Who We Are
Corvus Studio is a creative production studio registered and operating in Bangalore, Karnataka, India. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Corvus Studio is the Data Fiduciary in respect of personal data collected through this website.
Contact for privacy matters: info@thecorvusstudio.com
Data We Collect
We collect only the personal data necessary for the stated purpose. This includes:
- Contact enquiries: Name, email address, and the project or inquiry details you choose to provide through our contact form.
- Career applications: Name, email address, portfolio links, CV or resume, and any other information you voluntarily include in your application.
- Website analytics: Aggregated, non-identifiable usage data such as pages visited and general device type, collected through privacy-respecting analytics tools. We do not use this data to identify individuals.
We do not collect sensitive personal data (as defined under applicable law) through this website. Do not submit passwords, government identification numbers, payment card details, or medical information through our forms.
Purpose of Processing
We process personal data only for the specific purpose for which it was submitted:
- Enquiry and contact forms: To review your request and respond to it. Data is not reused for unrelated marketing without your separate consent.
- Career applications: To evaluate your application for current or future roles. If we wish to retain your application for future consideration beyond the immediate process, we will seek your consent separately.
- Analytics: To understand general website usage and improve the site experience. No individual profiling is performed.
We will not use your personal data for a purpose materially different from the one for which it was collected without notifying you and, where required by law, obtaining your consent.
Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected:
- Enquiries that do not proceed to a project: Retained for up to 12 months from the date of last contact, then deleted.
- Active project correspondence: Retained for the duration of the project and for up to 3 years after completion, to support any post-delivery queries or disputes.
- Career applications: Retained for up to 6 months from the date of submission unless you have consented to longer retention for future opportunity consideration.
- Analytics data: Aggregated and not linked to identifiable individuals; retained in aggregate form for up to 24 months.
When personal data is no longer needed, it is deleted or anonymised. You may request earlier deletion — see Section 08 for your rights.
Security Practices
We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- Encrypted data transmission (HTTPS/TLS) for all website traffic.
- Access controls limiting data access to personnel with a legitimate need.
- Storage of form submissions in access-controlled systems with defined retention rules.
No method of transmission over the internet is completely secure. While we work to protect your data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to cause harm to you, we will notify you as required under applicable law.
Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:
- Right to access: Request a summary of the personal data we hold about you and the purposes for which it is processed.
- Right to correction: Request correction of inaccurate or incomplete personal data.
- Right to erasure: Request deletion of your personal data where the purpose for which it was collected has been fulfilled and retention is no longer required by law or contract.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to nominate: You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
- Right to grievance redressal: You have the right to raise a grievance with us and receive a timely response. You also have the right to approach the Data Protection Board of India if your grievance is not resolved satisfactorily.
To exercise any of these rights, contact us at info@thecorvusstudio.com. We will respond within a reasonable time and in accordance with the requirements of applicable law.
Grievance & Contact
If you have a question, concern, or complaint about how we handle your personal data, please contact us:
- Email: info@thecorvusstudio.com
- Subject line: Privacy Request — [brief description]
- Response time: We aim to acknowledge your request within 5 business days and resolve it within 30 days.
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India, once it is constituted and operational under the DPDP Act, 2023.
This policy was last updated on 14 August 2026. We may update it from time to time. Continued use of this website after an update constitutes acceptance of the revised policy.
