Halo Hush Studios

Privacy Policy

Effective 1 January 2026 · Last updated 1 March 2026

Halo Hush Studios & Portraits By KAA ("Halo Hush Studios", "we", "us") is a photography studio in Chennai, India. This policy explains what we collect, why, how long we keep it, and what you can ask us to do about it.

The part that matters: we will never publish a photograph of your family without asking you first, in writing, and getting your agreement in writing. Declining costs you nothing and changes nothing. We never sell or license your images to anyone, for any purpose.

1. What we collect

  • Contact details: your name, email address and phone number, given when you enquire, book, apply for a role or subscribe to updates.
  • Session details: the occasion, the date, your child’s age, the theme you have chosen, and anything you tell us that affects how the session should run — an allergy, a difficult sleeper, a relative travelling in.
  • Photographs: the images taken during your session. These are personal data about you and your family, and they are the most sensitive thing we hold.
  • Payment details: processed by our payment provider. Card numbers never reach our servers and we do not store them.
  • Website usage: IP address, browser type, pages visited and referring site, collected through analytics cookies.
  • Job applications: your CV, portfolio and the details on your application form, if you apply to work with us.

2. Why we collect it

  • To plan and photograph your session, and to reach you about it.
  • To deliver your gallery, and to answer questions about it afterwards.
  • To keep the promises in our booking terms — a health note you give us changes how we run the session.
  • To send occasional studio updates, if and only if you have opted in. You can unsubscribe from any email in one click.
  • To meet our legal and tax obligations, which is why invoices are retained for the statutory period.
  • To understand how the website is used, in aggregate, so we can improve it.

3. Photographs of your family

  • This is the section that matters most, so it is stated plainly: we will not publish any photograph of you or your child anywhere — website, social media, portfolio, print, competition entry, advertisement — without asking you first in writing and receiving your agreement in writing.
  • That consent is separate from your booking. Declining changes nothing about your session, your images, your delivery or your price. You do not have to give a reason.
  • You can withdraw consent at any time. Tell us and we will remove the images from our own channels within 7 working days. We cannot recall material already printed or already reshared by other people, and we would rather say so honestly than promise otherwise.
  • Where we do publish with consent, we never include a child’s full name, date of birth, school, or any location more specific than the city, unless you have specifically asked us to.
  • We never sell, license or supply your images to stock libraries, advertisers, AI training datasets or any other third party. There is no version of this business where that changes.
  • For images of children, consent is given by a parent or legal guardian.

4. Who we share data with

  • We do not sell, rent or trade your personal information to anyone.
  • We use a small number of service providers to run the studio: a website host, an email provider, an analytics provider, a payment processor, a gallery delivery platform and a print lab. Each receives only what it needs to do its job.
  • Print labs receive the specific images being printed and a delivery address. Nothing else.
  • We may disclose information where the law requires it — a court order, or a lawful request from an authority.
  • If the studio were ever sold or merged, your data would transfer to the new owner. We would notify you before that happened, so you could ask for deletion first.

5. How long we keep it

  • Enquiries that do not become bookings: 12 months, then deleted.
  • Your gallery: available to you for 12 months from delivery. Please download and back up your images within that period — we are not a backup service, and we will remind you before a gallery expires.
  • Master files: retained for 3 years after your session so we can reprint or re-edit if you ask, then deleted. Tell us at any point if you would rather they were deleted sooner and we will do it.
  • Invoices and tax records: kept for the period Indian tax law requires. We cannot delete these earlier, even on request.
  • Job applications: 12 months, unless you ask us to keep you on file for longer.
  • Marketing contacts: until you unsubscribe or ask for deletion.

6. Security

  • The site runs over TLS. Galleries are private links rather than public pages, and can be password protected on request.
  • Session files are held on encrypted storage, with access limited to the team members working on your session.
  • Everyone at the studio is bound by a confidentiality agreement that covers client images specifically.
  • We keep backups, because losing a family’s only newborn photographs is not a recoverable mistake.
  • No system is perfectly secure and we will not claim otherwise. If a breach ever affected your data, we would tell you promptly and directly rather than burying it in a notice.

7. Cookies

  • Essential cookies: needed for the site to function — session handling and security. These cannot be switched off.
  • Analytics cookies: help us see which pages people actually read, in aggregate. We do not use them to build a profile of you.
  • We do not run advertising or cross-site tracking cookies on this website.
  • You can manage cookies through your browser settings. Blocking essential cookies may stop parts of the site working.

8. Your rights

  • Access: ask for a copy of the personal data we hold about you.
  • Correction: ask us to fix anything inaccurate.
  • Deletion: ask us to erase your data, including your photographs, subject only to records we are legally required to retain.
  • Withdraw consent: for publication of your images, or for marketing emails, at any time.
  • Portability: ask for your data in a structured, machine-readable format.
  • Object: tell us to stop processing your data for a particular purpose.
  • To exercise any of these, email us. We respond within 30 days, and usually within a week. You do not need to explain why.

9. Children’s data

  • Most of what we hold concerns children, and we treat it accordingly.
  • A parent or legal guardian provides all information about a child and holds all rights over it, including the right to demand deletion of their photographs.
  • We do not knowingly collect data directly from children. This website is not directed at them.
  • We never publish identifying details about a child alongside their image.

10. Where your data is held

  • Primarily in India. Some service providers — analytics and email in particular — process data outside India.
  • Where data leaves India, we rely on providers that offer appropriate contractual safeguards.
  • This policy is written to align with the Digital Personal Data Protection Act, 2023.

11. Changes to this policy

  • We may update this policy. Changes are posted on this page with an updated date.
  • Where a change materially affects how we handle your photographs, we will contact you directly rather than relying on you noticing a website update.

Contact us

For anything in this policy — including asking us to delete your photographs — email hello@halohush.in or write to Halo Hush Studios & Portraits By KAA, No. 10, Goparasanallur, MCA Nagar, Royal Garden, Kattupakkam, Chennai 600056, India.