Carta Creations Privacy Policy

Section 01

Introduction

Carta Creations (“Company”, “We”, “Us”, “Our”) respects the privacy of every customer, visitor, supplier, vendor and business associate who interacts with us.

This Privacy Policy explains how we collect, receive, use, process, maintain, protect, disclose and retain personal information received through our website, showroom, social media platforms, WhatsApp Business, telephone conversations, electronic mail, customer enquiry forms and offline interactions.

Privacy is one of the fundamental values of our organization. We recognize that every customer entrusts us with valuable personal information, including photographs, wedding memories, creative designs and confidential communications. We are committed to ensuring that such information is processed responsibly and protected against unauthorized access, misuse, disclosure or alteration.

This Policy applies to all products and services offered by Carta Creations, including but not limited to:

  • Wedding Album Printing
  • Premium Photo Books
  • Designer Albums
  • Photo Frames
  • Personalized Gifts
  • Corporate Printing Services
  • Custom Printing Solutions

Section 02

Purpose of this Privacy Policy

The purpose of this Privacy Policy is to:

  • Explain what information is collected.
  • Explain why the information is collected.
  • Explain how the information is used.
  • Inform customers of their legal rights.
  • Describe security measures adopted by Carta Creations.
  • Explain circumstances under which information may be shared.
  • Demonstrate compliance with applicable Indian privacy laws.
  • Build customer confidence regarding protection of photographs and personal information.

Section 03

Definitions

Company

means Carta Creations.

Customer

means any individual, organization, business, photographer or representative who purchases or enquires about our products or services.

Personal Data

means any information relating to an identifiable individual including but not limited to name, address, mobile number, email address, photographs, payment information and communication records.

Processing

includes collection, recording, storage, organization, retrieval, consultation, modification, printing, sharing, deletion or destruction of personal information.

Website

means www.cartacreations.com

Services

means all products and services offered by Carta Creations.

Photographic Content

includes photographs, videos, RAW images, edited files, album layouts, artwork and creative designs provided by customers.

Section 04

Applicability

This Privacy Policy applies to information collected through:

  • Company Website
  • Showroom Walk-ins
  • WhatsApp Business
  • Telephone Calls
  • Email Communication
  • Social Media Platforms
  • Online Enquiry Forms
  • Offline Order Forms
  • Business Meetings
  • Corporate Sales Enquiries
  • Vendor Registration
  • Customer Feedback Forms

This Policy applies regardless of whether services are availed physically or digitally.

Section 05

Information We Collect

Depending upon the nature of the transaction, Carta Creations may collect one or more of the following categories of information:

A. Business Information

  • Company Name & Company Legal Name
  • GST Number & Company Registered Number
  • Billing Details
  • Shipping Address
  • Authorized Representative Details

B. Order Information

  • Event Name
  • Wedding Date
  • Album Specifications
  • Printing Preferences
  • Quantity Ordered
  • Delivery Instructions

C. Digital Content

  • Wedding Photographs
  • RAW Images
  • Edited Images
  • Album Layouts
  • Design Files
  • Logos
  • Artwork

D. Technical Information

While using our website, we may automatically collect:

  • Browser Type
  • Device Type
  • Operating System
  • IP Address
  • Cookies
  • Date & Time of Visit
  • Pages Viewed
  • Website Usage Statistics

Section 06

Sources of Information

Personal information may be collected directly from:

  • Customers
  • Family members authorized by customers
  • Photographers
  • Wedding studios
  • Business partners
  • Corporate clients
  • Company website
  • WhatsApp Business
  • Email communication
  • Telephone conversations
  • Physical documents submitted during order placement

Carta Creations shall only collect information that is reasonably necessary for providing its products and services.

Section 07

Purpose of Processing Personal Information

Carta Creations processes personal information only for legitimate business purposes and in accordance with applicable laws. The information collected from customers shall be used solely for purposes connected with the Company’s products and services.

The primary purposes include:

7.1 Customer Identification

To verify customer identity before accepting orders, providing quotations, processing payments and delivering finished products.

