Privacy Policy
Official Privacy Notice for Ranjan Bhattacharya Photography. Details data collected, usage, and your DPDP Act 2023 rights (Access, Erasure) & Cookie Policy reference.
Official DPDP Notice:
(Last Updated: 02-10-2025)
This document describes how Ranjan Bhattacharya (www.ranjanb.com) ("Data Fiduciary," "we," "us," or "our") collects, uses, protects, and discloses the Personal Data of individuals who visit our website, use our services, or interact with our content ("Data Principal," "you," or "your").
Mandatory Notice: This document serves as the mandatory Notice under the Digital Personal Data Protection Act, 2023 (DPDP Act, informing you of your rights and our obligations concerning your Personal Data.
Consent Clause: By accessing or using our website, submitting a contact or quotation form, or registering for our community platform, you freely give your specific, informed, and unconditional consent to the processing of your Personal Data as described in this Policy. You have the right to revoke this consent at any time (See Section 3).
The document you are currently reading is our comprehensive Privacy Policy, which governs how we handle your personal data.
These terms of service ("Terms," "Agreement") set forth the contractual rules for using this website and our Services. By continuing to use the website, you acknowledge that you have also read and agreed to the full legal guidelines outlined in our separate Terms of Service document (Please ensure this is linked elsewhere on your site). If you do not agree to those Terms of Service, you must discontinue the use of our Services immediately.
We collect and process Personal Data strictly adhering to the principles of Data Minimisation and Purpose Limitation. This means we only collect data that is necessary for specified, explicit, and legitimate purposes related to providing photography and cinematography services.
We collect the following categories of data for the specified purposes:
Identity/Contact Data: (e.g., Name, Email Address, Phone Number, Mailing Address). Purpose: To fulfil service requests, manage service contracts, and provide direct communication (Contractual Necessity).
Financial Data: (e.g., Billing address, Transaction details excluding direct card details). Purpose: To process payments for services and maintain mandated financial and tax records (Legal Obligation).
Technical/Usage Data: (e.g., IP Address, Browser type, Device OS, Pages Visited). Purpose: To analyse website performance, ensure site security, and optimise user experience (Legitimate Interest/Consent for Analytics).
Communication Data: (e.g., Blog comments, Direct email correspondence, Testimonials). Purpose: To facilitate community interaction, respond to user queries, and manage user feedback (Consent/Legitimate Interest).
Media Data: (e.g., uploaded images or project briefs). Purpose: To fulfil the core contractual obligation of professional photography/cinematography services.
As a Data Principal, you are granted several statutory rights under the DPDP Act 2023 concerning your Personal Data. You may exercise any of these rights by formally contacting our Grievance Contact Person (GCP) (See Section 7):
Your Rights Include:
- Right to Access: The right to obtain information about your Personal Data processed by us, including the categories and processing purposes.
- Right to Rectification: The right to correct or update inaccurate, incomplete, or misleading Personal Data.
- Right to Erasure (Deletion): The right to request the deletion of your Personal Data when the purpose for which it was collected is no longer being served, or upon revocation of your consent.
- Right to Data Portability: The right to receive your Personal Data in a structured, commonly used, and machine-readable format.
- Right to Revoke Consent: The right to withdraw your consent to processing at any time. Withdrawal of consent will result in the immediate cessation of data processing and subsequent deletion of your data, unless retention is required by law.
- Right of Nomination: The right to nominate an individual to exercise your rights under the DPDP Act in the event of their death or incapacity.
- 
Grievance Mechanism: We have an accessible internal grievance redressal mechanism. You must first engage with our Grievance Contact Person (GCP) to resolve any issues related to your data rights or this Policy. Only if your grievance remains unsolved after utilising our internal mechanism, you retain the right to file a complaint with the Data Protection Board of India (DPB).
 
Third-Party Data Processors: We share your Personal Data with third-party Data Processors (e.g., website hosting, email communication, payment gateways) that assist in delivering our services. We contractually ensure these processors comply with required security safeguards.
Google Analytics: We use Google Analytics to measure website traffic and performance. This tool collects Technical/Usage Data via cookies. This use is mandatory to disclose, and you can opt out by using the Google Analytics opt-out browser add-on.
Social Media Integration: Our website includes social media links (e.g., Facebook, Instagram, LinkedIn). When you visit a page with this embedded content or click these links, the respective social media provider may collect your IP address and place their own tracking cookies for statistical or marketing purposes. This external tracking is governed entirely by their own privacy policies.
External Links Disclaimer: We assume no responsibility or liability for the content, security practices, or privacy policies of any external websites linked from our platform.
Cookies are small pieces of text sent to your browser that help the website remember information about your visit and user preferences. Since cookies that can identify an individual are treated as Personal Data, we are required to inform you about their use.
For comprehensive details on the specific cookies used, their purpose, and your controls over them, please refer to our separate, detailed [Cookie Policy] document. 
Types of Cookies Used:
- Necessary (Functional) Cookies: These are essential for the website to perform basic functions (e.g., maintaining login sessions, remembering language settings).
- Analytical/Performance Cookies: Non-essential cookies used to measure traffic and performance (e.g., Google Analytics).
- Third-Party/Marketing Cookies: These may be placed by our social media partners or advertising services to build user profiles for custom advertising.
Your Control Over Cookies: We use a technical consent management system (e.g., a banner) to obtain your explicit, opt-in consent for non-essential cookies. You can also manage, delete, or reject cookies entirely through your web browser settings.
 
Data Security Safeguards: We are obligated to take reasonable security safeguards to protect the Personal Data in our control. Our measures include using Secure Socket Layer (SSL) encryption for data transmission, firewalls, strong access controls, and regular system backups.
Data Retention Policy: We will delete or anonymise your Personal Data as soon as the specific purpose for which it was collected has been fulfilled, or when you withdraw your consent (Principle of Erasure). We only retain data beyond this period if strictly necessary for legal, tax, or accounting obligations. We will retain some technical logs for at least one year to support breach detection and investigation, as per recommended security measures.
Breach Notification: In the event of a Personal Data Breach, we are legally obligated to immediately notify the Data Protection Board (DPB) and each affected Data Principal (you).
Notification of Changes: We may update this Policy to reflect changes in our data processing practices or legal requirements. We will notify you of any material changes (i.e., changes that significantly alter how your data is collected or used) through a prominent notice on the website.
Comprehensive Contact Details:
1. General Inquiries (Non-Privacy Related):
Ranjan Bhattacharya
Email: hello@ranjanb.com
Phone: +91 983-001-9666
2. DPDP Grievance (Mandatory Legal Channel):
For exercising Data Principal Rights (Access, Erasure, Rectification, etc.) and filing official DPDP complaints, please contact our dedicated Grievance Contact Person (GCP):
Grievance Contact Person (GCP):
Nicola Gomes
Dedicated Email (GCP): nicola@ranjanb.com