Effective Date: August 01, 2025

Last Updated: June 11, 2026

Welcome to Pallavi Photography (https://pallaviphotography.com/). We highly value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, process, and safeguard your information when you visit our website, book a photography session, or utilize our secure digital client galleries.

This policy is designed to comply with the European Union General Data Protection Regulation (EU-GDPR) and the Swiss Federal Act on Data Protection (FADP).

1. DATA CONTROLLER

For the purpose of data protection laws, the entity responsible for collecting and processing your personal data is:

• Name: Pallavi Balijepalli
• Role: Independent Professional Photographer
• Location: Vevey, Switzerland
• Email: [email protected]

2. THE TYPES OF DATA WE COLLECT

We may collect and process the following categories of personal data depending on your interaction with our platform:

• Identity & Contact Data: Your full name, email address, physical address, and telephone number provided during inquiries, bookings, or account registration.
• Visual Media Assets: Digital photographs, portraits, and images captured during photography sessions that contain identifiable individuals.
• Technical & Usage Data: Your Internet Protocol (IP) address, browser type, device information, access times, and cookies detailing how you interact with our website and private client download galleries.

3. HOW WE USE YOUR DATA

We process your personal information only under valid legal bases, including contract fulfillment, legal obligations, and your explicit consent. Your data is used to:

• Manage bookings, respond to contact form inquiries, and deliver professional photography services.
• Provide secure, password-protected online client galleries for proofing and image downloads.
• Maintain transaction receipts, billing compliance, and accounting records.
• Ensure website security, optimize server performance, and prevent unauthorized access or malicious exploits.

4. DATA HOUSING, SECURITY & EU RESIDENCY

We implement strict technical and organizational security protocols to guarantee your data is completely isolated and safe.

• Physical Data Localization: All core system application code, high-resolution digital image assets, user authentication metadata, and website databases are deployed and stored exclusively within high-security, Tier III data center facilities physically located in Germany (European Union). This architecture strictly satisfies all EEA and Swiss geographic data residency and protection mandates.
• Infrastructure Security: Our server environment is ISO 27001 certified and features persistent AES-256 data-at-rest encryption and TLS 1.3 data-in-transit encryption.
• Edge Routing Proxy: Frontend web requests are securely routed through an enterprise network firewall distribution utility using European edge nodes to ensure IP traffic masking, anonymity, and network isolation.

5. CORE INFRASTRUCTURE SUB-PROCESSORS

Pursuant to Article 28 of the GDPR, we maintain strict Data Processing Agreements (DPAs) with authorized technical sub-processors to maintain operational cloud services.

• Our primary backend technical engineering, server systems maintenance, and infrastructure operations are managed securely by our core technology partner, DELQ Solutions (MSME-registered partnership firm, India).
• No personal data, client files, or image assets are sold, traded, or leased to third parties for marketing purposes.

6. DATA RETENTION

We store your personal data and digital imagery only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Client download galleries are archived or removed based on the specific timeline agreed upon in your individual photography service contract.

7. YOUR LEGAL PRIVACY RIGHTS

If you are a resident of Switzerland or the European Economic Area (EEA), you possess the following data protection rights under the FADP and GDPR:

• Right of Access: You have the right to request copies of the personal data we hold about you.
• Right to Rectification: You can request that we correct any information you believe is inaccurate.
• Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data under certain legal conditions.
• Right to Restrict or Object to Processing: You have the right to object to or restrict how your data is being handled.
• Right to Data Portability: You can request that we transfer your data to another organization or directly to you.

To exercise any of these rights, please contact us directly at [Insert Your Client’s Business Email]. We will respond to your request within the legally mandated 30-day window.

8. COOKIES

Our website utilizes essential functional cookies to verify your login credentials, secure private client galleries, and ensure optimal site performance. You can manage or disable cookies via your individual web browser settings, though doing so may limit your access to specific gallery functions.

9. UPDATES TO THIS POLICY

We reserve the right to modify this Privacy Policy at any time to reflect changing legal requirements or technical adjustments to our infrastructure. Any updates will be posted immediately to this page with an updated “Last Updated” timestamp.