specific purposes connected to our work together:
Responding to your enquiries and sharing availability, packages and quotes.
Planning, photographing, editing and delivering your session, including private online galleries.
Preparing agreements and invoices, receiving payments and keeping accounting and tax records.
Sending service messages such as reminders, schedule changes and gallery delivery notices.
Maintaining, securing and improving this website, and understanding how visitors use it.
Meeting our legal obligations and protecting our rights.
We do not use your information for automated decision-making, and we will never send you marketing messages without your consent.
Your photographs
Your photographs are personal, and we treat them that way.
Portfolio use — with your permission, we may feature selected images on our website, Instagram and other social media, in print or in award submissions. We ask for this consent at the time of booking, and saying no will never affect your booking.
Changing your mind — you can withdraw consent at any time. We will remove the images from our website and social media within a reasonable time, although we cannot recall material that has already been printed or published by others.
Guests at events — guests are naturally photographed as part of event coverage. If you appear in one of our images and would like it removed from our portfolio, just let us know.
Children and newborns — we photograph children only with the consent of a parent or legal guardian, and we never publish a child's full name, location or other identifying details alongside their images.
Copyright — ByMegha Photography retains copyright in the images it creates. Your rights to use, print and share your images are set out in your booking agreement.
Why we are allowed to use your data
We process your personal data on the basis of the consent you give when you contact us, book a session or agree to portfolio use, and for legitimate uses permitted by law — such as providing a service you have asked for, meeting tax and accounting requirements or responding to lawful requests from authorities.
Where we rely on your consent, you can withdraw it at any time, as easily as you gave it. Withdrawing consent does not affect any processing that took place before you withdrew it.
How we share your information
We do not sell, rent or trade your personal information. We share it only when necessary to provide our services:
Trusted service providers — such as our website host, online gallery and cloud storage providers, photo labs and album printers, and payment processors. They may use your information only to provide services to us, and must keep it confidential.
Collaborators on your shoot — such as a second photographer or assistant working on your session, who are bound to keep your information confidential.
Messaging and social platforms — when you contact us through WhatsApp or Instagram, those messages are also processed by Meta Platforms under its own privacy policy.
Legal and safety reasons — where required by law, court order or a government authority, or to protect the rights, property or safety of ByMegha Photography, our clients or others.
Cookies and analytics
This website uses cookies — small text files stored on your device — to keep the site working properly, remember your preferences and understand how visitors use it. We may use analytics tools that report aggregated, non-identifying usage information.
Embedded content such as Instagram posts or maps may set its own cookies. You can block or delete cookies at any time in your browser settings, although some parts of the site may not work as intended if you do.
How long we keep your information
We keep personal information only for as long as we need it for the purposes described in this policy:
Enquiries that do not lead to a booking are deleted within 12 months.
Client galleries stay online for the period stated in your booking agreement. We keep a backup archive of delivered images for up to two years as a courtesy, but we recommend you keep your own copies safe.
Agreements, invoices and payment records are kept for as long as Indian tax and accounting laws require — typically up to eight years.
When information is no longer needed, we securely delete it or anonymise it.
How we protect your information
We follow reasonable security practices to protect your information, including encrypted (HTTPS) connections on this website, password-protected accounts and client galleries, secure backups of your images, and access limited to the people who need it to deliver your service.
No method of storing or sending information over the internet is completely secure, but we take great care to protect your data. If a personal data breach ever affects you, we will inform you and the relevant authorities as required by law.
Your rights
Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you have the right to:
Access — ask for a summary of the personal data we hold about you and how we use it.
Correction — ask us to correct, complete or update inaccurate information.
Erasure — ask us to delete your personal data, unless we must keep it to meet a legal obligation.
Withdraw consent — at any time, including consent for portfolio and social media use.
Grievance redressal — raise a concern with us and, if you are not satisfied with our response, approach the Data Protection Board of India.
Nomination — nominate someone to exercise these rights on your behalf in the event of death or incapacity.
To exercise any of these rights, email meghavk2002@gmail.com. We aim to respond within 30 days, and we may need to verify your identity before acting on a request.
Children's privacy
This website is not directed at children under 18, and we do not knowingly collect personal data from children online. Information about children — for example, for newborn, family or birthday sessions — is collected only from a parent or legal guardian, with their consent. If you believe a child has shared personal data with us without that consent, please contact us and we will delete it.
Third-party links
This website links to third-party services such as WhatsApp and Instagram. We are not responsible for the content or privacy practices of those services, and we encourage you to read their privacy policies before sharing information with them.
International clients and data transfers
Some of our service providers, such as cloud storage and email providers, may store data on servers outside India. Where this happens, we take reasonable steps to keep your information protected and transfer it only as permitted under Indian law.
If you live outside India — for example, if you are planning a destination wedding with us — you may have additional rights under the laws of your country, such as the EU or UK GDPR. We will respect those rights wherever they apply.
Changes to this policy
We may update this policy from time to time to reflect changes to our services or the law. The latest version will always be available on this page, with the date it was last updated shown at the top. If we make significant changes, we will let our current clients know directly.
Contact us
If you have a question about this policy, would like to exercise your rights or wish to raise a concern, please contact our Grievance Officer:
ByMegha
Weddings, portraits and new beginnings — captured with warmth and a timeless eye.
