Privacy Policy
This Privacy Policy explains what personal information this website collects, why it is used, the service providers involved, and how you can make a privacy request.
Last updated: 26 September 2026
1. Who Controls Your Data
The website at https://ruchikajharbade.com is operated by Dr. Ruchika Jharbade (the “Owner,” “I,” “me” or “my”). For privacy questions or requests, contact ruchikajharbade@gmail.com.
Public visitors do not need to create an account to browse the Site. A restricted administrative account is used separately for site management and is not offered to public visitors.
2. Data We Collect
We aim to collect only information that is reasonably necessary for the purpose for which it is provided. Depending on how you use the Site, this may include:
- Enquiry information — name, email address, phone number, company or production house, role or requirement, project type, shoot location, dates, budget, casting deadline, portfolio or brief URL, and the message or project brief you choose to submit.
- Consent information — whether you accepted the enquiry-form privacy notice and the date and time that consent was recorded.
- Technical information — information that may be present in hosting or security logs, such as IP address, browser/device information, request timestamps, referring URL, and pages requested.
- Cookie and analytics information — only where the relevant technology has actually been enabled, as described in the Cookie Policy.
Please do not submit sensitive personal information through the public enquiry form unless it is genuinely necessary for your enquiry. We do not ask for health, biometric, financial-account, password, or government-identification information through this form.
3. Why We Use It
Enquiry information may be used to:
- respond to your enquiry or casting brief;
- communicate about a proposed professional opportunity;
- maintain reasonable professional and business records;
- protect the Site against spam, abuse, and security incidents; and
- meet applicable legal or regulatory obligations where required.
We do not sell enquiry information or use it for unrelated third-party marketing.
4. Consent & Your Choices
The enquiry form asks you to actively confirm that you have read the Privacy Policy and consent to the processing of the information you submit for the stated enquiry and communication purposes. The form cannot be submitted without that confirmation.
The Site records the consent flag and the date and time at which the enquiry was received. You may contact ruchikajharbade@gmail.com to ask about, correct, or request deletion of personal information associated with an enquiry, subject to applicable law and legitimate record-keeping requirements.
5. Service Providers & Processing
The Site uses service providers to host the website, store enquiry data, deliver media, and send enquiry notifications. Depending on the feature and configuration in use, relevant providers include:
| Provider | Role | Potential data involved |
|---|---|---|
| Vercel | Frontend hosting / web delivery | Website requests and technical information |
| Google Cloud Run | Backend application hosting | Enquiry requests and application/security logs |
| Neon | PostgreSQL database hosting | Enquiry records and consent records |
| Cloudinary | Portfolio media storage and delivery | Site-managed images/video and related media metadata |
| Resend | Email delivery for enquiry notifications, when configured | Enquiry email address and message/notification content |
These providers process information as part of the services they provide to the Site. Their own terms, security practices, and privacy policies also apply to their processing. Provider configuration may change, and this list will be updated when a material processing provider changes.
7. Embedded Content
Pages may contain links or embedded content from third-party platforms such as YouTube, Instagram, and Vimeo. When you interact with those platforms, they may collect information under their own privacy policies. We do not control their independent processing.
8. Security
Reasonable technical and organisational measures are used to protect information handled by the Site. These include HTTPS, security headers, server-side validation, rate limiting on enquiry submissions, restricted administrative access, and separation of production secrets from source code. No method of transmission or storage can guarantee absolute security.
9. Data Retention
Enquiry records and related correspondence are retained for up to 24 months after the last meaningful interaction, unless a longer period is reasonably necessary for an ongoing professional engagement, legal obligation, dispute, or legitimate record-keeping purpose. They are then deleted or anonymised.
Technical and analytics information may have different retention periods determined by the relevant hosting or analytics provider.
10. Cross-Border Processing
Some infrastructure and service providers used by the Site may process information outside India. For example, the production database may be hosted by Neon in the United States, while other infrastructure locations may vary by provider and configuration. Cross-border processing is handled subject to applicable law and the contractual and security arrangements of the relevant service providers.
11. Children's Privacy
This Site is not directed at children. We do not knowingly request or collect children's personal data through the public enquiry form. If you believe a child has submitted personal information, contact ruchikajharbade@gmail.com.
12. Your Privacy Requests
Subject to applicable law, you may contact us to request access to, correction of, or deletion of personal information associated with an enquiry, or to ask questions about its processing. Where processing is based on consent, you may also ask about withdrawal of that consent. Requests should be sent to ruchikajharbade@gmail.com with the subject line “Privacy Request.”
Requests may need to be verified before action is taken. Some information may be retained where necessary for legal, security, dispute-resolution, or legitimate record-keeping purposes.
13. Applicable Indian Privacy Law
This Policy is intended to support compliance with applicable Indian data-protection and information-technology requirements, including the Digital Personal Data Protection Act, 2023 and applicable rules and notifications as they come into force. The DPDP Act and its implementation have a staged commencement timeline, so the specific statutory obligations applicable at any particular date may depend on the provision and commencement date.
The Site is designed around data minimisation, clear notice, purpose-limited processing, security, consent recording for the enquiry form, and mechanisms for privacy requests. This Policy is not a substitute for legal advice.
14. Changes to This Policy
This Privacy Policy may be updated when the Site, its service providers, its data practices, or applicable law changes. The “Last updated” date at the top of this page will be changed when the Policy is materially revised.