Privacy Policy

Who we are

Sudhanshu Photograpgy — Photography & Videography Services - Finland, trading as SR Creative Studio Oy, is the controller of the personal data described in this policy.

• Address: leinelänkaari 21, Vantaa, Finland
• Business ID: 3641064-2
• Contact person: Sudhanshu Verma
• Email: sudhanshu.vermatcs@gmail.com
• Phone: +358504775772

What we collect and why

We use the personal data described below to answer your enquiries, to carry out work we agree with you, to meet our legal obligations and to understand how this site is used. Each purpose is set out below with the legal basis we rely on.

Contact

When you send us a message through this form we collect what you type into it: name, email, date / occasion and brief. We use it to answer you and, if you want to go ahead, to prepare a quote or a booking.

The site also sends you an automatic email confirming that we received your message.

Filling in the form is entirely up to you. We cannot answer you if you do not give us a way to reply.

Legal basis: steps taken at your request before entering a contract, and our legitimate interest in answering people who contact us (GDPR Art. 6(1)(b) and Art. 6(1)(f)).

Booking and invoicing

If you book us, we use your contact and booking details to carry out the work we agreed, to issue an invoice, and to keep the accounting records the law requires us to keep.

Legal basis: performance of our contract with you, and our legal obligations (GDPR Art. 6(1)(b) and Art. 6(1)(c)).

Other ways you reach us

You can also contact us on WhatsApp and by direct message on Instagram. Messages you send that way are held by that service as well as by us, under that service's own privacy policy, and we use them for the same purpose: answering you and arranging work.

Legal basis: steps taken at your request before entering a contract, and our legitimate interest in answering people who contact us (GDPR Art. 6(1)(b) and Art. 6(1)(f)).

Measuring how this site is used

When you open a page, this site records a visit. Each visit records:

• which page was opened and when
• how long the page was open and how much of that time it was actually in view
• how far down the page the visitor scrolled and which sections came into view
• which links and buttons were clicked, whether a form was started or sent, and whether a booking was completed
• the kind of device (desktop, mobile or tablet)
• the website or campaign the visit came from, if any

We keep each of these records for 14 months, after which it is deleted automatically.

This measurement uses no cookie and stores nothing on your device, and it keeps no record of your IP address. Each visit is given a random reference so that the pages of one visit can be joined up, and that reference is never written to your device — it exists only while the page is open, so it cannot recognise you when you come back.

Legal basis: our legitimate interest in understanding how our pages are read and which of them lead to an enquiry (GDPR Art. 6(1)(f)).

Beyond this website

When you book us for a wedding or family session, we take and edit your photographs using our cameras and editing equipment. We store the edited images and your contact details so we can deliver the final photographs to you and respond to any questions or requests you may have about your session. We also keep a record of the date and details of your occasion to help us organize our work and communicate with you about your booking.

We do not make decisions about you by automated means and we do not build a profile of you.

Cookies

This site sets one cookie of its own, geo-country. It holds the two-letter code of the country you are visiting from, it is only set when your country is known, and it expires after 24 hours.

We set no other cookies. We do not use cookies to build a profile of you and we do not use cookies to show you advertising.

Who receives your data

We do not sell your personal data and we do not share it for anyone else's advertising.

These companies handle your data on our behalf and only on our instructions:

• Lessgo AI — runs this website, stores the messages sent through its forms, and sends the notification and automatic reply emails. It stores this data in Frankfurt, Germany. The code that receives and handles it may run in other regions.
• Vercel Inc. — hosts this website, runs the code that receives what you send through its forms, and delivers its pages and images. It processes this data in the United States. Transfers outside the EEA are covered by the European Commission's standard contractual clauses, under Vercel's data processing agreement.
• Resend (Plus Five Five, Inc.) — delivers the notification and automatic reply emails. It processes this data in the United States. Transfers outside the EEA are covered by the European Commission's standard contractual clauses, incorporated into its data processing agreement.

Photographs and files shown on this site are stored in the same hosting file storage and are served from it to your browser.

Vercel Inc. and Resend process your data outside the EEA. Those transfers are covered by the safeguards named above; you can ask us for a copy by emailing sudhanshu.vermatcs@gmail.com.

These services also receive your data, but they decide for themselves what they do with it, under their own privacy policies — they are not acting on our instructions:

• WhatsApp — carries the messages you send us there.
• Instagram — carries the direct messages you send us there.

How long we keep it

• Enquiries that do not lead to a booking: we delete them after 24 months.
• Invoices and the records behind them: we keep them for 6 years after the end of the accounting year, because Finnish bookkeeping law requires it.
• Work we did for you, and the messages about it: we keep them while the contract runs and for the bookkeeping period above.
• Visit records: we keep them for 14 months from the visit, after which they are deleted automatically.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct it if it is wrong (rectification);
• delete it (erasure);
• pause what we do with it while a question about it is settled (restriction);
• hand it to you or to someone else in a machine-readable file (portability);
• stop using it where we rely on our legitimate interest (objection);
• withdraw your consent, where we asked for consent, at any time.

To use any of these rights, email us at sudhanshu.vermatcs@gmail.com. We answer within one month. Withdrawing consent does not undo what we lawfully did before you withdrew it.

If you think we are handling your personal data wrongly, you can complain to Tietosuojavaltuutetun toimisto (tietosuoja.fi). You can also complain to the data protection authority of the EU country where you live, where you work, or where you think the problem happened.

Children

This site is not aimed at children. In Finland a child can agree to online services from the age of 13; below that age a parent or guardian has to agree. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, email us at sudhanshu.vermatcs@gmail.com and we will delete it.

Changes to this policy

We update this policy when this site changes or when the way SR Creative Studio Oy works changes. The date shown at the top of this page is the date of the version you are reading.