DPDP Act 2023 Compliant · October 2026
Privacy Policy
How Grid Media Work ("Grid Media", "we", "us", or "our") collects, uses, protects, and handles your personal information and media content across our tourism franchise platforms.
Key Privacy Highlights at a Glance
- Your media is private by default: Photos, drone videos, and travel reels are delivered directly to your account. We never feature your content publicly unless you explicitly grant optional consent under the DPDP Act 2023.
- Zero upfront surprises: Personal identity documents (Aadhaar, Passport) requested during booking are utilized solely for statutory permit verification (e.g. White Rann Entry, Gir Forest Safari Permits).
- Consent revocation: You may modify or withdraw your media promotion consent at any time via your account profile or by emailing privacy@gridmedia.in.
1. Statutory Alignment: DPDP Act 2023
This Privacy Notice is issued in compliance with the provisions of the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) and applicable rules notified by the Ministry of Electronics and Information Technology (MeitY), Government of India.
For the purposes of the DPDP Act, when you reserve tours or book content shoots through Grid Media, you act as the Data Principal, and Grid Media Work operates as the Data Fiduciary.
2. Information We Collect
We collect only the data necessary to provide seamless travel planning, statutory monument clearances, and creative media deliveries:
A. Booking & Identity Data
- Full names, ages, and genders of all travellers
- Phone / WhatsApp number for field coordinator updates
- Email address for tax invoices and media delivery links
- Government ID number (Aadhaar, Driving License, or Passport) required by Gujarat Tourism border and park check-posts
B. Shoot & Creative Content Data
- Preferred shoot location, date, and golden hour time slot
- RAW and edited high-resolution stills, 9:16 reels, and drone clips
- Customer consent status regarding destination promotional usage
- Special accommodations (e.g. wheelchair access, dietary preferences)
3. Media Rights & Destination Promotion Consent
When you book an on-location Content Shoot (e.g. Sunset Reel, Drone + 360° White Rann), our booking panel presents an optional checkbox:
“You may feature this content to promote the destination. Optional – you can still book without it (DPDP Act 2023).”
If unchecked: Your media is treated strictly as private consumer work. Files are delivered exclusively to your secure private storage under “My Content” and never published, syndicated, or shared with third parties.
If checked: You grant Grid Media Work a non-exclusive, royalty-free license to feature selected travel reels or photographs on our official Gujarat Tourism promotional channels. You retain full personal ownership and copyright in your likeness.
4. DGCA Drone Flight Safety & Airspace Data
All aerial media sessions are operated strictly by DGCA-certified commercial drone pilots holding valid Remote Pilot Certificates (RPC). Drone telemetry data and flight logs are maintained in compliance with the Ministry of Civil Aviation Digital Sky guidelines and are not linked to your personal consumer identifiers.
5. Your Rights as a Data Principal
Under Chapter III of the DPDP Act 2023, you have enforceable legal rights regarding your personal data:
- Right to Access: You can view all personal details and downloaded media through your account dashboard at any time.
- Right to Correction & Erasure: You can request correction of inaccurate identity information or deletion of completed shoot files after download.
- Right to Grievance Redressal: You can contact our designated Grievance Officer regarding any data-processing concern.
- Right to Nominate: You may designate another person to exercise your privacy rights in the event of death or incapacity.
6. Data Security & Storage Architecture
All consumer transactions and media storage reside on ISO 27001-certified Indian cloud infrastructure in Mumbai and Pune. Data in transit is encrypted using TLS 1.3, and all stored media assets are encrypted at rest using AES-256 standards.
7. Grievance Officer & Contact
For inquiries, access requests, or privacy grievances pursuant to Section 12 of the DPDP Act 2023, please contact our designated Data Protection Grievance Officer:
Grievance Officer: Legal & Compliance Team
Entity: Grid Media Work Private Limited
Headquarters: SG Highway, Bodakdev, Ahmedabad, Gujarat 380054, India
Email: privacy@gridmedia.in
Response SLA: Inquiries are addressed within 7 business days.
