Hot Bun Studios respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and store your information when you visit our website or get in touch with us.
1. Scope and Purpose
This Privacy Policy (“Policy”) governs the privacy practices of the website www.hotbunstudios.com (the “Website”), owned and operated by Golden Milk Media Private Limited (“Hot Bun Studios”, “we”, “us”, or “our”), and applies to all users who visit, browse, or submit information through the Website (“you” or “User”).
This Policy sets out how we collect, use, share, retain, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made thereunder (“DPDP Act”), the Information Technology Act, 2000 and rules made thereunder, and, where applicable to Users located in the European Economic Area, the General Data Protection Regulation (EU) 2016/679 (“GDPR”). It also sets out your rights in relation to your personal data and how you may exercise them.
2. About us
Hot Bun Studios operates a multi-purpose creative studio located at Gala 220, 2nd floor, Prabhadevi Industrial Estate, 408, Swatantryaveer Savarkar Rd, Prabhadevi, Mumbai, Maharashtra 400025, and offers studio space and equipment for podcast shoots, video and photo shoots, music recording, and events. We take a proactive approach to user privacy and take reasonable steps to protect the privacy of Users throughout their experience of this Website, and comply with applicable Indian laws for user privacy.
3. Personal Data We Collect
We collect the following categories of personal data through this Website:
(a) Contact and enquiry data: when you submit our contact form, this includes your name, email address, and details of your project or enquiry;
(b) Booking data: when you initiate a booking through our WhatsApp booking channel, this includes your name, phone number, and details of the Session you wish to book (booking data collected in connection with an actual Session is further processed in accordance with the Studio Booking Agreement);
(c) Testimonial data: where you provide a testimonial, review, or photograph for display on this Website, this includes your name, photograph, and the content of your testimonial, collected only with your consent;
(d) Technical and usage data: when you browse this Website, we (or our hosting/analytics providers) may automatically collect your IP address, browser and device type, pages visited, and similar site-usage statistics.
4. How We Use Your Personal Data
We use your personal data only for the following specified purposes:
(a) to respond to enquiries submitted through our contact form or WhatsApp;
(b) to process and confirm studio bookings, and to communicate with you in connection with a Session;
(c) to display Testimonials on this Website, where you have consented to this;
(d) to administer and improve this Website, including monitoring its performance and security; and
(e) to comply with applicable law, including tax, accounting, and regulatory requirements.
We do not use your personal data for any purpose other than those set out above without obtaining your fresh consent, save where permitted under the “legitimate uses” recognised by the DPDP Act (for example, compliance with a legal obligation).
5. Legal Basis and Consent
We process your personal data on the basis of your free, specific, informed, and unconditional consent, given through a clear affirmative action (such as submitting our contact form or initiating a WhatsApp booking), save where processing is otherwise permitted as a legitimate use under the DPDP Act. You may withdraw your consent at any time by contacting us using the details in Clause 16 (Grievance Officer and Contact Us) below; withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal, and we will cease further processing and, where applicable, delete your personal data unless retention is required by law.
6. Sharing of Personal Data with Third Parties
We do not sell your personal data. We share your personal data only with the following categories of third parties, and only to the extent necessary for the purposes described in Clause 4 above:
(a) WhatsApp (Meta Platforms, Inc.), when you contact us or book through our WhatsApp channel — your communications are also subject to WhatsApp's own privacy policy;
(b) Google Maps, to display our location — use of the embedded map is subject to Google's privacy policy;
(c) Instagram (Meta Platforms, Inc.), where you interact with our social media presence linked from this Website;
(d) our professional advisors (including legal and accounting advisors), where necessary for the operation of our business; and
(e) government or regulatory authorities, where required under applicable law.
7. Cookies
This Website may use cookies to improve your browsing experience. Cookies are small files saved on your device that store information about your interactions with the Website, allowing us to understand site usage and, where applicable, tailor your experience. If you wish to stop cookies from this Website being saved to your device, you should adjust your browser's security settings to block cookies from this Website and any third-party services (such as Google Maps or embedded social media) it uses.
