Legal · Privacy

Privacy Policy

Effective 09 August 2026 · Version 1.0

This Privacy Policy explains what personal information RRM Studio collects when you use our website (rrmstudio.com) or engage us for design services, how we use it, how we protect it, and the rights you have over it.

The short version. We collect only what you give us on our forms or by email — no hidden tracking of who you are. We use it to reply to you and deliver your project. We never sell it, and we never share it with anyone outside RRM Studio without your permission.

01 Who we are

RRM Studio is a graphic design studio operating from New Delhi, India. For any privacy-related question, write to us at support@rrmstudio.com.

02 Information we collect

We collect information in three ways:

Information you give us on forms

When you submit our contact, checkout, or book-a-call form, we receive:

  • Your name and role
  • Company name
  • Work email address
  • Phone / WhatsApp number
  • City
  • GSTIN (if you choose to provide it)
  • Details of the project or service you're interested in
  • Any notes or free-text you add

Information you share while a project is running

To design your documents, we receive brand assets (logos, fonts, photography), product information, financial figures for pitch decks, and any other material you send us.

Basic technical information

Our web host records standard server logs (IP address, browser type, pages visited, timestamps) for security and reliability purposes. These logs are retained for a short period and are not used to build a profile of you.

03 How we use your information

We use the information only for these purposes:

  • To reply to your enquiry and, if you become a member, deliver the design work you request.
  • To send you invoices, receipts and other transactional messages related to your subscription.
  • To occasionally send you updates about your project, our service, or important account matters.
  • To defend our legal rights, comply with the law, and prevent fraud or misuse.

04 Legal basis (DPDP Act 2023)

We rely on your consent, given by submitting our forms or engaging us for services, and on legitimate use for delivering the service you asked for, in accordance with India's Digital Personal Data Protection Act, 2023.

05 Who we share it with

We do not sell your data. We do not share it with third parties for marketing. The only entities that ever process your data on our behalf are:

  • Our web host — required to serve the website and process your form submissions.
  • Google (Gmail) — we receive form submissions as emails via Gmail, so your submission passes through Google's servers as part of email delivery.
  • Our accounting service and payment gateway, where used to raise invoices and record payments.

Where any of these processors are located outside India, that transfer is necessary to provide you the service and is safeguarded by that processor's own security controls.

06 Cookies and tracking

Our website itself does not set marketing cookies. Where we run advertising campaigns, we may embed third-party analytics or advertising pixels (for example Meta Pixel or Google Analytics). If and when we do, these will set their own cookies subject to their own privacy policies. You can decline cookies through your browser settings at any time.

07 How long we keep it

  • Enquiry forms with no follow-up: up to 12 months, then deleted.
  • Active member data: for the duration of your subscription plus 24 months, so that invoices and past work can be produced if you re-engage us.
  • Invoices and tax records: as required by Indian tax law (currently 8 years).

08 Your rights

You have the right to:

  • Access the personal information we hold about you.
  • Correct anything that is inaccurate.
  • Delete your personal information, subject to any legal record-keeping obligations we have.
  • Withdraw consent to receive further messages from us at any time.
  • Nominate another person to exercise these rights in the event of your incapacity or death, in accordance with the DPDP Act 2023.

To exercise any of these rights, write to support@rrmstudio.com. We will respond within 30 days.

09 Data security

We use reasonable technical and organisational measures to protect your information — encrypted connections (HTTPS) to our site, access controls on our internal tools, and background NDAs on our team. No system is 100% secure, but we take our custodial responsibilities seriously.

10 Children

Our service is not directed at anyone under 18. We do not knowingly collect information from minors. If you believe we hold such information in error, please contact us and we will delete it.

11 Changes to this policy

We may update this Privacy Policy from time to time. The "Effective" date at the top of this page will always reflect the latest version. If we make material changes affecting how your data is used, we will notify active members by email.

12 Contact us

Privacy queries, requests, or complaints — write to support@rrmstudio.com or WhatsApp +91 83680 24699. If you feel we have not addressed your concern adequately, you may also contact the Data Protection Board of India constituted under the DPDP Act 2023.