Privacy Policy.

This policy explains how we handle personal data when you use a booth, browse this site, or host one at your venue. It sits alongside our Terms and conditions.

It is written for the Digital Personal Data Protection Act, 2023. Where that Act uses the words “data fiduciary” and “data principal”, we are the fiduciary and you are the principal.

Ormmae Collective Private Limited, CIN U74209KA2025PTC203301, registered at Third Floor, Above ICICI Bank, #92, 7th Cross Road, 27th Main Road, Sector 1, HSR Layout, Bangalore. 560102.

We trade as Photobooth by Ormmae and, at some sites, as Photomac.

We decide how and why the data described here is processed, and we are responsible for it.

A booth session collects only what it needs to take a photograph and print it.

• Photographs. The frames captured during your session, and the composed strip that gets printed.
• Session record. Booth ID, date and time, number of frames, copies printed, print outcome, and any error the machine reported.
• Payment reference. The transaction ID, amount, status and timestamp returned by our payment partner. We never see or store your UPI PIN, card number or bank credentials.

The booth does not record audio, and it does not run facial recognition or any other biometric matching on what it captures.

We keep personal data only as long as the purpose lasts, then delete it. Financial records are the exception — those we are required to retain.

What	How long
Session photographs on the booth	Deleted after each session.
Session and print records (no images)	12 months, for fault diagnosis and refunds
Payment and invoice records	8 years, as required under tax and company law
Images you allowed us to reshare	Until you ask us to take them down

• To run the session and print your strip — the reason you walked into the booth.
• To take payment, issue an invoice, and process a refund if one is due.
• To keep booths working: diagnosing print faults, paper and ink levels, downtime.
• To count sessions per booth so we know where to place the next one. This uses session records, not photographs.
• To meet legal obligations under tax, company and consumer law.

We do not use your photographs to train machine learning models, and we do not profile you or serve you targeted advertising.

Nobody. Your photographs never leave the booth, so there is nothing for us to pass on. The frames and the composed strip live in the machine only for as long as it takes to print them, and are erased when the session ends. There is no upload, no account, and no copy held anywhere for us to share.

Two narrow exceptions exist, and neither involves your photographs:

• Payment gateway — Razorpay, to collect payment and process refunds. You transact with it directly; it returns only a transaction ID, amount and status. We never see or store your UPI PIN, card number or bank credentials.
• Accountants, lawyers and authorities — where genuinely needed, or where we are legally required to disclose. This can only ever reach the payment and invoice records described in clause 05, because we hold nothing else about you.

We do not sell, rent or trade personal data, and we share nothing with advertisers or data brokers.

Venues that host a booth do not receive your photographs — no one does. Their own CCTV coverage of the space around the booth is theirs, and their policy applies to it, not ours.

This site uses [describe: strictly necessary cookies only / plus analytics]. Necessary cookies keep the site working and cannot be switched off. Any analytics cookie is set only after you accept it, and you can change your mind at any time from [link or setting].

The booth screen itself does not use cookies or tracking of any kind.

Data is stored in India(asia-south1). Some of our processors may handle data outside India; where they do, we rely on contractual protections and on transfers being permitted under the DPDP Act. The specific processors are listed in clause 07.

We take reasonable technical and organisational measures to protect personal data: encrypted transport, access restricted to staff who need it, authentication on all admin systems, and automatic deletion of images on the schedule in clause 05.

No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board as the law requires.

Booths stand in public spaces and are often used by families. We do not knowingly collect a contact detail from anyone under 18 for a digital copy without verifiable consent from a parent or guardian, and we do not use children's data for tracking or advertising.

If you believe a child's data has been given to us without that consent, write to the grievance officer and we will delete it.

You can ask us to:

• tell you what personal data of yours we hold and who we shared it with;
• correct anything inaccurate or incomplete;
• erase data where we no longer need it for the purpose it was collected for;
• withdraw a consent you gave — for a digital copy, or for us to reshare an image;
• nominate someone to exercise these rights if you die or become incapacitated.

Write to [email protected] with your order ID, the booth and the date, so we can find the right session. We respond within 7 working days. There is no charge. Withdrawing consent does not undo anything done before you withdrew it, and some records must be kept for the periods in clause 05 regardless.

We may update this policy. The version in force is the one published here, with its effective date at the top of the page. Where a change materially affects how we handle your data, we will say so on this page and, where we hold your contact details, tell you directly.

If something has gone wrong, tell us. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.