Privacy Policy

1. Who We Are

Face Stories by Varsha is a makeup and beauty academy and professional makeup services brand based in Chennai, Tamil Nadu.

Our activities may include:

• Professional bridal and occasion makeup services
• Makeup consultations
• Makeup education and professional training
• Makeup courses and masterclasses
• Student training and portfolio development
• Workshops and educational events
• Marketing and promotional activities
• Website-based enquiries and lead generation
• Client and student communication
• Related beauty and education services

For privacy-related questions or requests, you may contact us using the details provided in the Contact Us / Grievance Redressal section of this policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through or in connection with:

• Our website and webpages
• Website enquiry and contact forms
• Course enquiry and admission forms
• Bridal and makeup booking enquiries
• Consultation requests
• Telephone calls
• WhatsApp communications
• Email communications
• Social media interactions
• Academy admissions and student interactions
• Client bookings and service records
• Events, workshops and masterclasses
• Reviews and testimonials
• Photographs and videos associated with our services or academy activities
• Online advertisements and campaigns
• Other services or communications that expressly refer to this Privacy Policy

This policy does not automatically apply to websites, applications or services operated independently by third parties.

3. Personal Information We May Collect

The information we collect depends on how you interact with us.

3.1 Information You Provide Directly

You may provide information such as:

• Full name
• Mobile number
• WhatsApp number
• Email address
• City or location
• Age or date of birth where relevant to a service or course
• Preferred course
• Preferred batch
• Professional background
• Booking date
• Event date
• Venue or service location
• Makeup requirements
• Hairstyling requirements
• Service preferences
• Consultation details
• Course-related information
• Payment-related information
• Messages and communications you send to us
• Reviews and feedback
• Other information you voluntarily provide

We request only information that is reasonably relevant to the purpose for which it is collected.

4. Information Collected Through Makeup and Bridal Service Enquiries

If you contact us regarding bridal makeup, engagement makeup, reception makeup, occasion makeup, hairstyling or other beauty services, we may collect information necessary to understand and fulfil your enquiry or booking.

This may include:

• Name
• Phone number
• WhatsApp number
• Email address
• Event date
• Event type
• Event location
• Number of people requiring services
• Preferred makeup or hairstyling services
• Relevant preferences or requirements
• Budget or package information voluntarily provided
• Photographs voluntarily shared with us
• Communication history
• Booking and payment information

This information may be used to assess availability, prepare quotations, communicate with you, coordinate services and manage your booking.

5. Academy and Student Information

If you enquire about or enrol in one of our courses, we may collect information necessary to manage your educational relationship with us.

This may include:

• Name
• Contact information
• City
• Educational or professional background where relevant
• Course selected
• Batch selected
• Admission information
• Payment information
• Attendance information
• Course participation
• Assignment or portfolio information
• Student feedback
• Certification-related information
• Communication records
• Photographs or videos associated with classes, workshops or portfolio activities

This information may be used to administer admissions, communicate course information, manage batches, provide educational services, maintain records and provide applicable certificates or course documentation.

6. Photographs, Videos and Visual Content

Because Face Stories by Varsha operates in the makeup, beauty and education industry, photographs and videos may form an important part of our services and marketing activities.

Photographs or videos may be collected when:

• You voluntarily send them to us
• You participate in a makeup service
• You participate in an academy class or event
• You participate in a portfolio shoot
• You provide a testimonial
• You voluntarily provide content for promotional purposes
• Photography or videography takes place during an event, workshop or class

We may use photographs or videos for internal operational purposes where reasonably necessary.

We will seek appropriate permission or consent where required before using identifiable photographs, videos or testimonials for public-facing marketing purposes such as:

• Our website
• Social media
• Advertisements
• Promotional campaigns
• Student success stories
• Portfolio pages
• Educational content
• Marketing materials

Where consent is the basis for publication, you may withdraw that consent for future use by contacting us.

Withdrawal of consent does not necessarily require us to recall or remove materials that have already been lawfully published, printed, distributed, archived, or incorporated into completed advertising or promotional materials, subject to applicable law and practical feasibility.

7. Testimonials and Reviews

If you voluntarily provide a review, testimonial, feedback, photograph, video or other content, we may use that content for reputation, educational or marketing purposes where we have the appropriate permission or other lawful basis to do so.

