Privacy Policy

One Of A Kind Photography

Coimbatore, Tamil Nadu, India

• General queries: hello@ooak.photography
• HR / vendor onboarding: hr@ooak.photography
• Partnerships / referrals: partnerships@ooak.photography

For data-protection requests (access, correction, deletion), please email hr@ooak.photography with the subject line “Privacy request”.

• Client name, phone, event details — to deliver our photography services and stay in touch about your event.
• Client photographs — to produce your album / delivery, and (with your permission) showcase our work.
• Tribe / Partners applicant profile — to evaluate whether you’re a good fit for our craft team or partner network.
• KYC documents (PAN, address proof, selfie) — to verify your identity before sending assignments, sharing client data, or settling payments.
• GST details — to raise compliant tax invoices for the work you do for us.
• Website visitors’ usage data — to improve the site and measure marketing.
• Internal app data — to run our day-to-day operations.

We do not sell your personal information to anyone. We do not use your KYC documents for marketing, profiling, or any purpose other than verifying your identity as a Tribe or Partners member.

We rely on:

• Your consent — for KYC document collection, marketing emails, and showcasing client photos.
• Contract performance — to deliver services you booked or assignments we award you.
• Legal obligation — to keep records required by Indian tax and labour laws.
• Legitimate business interest — to operate the website, prevent fraud, and protect our team and clients.

You can withdraw consent at any time by emailing hr@ooak.photography (or hello@ooak.photography for client matters). Withdrawing consent for KYC means we cannot keep you on the platform; we will deactivate your account and follow the deletion rules in section 7.

Your information is accessed only by people who need it to do their job:

• OOAK staff — relevant operations, HR, finance, and creative team members.
• Service providers we use — cloud hosting (Cloudflare, AWS), payment processors, WhatsApp Business (Meta), email and SMS providers, and analytics tools. These providers process data only on our instructions and are bound by contracts that require confidentiality and security.
• Other Tribe / Partners members and clients — only the parts of your profile that are relevant to coordinating a shoot (e.g., name, phone, role on the event). Your KYC documents are never shared with other vendors, partners, or clients.
• Authorities — if we are required by law (court order, tax authority, law enforcement).

We do not transfer your personal data outside India unless a service provider hosts data in another region (e.g., regional data centres). We pick providers that meet recognised security standards.

• All data is stored on secured servers operated by reputable cloud providers.
• KYC files (PAN, address proof, selfie) are stored in encrypted object storage with restricted access. Only the OOAK onboarding team and authorised admins can view them.
• Internal staff access is controlled with role-based permissions and audit logs.
• Mobile apps use secure HTTPS connections for all data uploads.
• Passwords are stored as one-way hashes; we cannot see your password.
• We follow industry-standard security practices, but no system is 100% secure. If we ever detect a breach that affects your data, we will notify you and the relevant authorities as required by law.

• Client event records and photographs — while the engagement is active and for as long as needed for legal, tax, and archival purposes (typically up to 8 years).
• Active Tribe / Partners member profile — as long as you remain active.
• Rejected applicants — up to 6 months, then deleted.
• Deactivated profiles — profile retained 90 days for re-activation; KYC documents purged within 30 days unless legally required to retain.
• KYC documents (PAN, address proof, selfie) — retained only while you are active or onboarding, then deleted as above. We do not retain selfies after deactivation.
• Tax invoices and financial records — 7 years, as required by Indian tax law.
• Website analytics — up to 26 months.
• WhatsApp and chat history — while needed for operations; periodically archived.

If you want your data deleted earlier, email hr@ooak.photography. We will do so unless we are legally required to retain a record (in which case we will explain).

You can:

• Access the personal information we hold about you.
• Correct anything that is inaccurate or out of date.
• Withdraw consent for KYC, marketing, or photo showcasing.
• Request deletion of your data, subject to our retention obligations.
• Object to specific uses (e.g., ask us not to feature your event photos in marketing).
• Complain to the relevant data-protection authority if you believe we have mishandled your data. In India, you can approach the data-protection authority constituted under the Digital Personal Data Protection Act, 2023.

To exercise any of these rights, email hr@ooak.photography with the subject line “Privacy request”. We will respond within 30 days.

Our services, website, and mobile apps are not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.

Our website uses cookies for:

• Essential site functionality (e.g., remembering your login).
• Analytics (anonymised page views and traffic sources).
• Marketing performance measurement.

You can disable cookies in your browser. Some site features may not work without them.

Our website and apps may link to third-party sites (Instagram, Google, partner websites). This policy does not cover those sites. Please review their privacy policies separately.

We may update this policy from time to time. The “Last updated” date at the top will reflect any change. For material changes, we will notify active users by email or in-app. Please review this page periodically.

For any privacy-related question, request, or complaint:

• Email: hr@ooak.photography (KYC and vendor matters) · hello@ooak.photography (general)
• Subject line: “Privacy request”

We aim to respond within 30 days.