Draft. This text is waiting for review by our legal adviser and may change. The version and date below show which text applies.
This policy explains how QuickPhotos.co ("we") handles personal data of visitors, clients and professionals under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. What we collect
•
Account: email address, and the phone number you verify or message us from; display name; language and city.
•
Client requests: the city, kind of shoot, date, budget, notes, your name, phone and email.
•
Professional profiles: business name, city and service areas, bio, links, pictures and portfolio, ratings and experience points, and connect activity.
•
Support and complaints: what you write to us and the details you give.
•
Technical data: a one-way hash of your network address, device and browser type, and security logs. Analytics run only if you accept analytics cookies.
2. Why we use it and on what basis
To run the marketplace (introduce clients and professionals, verify accounts, send notifications you asked for, prevent abuse and fraud, answer support, keep records the law requires). We rely on your consent, which you give when you send an inquiry, create a profile or accept analytics cookies, and on the uses the Act allows without consent, such as legal obligations. You can withdraw consent at any time; that does not affect what was done before.
3. Who sees it
•
Professionals who unlock your request see your name, phone, email and the request details. Before unlocking they see only a masked version.
•
Service providers that work for us under contract: hosting and security (Cloudflare), file storage (Google Cloud Storage), email delivery, WhatsApp messaging (Meta), and analytics (Google Analytics, only with consent).
•
Authorities where the law requires it. We do not sell personal data.
4. How long we keep it
Client contact details on a request are deleted 12 months after the request closes or expires. Support tickets are anonymised after 24 months. Sign-in codes, message logs and technical logs are deleted after short periods (days to months). Records of how connects were spent and audit records are kept as long as needed for accounting and safety, without personal contact details. When you delete your account we remove or anonymise your personal data within 30 days, except what we must keep by law.
5. Your rights
You can ask to see the data we hold about you (use "Download my data" in your account), correct it, have it erased (use "Delete my account"), and complain. You may nominate someone to exercise your rights if you cannot. Write to quickphotosco@gmail.com or use the Grievance page.
6. Children
QuickPhotos is not for people under 18. A photographer who shows a child in a picture must have the consent of a parent or guardian, as the Content and Copyright Policy requires.
7. Security and transfers
We protect data with access controls, encryption in transit, hashed network addresses, masked contact details and audit logs. Our providers may store data outside India; we choose providers that protect it to a comparable standard.
8. Changes and contact
We publish each version of this policy with its date. Data Protection and Grievance Officer: Meenal Gupte, quickphotosco@gmail.com, Indore, India.