At Memory Box, we understand the sensitive and personal nature of your event photos and guest information. This Privacy Policy outlines how we collect, use, store, and protect your personal data and image files. Your privacy is our top priority, and we are committed to maintaining the confidentiality and security of all information entrusted to us.

1. Data Collection

We collect only the necessary information required to provide our photobooth services:

• Contact Data: Client name, email address, phone number, event date, event location, and event type (wedding, corporate, party, etc.) - collected during booking for service delivery and communication.
• Image Data: All photographs and videos captured during the photobooth session at your event - collected with implicit consent as part of the photobooth service.
• Guest Data: Guest names and contact information (if requested) for digital photo sharing and download links.
• Payment Data: Transaction details and payment method information - securely processed through authorized payment gateways only.

2. Data Usage & Sharing

Contact Data is used solely for service provision including event coordination, sending booking confirmations, payment reminders, and delivery of digital photos. With your explicit consent, we may use contact data for marketing communications about new services or special offers. We never share contact data with third parties without your permission.

Image Data is shared only with: (1) the event host/Client who booked the service, (2) individual guests who explicitly request their own digital copies via QR codes or personalized links, and (3) our trusted cloud storage provider for secure backup and delivery. We do not sell, license, or share image data to third parties for commercial purposes. We do not use your photos for marketing or advertising without explicit written consent.

3. Data Retention and Deletion

Image Data: All photographs and videos are securely stored in encrypted cloud storage for a period of 90 days following your event to allow guests to download copies and to process potential reprint requests. After 90 days, all images are permanently deleted from our servers through secure deletion methods. If you request longer retention, we can arrange extended storage with a written agreement.

Contact Data: Client contact information is retained for 2 years for record-keeping and warranty purposes. You may request deletion of your contact data at any time, which will be processed within 30 days. Guest contact data is deleted after 90 days unless they request permanent retention.

4. Data Security

We implement industry-standard security measures to protect your data including:

• End-to-end encryption for all data transmission
• Secure cloud storage with multi-factor authentication
• Regular security audits and penetration testing
• Firewall protection and intrusion detection systems
• Restricted access to data - only authorized personnel can view client and image information
• Compliance with GDPR and data protection regulations

5. Your Rights and Data Access

You have the following rights regarding your personal and image data:

• Right to Access: Request a copy of all personal and image data we hold about you
• Right to Deletion: Request deletion of your data before the 90-day retention period ends
• Right to Correction: Request correction of inaccurate personal information
• Right to Opt-Out: Opt-out of marketing communications at any time
• Right to Data Portability: Request your data in a portable format for transfer to another service
• Right to Withdraw Consent: Withdraw your consent for specific data uses at any time

6. Cookies and Tracking

Our website uses basic analytics cookies to understand how visitors use our site (page views, session duration, etc.). These cookies do not collect personally identifiable information. You can disable cookies in your browser settings if preferred. We do not use tracking cookies or sell data to advertisers.

7. Third-Party Services

We use third-party services for cloud storage, email delivery, and payment processing. These providers are bound by confidentiality agreements and comply with data protection regulations. We carefully vet all third-party partners to ensure they meet our security standards. We do not allow third parties to use your data for their own marketing purposes.

8. International Data Transfers

Your data may be transferred to secure cloud servers outside India for backup and disaster recovery purposes. These transfers comply with international data protection standards and are protected by encryption. By using our services, you consent to such transfers.

9. Children's Privacy

Memory Box does not knowingly collect personal information from children under 13. All photobooth bookings must be made by individuals 18 years or older. Photos of children taken at events are considered part of the event coverage and are subject to the same retention and sharing policies as all other event photos.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. Any changes will be posted on this page with an updated "Last Updated" date. We will notify you of significant changes via email if you have provided contact information. Your continued use of our services following the posting of revised Privacy Policy means that you accept and agree to the changes.