Privacy Policy

CS Media & Production ("we," "us," "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights — in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India, the Digital Personal Data Protection Act, 2023, and the EU General Data Protection Regulation (GDPR) where applicable to clients located in the European Economic Area, the United Kingdom, or Canada.

1. Who We Are

CS Media & Production is a sole-proprietorship business owned by Chirag Malhotra, with its registered place of business at 705, 7th Floor, Amis Planet Mercury, Sector 9, Plot No. 163, Ulwe, Navi Mumbai – 410206, Maharashtra, India. For privacy-related queries, contact chirag.malhotra90@gmail.com.

2. Information We Collect

a. Information you provide directly

• Name, email address, phone number, WhatsApp number, city, country
• Business name, brand assets, briefs, scripts, and project-related content
• Billing information (handled by our payment processors — we do not store full card details)

b. Information collected automatically

• IP address, browser type, device type, operating system
• Pages visited, time spent on the site, referring URL
• Cookies and similar tracking technologies (for analytics and site functionality)

c. Information from third parties

• Analytics providers (e.g., Google Analytics) and payment processors (e.g., Razorpay) may share aggregated or transactional data with us.

3. How We Use Your Information

• Provide, deliver, and improve our services
• Process payments and issue invoices
• Communicate about projects, proposals, and support
• Send marketing communications (only if you have opted in — you may unsubscribe at any time)
• Comply with legal, tax, and regulatory obligations in India and applicable foreign jurisdictions
• Detect and prevent fraud, abuse, or security incidents

4. Legal Basis for Processing (for EU/UK/Canadian residents)

Where GDPR or similar law applies, we process personal data on the following legal bases: (a) performance of a contract with you, (b) compliance with a legal obligation, (c) your explicit consent, and/or (d) our legitimate interests in operating and improving our business.

5. Sharing of Information

We do not sell your personal information. We share information only with:

• Payment processors (e.g., Razorpay) to process transactions
• Cloud and hosting providers (e.g., Vercel, Google Cloud, Supabase) for storing and serving our website and project files
• AI service providers we use to deliver services (e.g., HeyGen, ElevenLabs, OpenAI) — only the inputs strictly necessary for the requested task
• Tax authorities, regulators, or law enforcement when required by law
• Professional advisors (e.g., accountants, lawyers) under confidentiality obligations

6. International Data Transfers

As we serve clients globally, personal data may be transferred to, stored, or processed outside India, including in the United States, the European Union, or Canada. We take reasonable steps to ensure such transfers comply with applicable data protection laws.

7. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy, or as required by law (typically 7 years for tax and accounting records under Indian law).

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing
• Withdraw consent at any time
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, email chirag.malhotra90@gmail.com. We will respond within 30 days.

9. Cookies

Our website uses cookies for basic functionality and analytics. You can disable cookies in your browser settings, though some features may not work as intended.

10. Security

We use reasonable technical and organisational measures — including HTTPS, access controls, and encrypted storage — to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.