7.2 Order Processing

To prepare quotations, generate invoices, confirm specifications, manufacture products and complete delivery of:

  • Wedding Albums
  • Premium Photo Books
  • Photo Frames
  • Personalized Gifts
  • Corporate Printing Products
  • Custom Creative Products

7.3 Customer Communication

To communicate regarding:

  • Order Confirmation
  • Artwork Approval
  • Design Changes
  • Printing Status
  • Delivery Updates
  • Warranty Support
  • Customer Service

Communication may occur through:

  • Telephone
  • SMS
  • WhatsApp
  • Email
  • Website Contact Forms

7.4 Legal Compliance

The Company may process personal information to:

  • Comply with applicable laws.
  • Maintain accounting records.
  • Issue tax invoices.
  • Respond to lawful governmental requests.
  • Resolve disputes.

Section 08

Customer Photographs & Confidentiality

Carta Creations understands that customer photographs often contain irreplaceable personal memories, family events and confidential moments.

Accordingly:

  • Customer photographs shall be treated as confidential.
  • Employees shall access photographs only when necessary to perform their assigned responsibilities.
  • Photographs shall not be copied for personal use.
  • Employees shall not download customer photographs onto personal devices.
  • Photographs shall not be transferred outside the Company’s authorized systems unless required for production.
  • Unauthorized sharing of customer photographs is strictly prohibited.

Any employee violating this policy may be subject to disciplinary action, including termination of employment and legal proceedings where applicable.

Section 09

Raw Images, Design Files & Digital Assets

Customers may submit:

  • RAW Camera Files
  • JPEG Images
  • PSD Files
  • AI Files
  • PDF Artwork
  • Album Layouts
  • Logo Files

These digital assets shall be used solely for producing the requested products.

Carta Creations shall not claim ownership over customer-supplied photographs or artwork.

The Company may maintain backup copies during the project lifecycle for operational continuity and quality assurance.

Section 10

Intellectual Property Rights

10.1 Customer Ownership

Unless otherwise agreed in writing:

  • Customers retain ownership of their original photographs.
  • Photographers retain copyright over photographs they create.
  • Customers warrant that they possess the necessary rights to submit photographs for printing.

10.2 Company Ownership

Carta Creations retains ownership of:

  • Company Logo
  • Website Design
  • Marketing Materials
  • Album Templates
  • Design Concepts created independently
  • Software Systems
  • Printing Methodologies
  • Business Processes

Section 11

Social Media & Portfolio Consent

Carta Creations values customer privacy.

Accordingly, the Company shall not publish customer photographs on:

  • Website
  • Facebook
  • Instagram
  • YouTube
  • Printed Brochures
  • Promotional Catalogues
  • Exhibitions

unless:

  • The customer has provided prior written consent; or
  • The customer has voluntarily authorized such publication.

Customers may withdraw such consent at any time by contacting the Company.

Withdrawal shall apply to future publications and shall not affect materials already lawfully published.

Section 12

WhatsApp, Email & Telephone Communications

The Company may communicate with customers using:

  • WhatsApp Business
  • Email
  • Telephone
  • SMS

These communications may include:

  • Quotations
  • Design Proofs
  • Approval Requests
  • Delivery Updates
  • Customer Support
  • Promotional Information

Customers may opt out of promotional communications at any time.

Transactional communications relating to existing orders may continue where reasonably necessary.

Section 13

Data Retention Policy

Carta Creations retains personal information only for as long as reasonably necessary.

Retention periods may vary depending upon:

  • Nature of the Order
  • Warranty Requirements
  • Customer Support
  • Accounting Regulations
  • Legal Requirements

Where information is no longer required, reasonable steps shall be taken to securely delete or anonymize such information.

Archived files shall remain protected by the same security standards applicable to active records.

Section 14

Website Cookies & Analytics

The Company’s website may use cookies to:

  • Improve browsing experience.
  • Remember customer preferences.
  • Analyze website traffic.
  • Enhance website functionality.
  • Improve marketing effectiveness.

Cookies do not ordinarily identify customers personally unless voluntarily linked to personal information.

Customers may disable cookies through their browser settings. However, certain website functions may become unavailable.

The Company may also use analytics tools to understand:

  • Visitor Trends
  • Popular Pages
  • Device Types
  • Geographic Regions
  • Website Performance

Such information is generally used in aggregated form.

Section 15

Disclosure to Third Parties

Carta Creations does not sell, rent or trade customer personal information.

Personal information may be disclosed only where necessary to:

  • Printing Vendors
  • IT Service Providers
  • Website Hosting Providers
  • Legal Advisors
  • Chartered Accountants
  • Government Authorities
  • Law Enforcement Agencies

Every reasonable effort shall be made to ensure that third parties receiving customer information maintain appropriate confidentiality obligations.

