Privacy Policy
IndieVisual, a brand of High Giraffe Media Private Limited
Last updated: 25 September 2026
WHO WE ARE
This Privacy Policy explains how High Giraffe Media Private Limited, which owns and operates the IndieVisual brand ("IndieVisual", "we", "us" or "our"), collects, uses, shares and protects personal data. Our registered office is at B1/H3, Ground Floor, Mathura Road, Mohan Co-operative Industrial Area, New Delhi 110044.
This policy is framed under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and the rules made under it. For personal data covered by this policy, we act as the Data Fiduciary.
This policy covers visitors to www.indievisual.in, people who contact us or submit a brief, our Clients' representatives, people who appear in or contribute to the videos we produce, and members of our creative network.
PERSONAL DATA WE COLLECT
2.1. Data provided directly
Contact and enquiry details: name, organisation, designation, email address, phone number, city, and the contents of a brief or message.
Billing details: the billing name and address of the client's authorised representative, and, where the client is an individual or sole proprietor, their GSTIN and PAN as needed for tax compliance.
Project communications: feedback, approvals and correspondence during a project.
Creative network applications: name, contact details, portfolio, skills, location and rates.
2.2. Data in project materials
Images, video and voice recordings of people who appear on camera, including Client employees, customers, talent and event attendees.
Names, designations and other details that appear in Client Materials or on screen.
2.3. Data collected automatically
Device and usage data such as IP address, browser type, operating system, pages visited, referring page and approximate location, collected through cookies and similar technologies.
2.4. Payment data
Card, UPI and net banking details are entered directly on the secure pages of our payment gateway partners. We do not receive or store full card or bank credentials. We receive only a transaction reference, amount and status.
We do not seek sensitive personal data such as health information, biometric data or financial account credentials through the Website, and ask that it not be shared with us.
WHY WE USE PERSONAL DATA
We process personal data only for the following purposes:
To respond to enquiries, prepare proposals and communicate about projects.
To deliver the Services, including planning, filming, editing and delivering videos.
To process payments, issue invoices and meet tax and accounting obligations.
To engage and coordinate members of our creative network.
To operate, secure and improve the Website and understand how it is used.
To send updates about our work and services, which can be declined at any time.
To prevent fraud, enforce our Terms and comply with law, court orders and lawful requests from authorities.
LEGAL BASIS FOR PROCESSING
We process personal data on the basis of consent, which is given when a User submits a form, sends us a brief, accepts cookies or opts in to communications, and on the basis of legitimate uses permitted by law, such as data voluntarily shared for a specific purpose, performing a contract, and meeting legal obligations. Consent can be withdrawn at any time as described in section 9. Withdrawal does not affect processing already carried out, and we may be unable to continue a service that depends on the withdrawn data.
PEOPLE WHO APPEAR IN VIDEOS
5.1.
Where we film a Client's employees, customers or associates, the Client is responsible for obtaining their consent for filming and for the intended use of the footage. For talent and participants we engage directly, we obtain written releases.
5.2.
Footage is used only for the project it was captured for. We do not use it for any other Client or purpose, except in our portfolio as permitted by our Terms and Conditions.
5.3.
For shoots involving children, we require verifiable consent from a parent or lawful guardian before filming, and a parent, guardian or authorised adult must be present on set. We do not track, profile or send targeted advertising to children.
AI TOOLS AND PROJECT MATERIALS
Some of our production work uses AI tools from third-party providers to generate or process visuals, voice and sound. When project materials are processed through these tools, we share only what is needed for the task. We do not use one Client's materials or production history for another Client, and we do not use Client materials as training data to train our own systems.
SHARING PERSONAL DATA
We do not sell personal data. We share it only as follows:
Creative network and vendors engaged on a project (directors, crew, editors, animators, voice artists), limited to what they need to do their work, and bound by confidentiality obligations.
Service providers who process data on our behalf, including cloud hosting and storage, email, our website host, payment gateway, accounting software, analytics and advertising tools, and AI production tools. These providers act as Data Processors under contract with us.
Clients, where a project involves a Client's own personnel or content.
Authorities, where required by law, court order or a lawful request.
Successors, in connection with a merger, acquisition or restructuring, on terms consistent with this policy.
Some of these providers store or process data outside India. Such transfers are made only to countries not restricted by the Government of India, and with safeguards consistent with applicable law.
COOKIES AND ANALYTICS
The Website uses cookies and similar technologies for essential functions, to measure traffic and performance, and to measure and improve our advertising. We use tools such as Google Tag Manager, Google Analytics and Google Ads for this purpose. Non-essential cookies can be refused or deleted through browser settings. Blocking some cookies may affect how the Website works.
RIGHTS OF DATA PRINCIPALS
Every individual whose personal data we process has the right to:
Obtain a summary of the personal data we hold about them and how it is processed, and the identities of those we have shared it with.
Have inaccurate or incomplete data corrected and updated.
Have their data erased where it is no longer needed for the purpose it was collected for, unless we must retain it by law.
Withdraw consent at any time, as easily as it was given.
Nominate another individual to exercise these rights in the event of death or incapacity.
Have grievances redressed by us, and escalate to the Data Protection Board of India if not satisfied with our response.
Requests can be sent to the Grievance Officer in section 13. We may need to verify identity before acting on a request, and we respond within the timelines set by applicable law.
HOW LONG WE KEEP DATA
We keep personal data only as long as needed for the purpose it was collected for, or as required by law. As a guide:
Category
Retention
Enquiries that do not become projects
36 months from last contact
Client contracts, invoices and payment records
8 years, as required under tax and company law
Project footage and files
12 months after final delivery, or as agreed with the Client
Website analytics data
14 months
Marketing contact lists
Until the individual unsubscribes
When the retention period ends, we delete the data or anonymise it.
SECURITY
We protect personal data with reasonable security safeguards, including encryption in transit (HTTPS) on the Website, access controls that limit data to the people who need it for their work, and confidentiality obligations on our team, creative network and vendors. No method of transmission or storage is completely secure.
If a personal data breach occurs, we will inform affected individuals and the Data Protection Board of India as required by law.
CHANGES TO THIS POLICY
We may update this policy from time to time. The latest version will always be on this page with its revision date. Significant changes will be highlighted on the Website.
GRIEVANCE OFFICER
For questions, requests to exercise the rights in section 9, or complaints about how we handle personal data, contact our Grievance Officer:
Name:
Prashant Pavithran
Address:
B1/H3, Ground Floor, Mathura Road, Mohan Co-operative Industrial Area, New Delhi 110044
Email:
Phone:
Hours:
We acknowledge grievances within 2 working days and aim to resolve them within 15 working days. If the response is unsatisfactory, a complaint can be filed with the Data Protection Board of India.