Privacy Policy

Introduction

Sifr Studio (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and share your personal data when you visit our website (sifrpk.com), use our services (photography, events), or interact with us in any other way. We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. 

Data Controller

Sifr Studio is the data controller responsible for your personal data. Our contact details are:

• Phone: 0300-0907437
• Email: info@sifrpk.com
• Personal Data We Collect

We may collect the following types of personal data:

4. Contact Information:Name, email address, phone number, and postal address.  
5. Booking Information:Details of your bookings, including dates, times, services requested, and any special requirements.
6. Payment Information:Payment details (though we typically use secure third-party payment processors and do not store sensitive payment data directly).
7. Photographic and Video Data:Images and videos captured during photography sessions or events.
8. Website Usage Data:Information about how you use our website, including your IP address, browser type, and pages visited.
9. Marketing Data:Your preferences for receiving marketing communications from us.
10. Event Guest Information:Names and details of event attendees (if provided by you).
11. Lodging Information:Information given during a lodging booking, if applicable.
12. Prop and Styling Information:Information regarding props and styling preferences given during booking.

Legal Basis for Processing

We process your personal data based on the following legal bases:

• Consent:When you provide your explicit consent to process your data for a specific purpose (e.g., marketing).  
• Contract:When processing is necessary for the performance of a contract with you (e.g., providing photography services).
• Legal Obligation:When processing is necessary to comply with a legal obligation.
• Legitimate Interests:When processing is necessary for our legitimate interests, provided your rights and interests do not override those interests (e.g., improving our services).  

How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide and manage our services (photography, events).
• To process bookings and payments.
• To communicate with you about your bookings and inquiries.
• To send you marketing communications (with your consent).
• To improve our website and services.
• To comply with legal obligations.
• To protect our rights and the rights of others.
• To store images and videos from your session.
• To provide requested props and styling.

Sharing Your Personal Data

We may share your personal data with:

• Service Providers:Third-party service providers who assist us with website hosting, payment processing, marketing, and other services.
• Photographers and Event Staff:Our photographers and event staff who need access to your data to provide services.
• Legal Authorities:When required by law or to protect our rights.
• Third-party payment processors:For payment processing.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.  

• Booking Information:We retain booking information for [Number] years for record-keeping and customer service purposes.
• Photographic Data:We retain photographic data for [Number] years, unless otherwise requested by you.
• Marketing Data:We retain marketing data until you unsubscribe.

Your Rights Under GDPR

You have the following rights under GDPR:

• Right to Access:You have the right to request access to your personal data.
• Right to Rectification:You have the right to request that we correct any inaccurate or incomplete personal data.  
• Right to Erasure (Right to be Forgotten):You have the right to request that we delete your personal data.  
• Right to Restriction of Processing:You have the right to request that we restrict the processing of your personal data.  
• Right to Data Portability:You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object:You have the right to object to the processing of your personal data.  
• Right to Withdraw Consent:You have the right to withdraw your consent at any time, where we are relying on consent to process your personal data.  
• Right to lodge a complaint:You have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us at info@sifrpk.com.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction.  

• We use secure servers and encryption.  
• We restrict access to personal data to authorized personnel.
• We regularly review and update our security measures.

International Data Transfers

As Sifr Studio is located in Lahore, Pakistan, data is primarily processed and stored within Pakistan. If we transfer your personal data to countries outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your data.  

Cookies

Our website uses cookies to enhance your browsing experience. You can manage your cookie preferences through your browser settings.  

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website.  

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

• Email: info@sifrpk.com
• Phone: 0300-0907437