Where appropriate, we may display:

• Your first name
• Your review
• Your course or service experience
• Your photograph or video
• Your city
• Other information that you have specifically authorised us to publish

We will not intentionally publish additional personal information beyond what is reasonably necessary for the intended purpose.

8. Payment Information

Where you make a payment for a course, service, booking, consultation or other transaction, payment information may be processed through third-party payment providers.

Depending on the payment method, we may receive limited transaction information such as:

• Transaction reference
• Payment status
• Amount paid
• Date of transaction
• Payment method
• Booking or order reference

We generally do not need to receive or store your complete card number, CVV or banking credentials when payments are processed directly by an authorised payment gateway.

Payment providers may process your information under their own privacy policies and terms.

9. Telephone, WhatsApp and Email Communications

When you communicate with us through telephone, WhatsApp, email or other communication channels, we may retain relevant communication information for purposes such as:

• Responding to enquiries
• Managing bookings
• Managing course admissions
• Providing customer support
• Following up on enquiries
• Resolving disputes
• Maintaining business records
• Improving our services

Please note that WhatsApp, email providers, telecommunications providers and other communication platforms may independently process information under their own privacy policies.

10. Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, depending on the technologies implemented on the website.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Approximate location derived from technical information
• Pages visited
• Referring webpage
• Date and time of visit
• Website interactions
• Device identifiers
• Performance and diagnostic information

This information may be used to operate, secure, analyse and improve the website.

11. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, scripts and similar technologies.

These technologies may be used for:

• Essential website functionality
• Security
• Remembering preferences
• Website performance
• Analytics
• Measuring advertising campaigns
• Understanding website usage
• Remarketing or advertising, where enabled

Where required, non-essential technologies will be used in accordance with applicable consent requirements.

You may also be able to manage cookies through your browser or applicable consent controls. Disabling certain cookies may affect website functionality.

12. Analytics and Advertising Technologies

We may use third-party technologies such as website analytics and advertising platforms to understand how visitors interact with our website and to measure the effectiveness of our marketing.

Depending on the tools implemented on the website, these may include services such as:

• Google Analytics
• Google Ads
• Meta advertising technologies
• Meta Pixel
• Other analytics, advertising or conversion-tracking technologies

These technologies may collect information such as device information, website activity, approximate location, advertising identifiers and interactions with our website.

The actual technologies used may change over time as our website and marketing infrastructure develops.

Third-party providers may process information according to their own policies.

13. How We Use Personal Information

We may use personal information for purposes including:

Service Delivery

• Responding to enquiries
• Providing makeup and beauty services
• Managing bookings
• Scheduling appointments
• Understanding service requirements
• Providing consultations
• Coordinating event services

Academy Operations

• Processing admissions
• Managing course enquiries
• Allocating batches
• Communicating schedules
• Managing attendance
• Providing training
• Managing portfolio activities
• Issuing applicable certificates or course documentation

Communication

• Responding to questions
• Providing requested information
• Sending booking confirmations
• Sending course information
• Providing service updates
• Providing support

Payments and Administration

• Processing or confirming transactions
• Maintaining accounting records
• Managing refunds where applicable
• Preventing fraudulent or unauthorised transactions
• Maintaining business records

Marketing

Where permitted and based on the appropriate lawful basis, we may use information to:

• Send course announcements
• Inform you about new batches
• Share offers
• Promote masterclasses
• Share relevant services
• Conduct remarketing
• Measure campaign performance
• Improve advertising relevance

You may opt out of promotional communications.

Website Improvement

We may analyse website usage to:

• Improve website performance
• Understand user behaviour
• Improve navigation
• Identify technical problems
• Improve our content and services

Legal and Security Purposes

We may process information where necessary to:

• Comply with applicable law
• Respond to lawful requests
• Protect our rights
• Prevent fraud
• Investigate misuse
• Resolve disputes
• Protect users, staff and business operations
• Establish, exercise or defend legal claims

14. Consent and Other Lawful Grounds

Where applicable law requires consent, we will request consent in a clear and understandable manner.

Consent should be specific to the purpose for which the information is being processed.

Where consent is relied upon, you may withdraw it subject to applicable law.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Certain information may continue to be retained or processed where required or permitted by law or where another lawful basis applies.

The Digital Personal Data Protection Act requires consent, where relied upon, to be free, specific, informed, unconditional and unambiguous, and provides for withdrawal of consent.

15. Marketing Communications

We may communicate with you regarding products, services, courses, batches, masterclasses, offers and other updates where permitted by applicable law.

You can request to stop receiving promotional communications at any time.

You may:

• Use an unsubscribe option where provided
• Reply to a promotional communication requesting removal
• Contact us directly
• Request that your information no longer be used for promotional communications

Stopping promotional communications does not necessarily stop essential service-related communications, such as booking confirmations, payment information, course schedules or other communications necessary to provide a service you have requested.

16. How We Share Personal Information

We do not intend to sell your personal information as a standalone commercial product.

We may share personal information where reasonably necessary with:

• Employees
• Makeup artists
• Academy staff
• Authorised representatives
• Service providers
• Website hosting providers
• CRM providers
• Communication platforms
• Email service providers
• Payment gateways
• Analytics providers
• Advertising platforms
• IT and technology providers
• Professional advisers
• Legal or regulatory authorities where required
• Other parties where necessary to provide a service you have requested or where permitted by law

We seek to limit information shared with third parties to information reasonably necessary for the relevant purpose.

17. Third-Party Service Providers

Our website and business operations may depend on third-party technology and service providers.

These may include providers for:

• Website hosting
• Domain and infrastructure services
• Website analytics
• Advertising
• CRM
• Email
• WhatsApp or messaging
• Payment processing
• Security
• Website performance
• Cloud storage
• Customer support

Such providers may process personal information on our behalf or independently, depending on the service.

We expect relevant service providers to maintain reasonable safeguards appropriate to the information they process.

18. Social Media

We maintain and use social media accounts and may provide links to platforms such as Instagram, Facebook and YouTube.

Interactions with these platforms are governed by the privacy policies and terms of the respective platforms.

If you voluntarily interact with our social media pages, submit comments, send messages, tag us, or otherwise make information publicly available, that information may be visible to others depending on the platform’s settings.

We do not control the privacy practices of independent social media platforms.

19. Third-Party Websites and Links

Our website may contain links to websites, applications or services operated by third parties.

Examples may include:

• Payment providers
• Social media platforms
• Maps
• Messaging platforms
• External booking systems
• Educational or technology platforms

Once you leave our website, the third party’s privacy policy may apply.

We are not responsible for the privacy practices, security or content of independently operated third-party websites.

20. Data Security

We take reasonable measures designed to protect personal information against:

• Unauthorised access
• Unauthorised disclosure
• Accidental loss
• Destruction
• Misuse
• Unauthorised alteration

Security measures may include technical, organisational and administrative safeguards appropriate to the nature of the information and the risks involved.

However, no internet transmission, electronic storage system or digital service can be guaranteed to be completely secure.

You should avoid sending sensitive information through unsecured communication channels unless specifically requested and appropriate.

The DPDP framework includes obligations relating to reasonable security safeguards and personal-data breach handling.

21. Data Breaches

If we become aware of a personal data breach that requires notification under applicable law, we will take appropriate steps to investigate, contain and address the incident and provide notifications where required.

This may include notifying affected individuals and/or relevant authorities in accordance with applicable legal requirements.

22. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Different categories of information may have different retention periods.

For example:

• Enquiry information may be retained for reasonable sales and customer-service purposes.
• Booking information may be retained for operational and accounting purposes.
• Student records may be retained for academic, certification and administrative purposes.
• Transaction information may be retained as required for accounting, tax and legal purposes.
• Marketing preferences may be retained to ensure that promotional communications are appropriately managed.
• Website analytics information may be retained according to the settings of the relevant analytics provider.

When information is no longer reasonably required, we may delete, anonymise or otherwise dispose of it in accordance with applicable law and our operational requirements.

23. Your Rights and Choices

Subject to applicable law and the applicable implementation of the DPDP framework, you may have rights concerning your personal information.

These may include the ability to:

• Request information about personal data being processed
• Request correction of inaccurate or incomplete information
• Request updating of information
• Request erasure where applicable
• Withdraw consent where consent is the basis for processing
• Request grievance redressal
• Exercise other rights available under applicable law

The DPDP Act establishes rights and duties for Data Principals, including rights relating to consent withdrawal and grievance redressal.

Requests may be subject to reasonable verification requirements to protect against unauthorised requests.

24. Withdrawal of Consent

Where we process your personal information based on your consent, you may withdraw that consent by contacting us.

We will process such requests in accordance with applicable law.

Withdrawal of consent may affect our ability to provide certain services where the information is necessary for those services.

For example, if you withdraw consent for information necessary to manage a requested service, we may no longer be able to provide that service.

Withdrawal does not automatically require deletion where continued retention or processing is required or permitted by law or is based on another lawful ground.

25. Correction or Updating of Information

If information we hold about you is inaccurate, incomplete or outdated, you may contact us and request correction or updating.

We may request reasonable verification before changing personal information.

26. Deletion Requests

You may request deletion of personal information where applicable.

However, deletion may not always be possible immediately where information is required for:

• Legal compliance
• Tax or accounting records
• Fraud prevention
• Dispute resolution
• Contractual obligations
• Exercise or defence of legal claims
• Other lawful purposes

Where deletion is not possible, we may retain the information only for the applicable lawful purpose and, where appropriate, restrict its further use.

27. Children’s Personal Data

Our academy and professional services are primarily intended for adults and individuals capable of independently providing consent where required.

We do not knowingly seek to collect children’s personal data for unnecessary purposes.

Where services, events, content or other activities involve a child, we will follow applicable legal requirements relating to children’s personal data and obtain any required consent or authorisation from the appropriate person.

We do not knowingly use children’s personal data for targeted advertising or behavioural monitoring where prohibited by applicable law.

28. International Processing

Some third-party technology, analytics, advertising, communication or cloud-service providers used by us may process information on infrastructure located outside India.

Where personal information is processed outside India, we will take steps required under applicable law and applicable contractual or organisational arrangements.

International processing may also be subject to the privacy policies and terms of the relevant service provider.

29. Data of Clients and Students

Different types of personal information may be processed depending on whether you interact with us as:

A Makeup / Beauty Client

We may process information relating to your event, booking, preferences, contact information, service requirements, photographs and transaction history.

A Student

We may process admission, course, attendance, communication, payment, certification, portfolio and related educational information.

A Prospective Customer or Student

We may process enquiry information, contact information, interests, communication history and information required to respond to your request.

30. Reviews, Social Content and User-Submitted Material

If you voluntarily submit content to us, including reviews, testimonials, photographs, videos or other material, please ensure that you have the necessary rights and permissions to share that content.

You should not submit another person’s personal information, photograph or other content without appropriate authority or permission.

Where we publish user-submitted content for marketing or promotional purposes, we will use it in accordance with the permission or lawful basis applicable to that content.

31. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our services
• Changes in technology
• Changes in our data practices
• Changes in applicable law
• Changes in third-party service providers
• Regulatory developments

When we make material changes, we may update the “Last Updated” date and, where appropriate, provide additional notice.

We encourage you to review this page periodically.

32. Contact Us

If you have questions about this Privacy Policy, your personal information, consent, marketing preferences or privacy requests, you may contact us.

For privacy requests, please include enough information for us to understand your request and verify your identity where reasonably necessary.

33. Grievance Redressal

If you have a concern regarding the processing of your personal information, you may first contact us using the contact details above.

We will review and address privacy-related concerns in accordance with applicable law and our internal grievance process.

Where applicable law provides additional grievance or regulatory mechanisms, you may also exercise those rights through the relevant statutory authority.

34. Your Responsibility

You are responsible for ensuring that information you provide to us is accurate and, where applicable, that you have the necessary authority or permission to provide information relating to another person.

If you provide photographs, videos, contact information or other personal information relating to another individual, you should ensure that you have the appropriate permission or lawful authority to do so.

35. Consent and Acknowledgement

By submitting information through our website or voluntarily providing information to us, you acknowledge that your information may be processed for the purposes described in this Privacy Policy and in accordance with applicable law.

Where a specific consent is required, we will provide an appropriate consent mechanism at the point of collection.

You may withdraw consent where consent is the applicable basis for processing, subject to the limitations described in this Privacy Policy and applicable law.

Last Updated: August 22, 2026
Face Stories by Varsha
Chennai, Tamil Nadu, India
Email: facestoriesbyvarsha@gmail.com
Phone: +91 86677 84795