Legal
Privacy Policy
Last updated: 9 October 2026 · Version: 1.0
Summary
- Who we are: Laltern Pictures (“we”, “us”), a film and commercial production studio based in Gurugram, India.
- What we collect: the details you give us in the contact form or the data rights form, and basic technical information when you visit.
- Why: to answer your enquiry, handle your privacy requests, and keep the site secure.
- Selling or sharing: we do not sell your personal information or share it for cross-site advertising.
- Your choices: you can see, correct, delete or download your data, and withdraw consent, at any time. Go to Your data rights.
- Questions: hello@lalternpictures.com.
1. Who is responsible for your data
Laltern Pictures, based at Gurugram, India, decides how and why your personal information is used. In some laws this role is called the “controller”, “data fiduciary” or “business”.
- Privacy contact: hello@lalternpictures.com · Gurugram, India
- Contact for data protection questions and grievances in India: Laltern Pictures grievance contact, hello@lalternpictures.com, Gurugram, India. See also our Grievance page.
2. What information we collect and where it comes from
We collect only what we need for the purposes in section 3.
| Information | Examples | Where it comes from |
|---|---|---|
| Technical information | IP address, browser type, device type, pages visited, date and time | Automatically, when you visit (server logs and security tools) |
| Enquiry details | Name, company, email, website, project type, timeline, message, reference links | You, through our contact form |
| Rights request details | Name, email, region, the rights you ask about, any details you add | You, through our data rights form |
| Spam-check signals | IP address and browser signals that show whether a form is being used by a person | Our spam-check service, only on the contact and data rights pages |
We do not intentionally collect sensitive information such as health, biometric or financial account details. Please do not send it to us.
3. Why we use your information, and our legal reasons
| Purpose | Information used | Legal reason |
|---|---|---|
| Run and secure the website, prevent fraud and abuse | Technical information, spam-check signals | EU and UK: our legitimate interest in keeping the site secure and working. India: legitimate use permitted by law, or your consent where the law requires it. |
| Answer your enquiry | Enquiry details | EU and UK: steps you asked us to take before a contract, or our legitimate interest in replying. India: data you voluntarily provided for this purpose. |
| Handle your privacy request | Rights request details | Legal obligation |
| Comply with law and defend legal claims | Any relevant information | Legal obligation; legitimate interest in defending claims |
Where we rely on legitimate interests, the interest is stated in the table. You can object at any time (section 9). If you do not give us the information we need to answer you, we may not be able to reply.
For users in India, we rely on your consent unless a specific “legitimate use” under the Digital Personal Data Protection Act 2023 applies. You can withdraw consent at any time, as easily as you gave it (section 10). Withdrawing does not affect processing that already happened.
4. Cookies and similar technologies
We do not use advertising or analytics cookies, and we do not set cookies of our own. See our Cookie Policy for the full list. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your information and of targeted advertising. We already do neither.
Our site does not respond to “Do Not Track” signals, because there is no agreed standard. Third parties cannot track you across sites through us.
5. Who we share your information with
- Service providers who work for us under contract and may use the data only on our instructions: hosting (Vercel Inc.), email delivery (Resend) and spam checking (Cloudflare, Inc.).
- Authorities, courts and advisers, where the law requires it or to protect rights and safety.
- A buyer or successor business, if we reorganise or sell our business. They must protect your information as this policy describes.
We do not sell personal information. We do not share it for cross-context behavioural advertising.
6. International transfers
Some of our service providers process information outside your country, including in the United States. When we transfer information, we protect it as follows:
- EU and UK: we rely on an adequacy decision (for certified US recipients, the EU–US Data Privacy Framework and its UK extension), or on the European Commission’s Standard Contractual Clauses (and the UK Addendum or International Data Transfer Agreement), with extra safeguards where needed. You can ask us for a copy of the safeguards.
- India: we do not transfer information to any country the Government of India has restricted.
7. How long we keep your information
| Information | How long |
|---|---|
| Enquiries | 12 months after our last message after our last contact |
| Rights requests | 24 months after the request is closed |
| Security logs | the default period of our hosting provider |
Then we delete the information or make it anonymous. Where Indian law requires it, we keep certain information and logs for at least one year, securely and only for the legally required purpose.
8. How we protect your information
We use technical and organisational measures suited to the risk. These include encryption in transit, access controls, monitoring, backups and vendor checks. No system is completely secure. If a breach affects you, we will tell you and the regulators as the law requires. We protect sensitive personal data such as passwords or financial information with reasonable security practices, as the Information Technology Act 2000 and its rules require.
9. Your rights
Depending on where you live, you have some or all of the rights below. We apply the same easy process for everyone.