Section 16

Information Security

Carta Creations implements reasonable administrative, technical and physical safeguards to protect personal information.

Security measures may include:

  • Password Protected Systems
  • Role-Based Access Controls
  • Antivirus Protection
  • Secure Backup Procedures
  • Employee Confidentiality Obligations
  • Controlled Access to Customer Files

Despite reasonable precautions, no electronic storage system or internet transmission can be guaranteed to be completely secure. Customers acknowledge this inherent limitation.

Section 17

Customer Rights Under the DPDP Act, 2023

Carta Creations recognizes and respects the rights of every Data Principal (customer) under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Subject to applicable law, customers may exercise the following rights:

17.1 Right to Access

Customers may request confirmation regarding whether Carta Creations processes their personal information and may request access to such information.

17.2 Right to Correction

Customers may request correction, completion or updating of inaccurate or incomplete personal information maintained by the Company.

17.3 Right to Erasure

Customers may request deletion of personal information that is no longer necessary for the purposes for which it was collected, subject to legal, accounting and contractual obligations.

Where deletion is not legally permissible, the Company shall communicate the reasons to the customer.

17.4 Right to Withdraw Consent

Where processing is based on consent, customers may withdraw such consent at any time.

Withdrawal shall not affect the lawfulness of processing carried out prior to such withdrawal.

17.5 Right to Grievance Redressal

Customers may raise concerns regarding privacy, misuse of personal information or any violation of this Privacy Policy through the Grievance Officer appointed by Carta Creations.

The Company shall make reasonable efforts to acknowledge complaints promptly and resolve them within a reasonable period.

Section 18

Customer Responsibilities

Customers are responsible for ensuring that:

  • Information submitted is accurate and complete.
  • They possess legal rights to photographs submitted for printing.
  • Submitted photographs do not violate copyrights or intellectual property rights of third parties.
  • They review and approve album layouts and design proofs before production.
  • They immediately notify the Company if they discover any unauthorized use of their account or information.

Carta Creations shall not be responsible for losses arising from incorrect information supplied by customers.

Section 19

Data Breach Management

Carta Creations maintains internal procedures to respond to suspected or confirmed data security incidents.

In the event of a data breach, the Company shall:

  • Investigate the nature and extent of the incident.
  • Take immediate steps to contain and mitigate the impact.
  • Restore affected systems where feasible.
  • Preserve relevant evidence.
  • Notify affected individuals or competent authorities where required by applicable law.
  • Review existing security measures and implement corrective actions.

The Company shall maintain records of significant security incidents for internal compliance purposes.

Section 20

Limitation of Liability

While Carta Creations implements reasonable safeguards to protect customer information, no electronic transmission, internet communication or digital storage system can be guaranteed to be completely secure.

Accordingly:

  • The Company shall not be liable for unauthorized access arising from events beyond its reasonable control, including cyber-attacks, internet outages, malware, force majeure events or failures of third-party infrastructure.
  • Nothing in this Policy limits liability where such limitation is prohibited under applicable law.

Section 21

Third-Party Websites

The Company’s website may contain links to third-party websites or services.

Carta Creations does not control, endorse or assume responsibility for the privacy practices or content of such third-party websites.

Customers are encouraged to review the privacy policies of any external websites they visit.

Section 22

Policy Review and Amendments

Carta Creations reserves the right to modify, amend or update this Privacy Policy from time to time to:

  • Reflect changes in business operations.
  • Comply with changes in applicable laws.
  • Improve customer privacy protections.
  • Enhance operational procedures.

Updated versions of this Policy shall be published on the Company’s website.

Continued use of the Company’s services after publication of an updated Privacy Policy constitutes acceptance of the revised Policy.

Section 23

Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of India.

Any dispute arising out of or relating to this Policy shall be subject to the exclusive jurisdiction of the competent courts located in Chennai, Tamil Nadu.

Where applicable, the parties shall first attempt to resolve disputes through good-faith discussions before initiating formal legal proceedings.

Section 24

Grievance Officer

In accordance with applicable privacy laws, Carta Creations has designated the following individual to address privacy-related concerns:

Customers may submit requests regarding:

  • Access to personal information.
  • Correction of information.
  • Withdrawal of consent.
  • Complaints relating to privacy.
  • Questions regarding this Privacy Policy.

Section 25

Contact Details

For any questions relating to this Privacy Policy or the Company’s data protection practices, please contact: