Privacy Policy
Last updated: October 14, 2026
1. Who is responsible
Malsh Photography is operated by Dhrumil Vyas in Ontario, Canada. Dhrumil is the contact for privacy questions and requests. Email malshbydhrumil@gmail.com or call +1 289-889-2428.
2. Information you provide
The session request form collects your name, email address, phone number, session type, preferred date if supplied, message, and consent to be contacted. Please do not include payment card details, government identification, health information, or other sensitive information in the form or chat. This website does not take booking payments.
3. How we use information
We use inquiry details to respond, discuss availability and pricing, plan a requested session, keep a record of communications, and administer the website. An inquiry is not a confirmed booking. Agreeing to contact about your inquiry is not an agreement to receive unrelated promotional campaigns.
4. Booking storage and email providers
Session requests are stored in the website’s Cloudflare D1 database on the ChatGPT Sites hosting platform. The site sends booking details through FormSubmit to the Malsh Gmail inbox provided by Google. If server forwarding fails, the browser may make a backup submission to FormSubmit. Providers process information to operate their services; processing or access may occur outside Canada and may be subject to foreign laws. We remain responsible for how we use service providers to handle your inquiry. Provider terms and practices also apply to their own services.
5. Chat assistant
The current website chat uses preset responses based on Malsh information, rather than a live generative AI service. Your message and recent conversation context are sent to the website server to generate a response. The reviewed chat application does not save conversation transcripts to its booking database. Hosting services may process technical request information. Do not use chat to send confidential information. Availability, prices, and booking arrangements must be confirmed by Dhrumil.
6. WhatsApp and external services
WhatsApp, Instagram, and email links open external services. If you choose to use them, those providers handle information under their own policies. The website’s WhatsApp button opens a chat with +1 289-889-2428; pressing it does not itself confirm a booking.
7. Technical information and cookies
Hosting and security providers may process IP addresses, browser and device information, request times, and technical logs for delivery, security, and troubleshooting. The current application does not include advertising pixels or a custom visitor analytics tracker. Platform authentication or security features may use cookies or similar technologies. Authorized staff sign-in is provided through ChatGPT. Browser settings can control cookies, although restrictions may affect some functions.
8. Retention and privacy requests
Information may remain in the booking database, business email, and relevant provider systems. We do not currently operate automatic deletion of inquiries. We retain information for handling inquiries, providing services, recordkeeping, and applicable legal obligations, and review continued retention when handling a privacy request. You may ask to access or correct your personal information, withdraw consent for future optional uses, or request deletion by emailing the privacy contact. We may need reasonable identity verification. We will explain any lawful reason we cannot fulfil a request and respond within applicable legal time limits. Deletion from active records may not immediately remove provider backups or records that must legally be kept.
9. Safeguards and incidents
The website uses HTTPS and restricts the booking inbox to an authorized staff account. We take reasonable steps to limit access to customer details. No online system can guarantee absolute security. Privacy concerns or suspected unauthorized use can be reported to the contact above; we will assess incidents and take notification or reporting steps where legally required.
10. Photographs, children, and changes
A session inquiry does not authorize public use of client photographs. Portfolio or promotional use should be addressed separately with the client and other permissions needed for that use. A parent or guardian should contact us for a child’s session; children should not submit their own personal details through this website. We may update this notice as practices change and will seek additional consent where required. You may also raise privacy concerns with the Office of the Privacy Commissioner of Canada at priv.gc.ca.