- Access your information, and get a copy of it.
- Correct inaccurate or incomplete information.
- Delete your information.
- Download your information in a portable format.
- Object to, or ask us to restrict, certain uses, including direct marketing and profiling.
- Withdraw consent at any time, without affecting earlier use.
- Opt out of the sale or sharing of your information, targeted advertising and certain profiling.
- Ask for human review of a decision made solely by automated means that significantly affects you.
- Not be treated worse for using your rights.
EU and UK: you have all the rights above under the GDPR and UK GDPR. You can also complain to a data protection authority. In the EU, that means the authority in the country where you live or work, or where an issue happened. In the UK, it is the Information Commissioner’s Office (ico.org.uk). We ask that you contact us first so we can try to help (see section 11).
California residents: you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for using these rights. See section 17 for our full California disclosures.
Residents of other US states with privacy laws: you can access, correct, delete and download your information, and opt out of targeted advertising, sale and profiling that produces legal or similarly significant effects. If we refuse your request, you can appeal (section 10). You can also ask for a list of the specific third parties we have disclosed your information to.
India: you have the right to get a summary of your personal data and how it is processed; to know the identities of everyone we have shared it with, and what we shared; to correct, complete, update or erase it; to have your grievances resolved; and to nominate another person to exercise your rights if you die or become unable to. If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India.
10. How to use your rights
- Use our data rights form.
- Or email hello@lalternpictures.com.
Verification. To protect you, we check your identity using information we already hold. Opting out of sale, sharing or marketing does not need verification. An authorised agent can make a request for you with your signed permission.
Timing. We confirm we received your request within 10 business days and respond within 30 days. If we need more time, where the law allows it, we will tell you why within the first 30 days. Opt-outs take effect as soon as possible, and within 15 business days at most.
Appeals. If we decline your request, you can appeal by replying to our decision or using the form. We will answer within 30 days. If you disagree with the outcome, you can contact your state Attorney General.
Withdrawing consent. Use the unsubscribe link in any message, or contact us.
11. Complaints
If you are unhappy with how we handle your information, please tell us through our complaints page or at hello@lalternpictures.com. We will acknowledge your complaint within 7 days (30 at most) and respond as soon as we can. You can also complain to the regulator named in section 9 at any time.
12. Children
Our services are not intended for anyone under 18. We do not knowingly collect information from children below the age at which they can consent in their country. If we learn we have, we will delete it. We never track, profile or show targeted ads to users we know, or have reason to believe, are under 18.
13. Sensitive information
We do not intentionally collect sensitive information such as health, biometric or financial account details. Please do not send it to us.
14. Automated decisions and AI
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. We use an automated spam check on our forms; it only decides whether a form can be sent.
15. Marketing
We do not send marketing messages. We use your email address only to reply to what you sent us.
16. Changes to this policy
We review this policy at least once a year. If we make important changes, we will tell you before they take effect. We will also ask for your consent again where the law requires it. Previous versions are available on request.
17. Extra information for specific regions
California
Personal information we collected in the last 12 months
| Category | Collected? | Sources | Purposes | Disclosed to | Sold or shared? | Retention |
|---|---|---|---|---|---|---|
| Identifiers | Yes | You; your browser | Reply to you; security | Service providers | No | See section 7 |
| Customer records (name, contact details) | Yes | You | Reply to you | Service providers | No | See section 7 |
| Protected classification characteristics | No | — | — | — | No | — |
| Commercial information | No | — | — | — | No | — |
| Biometric information | No | — | — | — | No | — |
| Internet or other electronic network activity | Yes | Your browser | Security | Service providers | No | See section 7 |
| Geolocation data | No | — | — | — | No | — |
| Audio, electronic, visual or similar information | No | — | — | — | No | — |
| Professional or employment information (company name) | Yes | You | Reply to you | Service providers | No | See section 7 |
| Education information | No | — | — | — | No | — |
| Inferences | No | — | — | — | No | — |
| Sensitive personal information | No | — | — | — | No | — |
- Sale and sharing. We have not sold or shared personal information in the last 12 months. We do not knowingly sell or share the personal information of consumers under 16.
- Sensitive personal information. We do not collect it.
India
- For each item of personal data, and our purpose for it, see the table in section 2 and section 3. These are shown beside each form when we ask for your details.
- Sensitive personal data or information, such as passwords or financial, health or biometric information, is not collected.
- You may complain to the Data Protection Board of India after using our grievance process.
- If you are the lawful guardian of a person with a disability, you can give consent and exercise rights on their behalf. Contact hello@lalternpictures.com.
18. Contact us
Laltern Pictures · Gurugram, India · hello@lalternpictures.com