About Gajahasta

Gajahasta is a premium makeup education studio based in Bangalore, founded and led by M Adithi Lalawat. We offer workshops in self-grooming and makeup, and operate the website gajahasta.com.

For the purposes of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, Gajahasta determines the purpose and means of processing the personal data described in this policy.

Information we collect

We collect personal information that you provide to us directly, information generated when you use our website, and information received through our advertising.

We do not request sensitive personal data such as government identification numbers, medical records or financial account details. Where you voluntarily share additional information, for example an allergy relevant to a workshop, we use it solely for that purpose.

How we use information

We use your personal information to:

• respond to your enquiries and process workshop bookings;
• send workshop details, reminders and schedule changes;
• send promotional communications, where you have consented to receive them;
• improve our website, workshops and services;
• plan, run and measure our advertising; and
• comply with legal, tax and accounting obligations.

We process personal data only on the basis of your consent or where the law permits.

Disclosure to third parties

We do not sell your personal information. We disclose it only to the following categories of recipients, and only to the extent necessary:

• Workshop listing platforms, such as BookMyShow, District and Offlyn, if you book through them. They handle your payment and share your booking details with us.
• Website hosting and technology providers, who keep gajahasta.com operational.
• Messaging platforms, such as WhatsApp, through which you communicate with us.
• Advertising and analytics platforms, such as Meta, as described under Cookies and advertising.
• Marketing partners, who manage our advertising on our behalf under a written agreement.
• Public authorities, where disclosure is required by law.

Some of these providers store data on servers outside India. Where this occurs, we select providers that maintain appropriate security standards.

Cookies and advertising

Cookies are small files stored on your device when you visit a website. We use them to operate the site and to understand how it is used.

Advertising technologies

We advertise on Instagram and Facebook and use Meta's tracking tools on our website. These tools inform Meta when a person who viewed our advertisement visits our pages or submits an enquiry, which allows us to measure results and reach people with similar interests. Meta processes this data in accordance with its own privacy policy.

Your choices

• You may disable or delete cookies through your browser settings. The website will remain accessible, although some features may be affected.
• You may manage the advertisements shown to you through your Instagram and Facebook ad preferences.
• You may email us to request that we stop using your information for advertising purposes.

Photographs and video

We may photograph or record workshop sessions for use on our website and social media channels. We do so only with the consent of the individuals featured.

Retention

We retain personal information only for as long as it is needed for the purposes for which it was collected.

• Enquiries that do not result in a booking: up to 12 months, after which they are deleted.
• Workshop participants: for the duration of your association with Gajahasta, and thereafter for the period required by applicable accounting and tax law in respect of payment records.
• Marketing contacts: until you withdraw your consent.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• obtain a summary of the personal data we hold about you;
• request correction or updating of your personal data;
• request erasure of your personal data;
• withdraw your consent at any time, without affecting processing carried out before withdrawal;
• nominate another person to exercise these rights on your behalf; and
• lodge a grievance with us and, if it is not resolved, with the Data Protection Board of India.

Children

Our workshops and website are intended for adults. Where a person under 18 wishes to enquire or enrol, a parent or legal guardian must make contact on their behalf. We do not knowingly process the personal data of a child without verifiable parental or guardian consent, and we will delete such data promptly once we become aware of it.

Security

We apply reasonable safeguards to protect personal information, including secure hosting and restricted access. No system is entirely free of risk. In the event of a personal data breach affecting you, we will notify you and the relevant authorities as required by law.

Changes to this policy

We may update this policy from time to time. The revised version will be posted on this page with an updated date. Where changes are material, we will also notify you directly.