We do not currently use this Website to run advertising or referral programs. To the extent we use any third-party analytics or embedded services (such as Google Maps or Instagram) that place cookies on your device, those cookies are governed by the relevant third party's own privacy and cookie policy. No personal information is collected via cookies other than with your specific consent.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in Clause 4 above, or as required to comply with our legal obligations (including under tax and accounting law), resolve disputes, and enforce our agreements. Enquiry and contact-form data is typically retained for 24 months from the date of your last interaction with us, and booking data is retained in accordance with the Studio Booking Agreement and applicable record-keeping laws. Where you withdraw your consent under Clause 5 above, we will delete your personal data unless further retention is required by law.
9. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While we take reasonable steps to secure your personal data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach affecting your personal data, we will notify you and the relevant authorities in accordance with our obligations under the DPDP Act.
10. Cross-Border Data Transfers
Your personal data is primarily processed and stored in India. Where we share personal data with third-party service providers located outside India (such as WhatsApp, Google, or Instagram, each of which may process data on servers located outside India), such transfers are made in accordance with the DPDP Act, which permits transfers of personal data outside India except to countries restricted by the Central Government. Where you are located in the European Economic Area, any transfer of your personal data outside the EEA will be carried out in compliance with the safeguards required under the GDPR.
11. Your rights
Subject to applicable law, you have the right to:
(a) access a summary of the personal data we hold about you and the processing activities we carry out
(b) request correction or completion of inaccurate or incomplete personal data
(c) request erasure of personal data that is no longer necessary for the purpose for which it was collected, or in respect of which you have withdrawn consent
(d) withdraw your consent at any time, as described in Clause 5 above
(e) nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
(f) lodge a grievance at hotbunstudios@gmail.com and, if unresolved, with the Data Protection Board of India. Users located in the European Economic Area may additionally have rights under the GDPR, including the right to data portability and the right to object to processing, which may be exercised through the same contact details.
12. Children's Data
This Website is not directed at children, and we do not knowingly collect personal data from individuals under 18 years of age without verifiable parental or guardian consent, as required under the DPDP Act. If you believe we have inadvertently collected personal data from a child without appropriate consent, please contact us using the details in Clause 16 below, and we will take steps to delete such data.
13. Testimonials and Publicly Displayed Content
Testimonials, reviews, and photographs of clients and studio visitors displayed on this Website are published only with the consent of the relevant individual. If you have provided a Testimonial and wish to have it amended or removed, please contact us using the details in Clause 16 below, and we will action your request within a reasonable time.
14. External Links
Although this Website only looks to include quality, safe, and relevant external links (including to Google Maps and our social media pages), Users should always exercise caution before clicking any external link on this Website.
We cannot guarantee or verify the contents or privacy practices of any externally linked website, despite our best efforts. Users click on external links at their own risk, and Hot Bun Studios cannot be held liable for any damages or implications arising from visiting any external link on this Website.
15. Social Media Platforms
Communication, engagement, and actions taken through external social media platforms that Hot Bun Studios uses — including Instagram and WhatsApp — are subject to the terms and conditions and privacy policies of each respective platform.
Users are advised to use social media platforms wisely and to communicate on them with due care regarding their own privacy and personal details. Neither this Website nor Hot Bun Studios will ask for sensitive personal information through social media platforms, and Users wishing to discuss sensitive details or make a booking are encouraged to use our WhatsApp booking channel or the contact details in Clause 16 below.
This Website may use social sharing or embedding features (for example, to display our Instagram feed or enable WhatsApp booking). Users are advised that using such features is at their own discretion, and that the relevant social media platform may track and save your interaction through your own account on that platform, in accordance with its own privacy policy.
16. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices or applicable law. The updated Policy will be posted on this Website with a revised “Last Updated” date. We encourage you to review this Policy periodically. Your continued use of this Website after any changes are posted constitutes your acceptance of the updated Policy.
17. Governing Law
This Policy shall be governed by and construed in accordance with the laws of India. The courts at Mumbai shall have exclusive jurisdiction over any dispute arising out of or in connection with this Policy.