PRIVACY POLICY.

Last Updated: October 1, 2026•Effective Date: October 1, 2026•✓ DPDP Act 2023 & Rules 2025

Core Privacy Commitments (v2.0)

• Zero Data Selling: We never sell, rent, or trade your personal data.

• Minimal Collection: Only commercial details required for video execution.

• Financial Security: We never store card numbers, CVVs, or payment OTPs.

• Minor Protection: Under-18 participants require parent consent; no ad tracking.

• Data Fiduciary Role: Governed by India's DPDP Act and Rules framework.

• Direct Rights: Right to access, correct, delete, or withdraw consent at any time.

Table of Contents • Quick Jump:

1. Overview & Data Protection Principles 2. Categories of Personal Data Collected 3. Data Sharing & Third-Party Processors 4. Data Retention Periods 5. Your Privacy Rights & Grievance Officer

1. Overview & Data Protection Principles

Anivel Media respects your privacy and is committed to protecting your personal data in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025. Roles: • For direct clients, inquiry submitters, and website visitors: Anivel Media acts as a Data Fiduciary determining the purpose and means of data processing. • When handling client audience data, customer inquiries, or advertising lists on behalf of a brand client: The client acts as the Data Fiduciary, and Anivel Media acts strictly as a Data Processor under documented client instructions.

2. Categories of Personal Data Collected

We collect only personal data necessary for commercial execution: • Contact Details: Full name, business email address, WhatsApp number, phone number. • Business & Brand Information: Company name, Instagram handle, website URL, base city/location. • Project Specifications: Chosen service plans, campaign goals, kickoff timelines, asset drive links (Google Drive/Dropbox), and creative notes. • Production Materials: Photographic and video footage, including identifiable faces, voices, and names captured during scheduled shoots under valid model releases. • Technical & Log Data: IP address, browser type, referral source, and technical timestamps recorded during website interactions. We do NOT collect, store, or process debit/credit card numbers, CVVs, or payment OTPs. All payment transactions are handled through secure, PCI-DSS compliant third-party gateways.

4. Data Retention Periods

Personal data is retained only for the duration required for legitimate business and legal purposes: • Inquiries Without Booking: Retained for up to twelve (12) months. • Client Project Files & Communications: Retained for the duration of the engagement plus twenty-four (24) months. • Financial & Accounting Records: Retained for 6 to 8 years as required by Indian taxation and corporate laws. • Raw Video Shoot Footage: Retained on active production storage for sixty (60) days following final asset delivery. • Security & Access Logs: Retained for at least twelve (12) months.

5. Your Privacy Rights & Grievance Officer

Under the DPDP framework, you have the right to request: • Access: Review a summary of your personal data processed by Anivel Media. • Correction & Updating: Rectify inaccurate or incomplete data. • Erasure: Request deletion of your personal data where retention is no longer necessary or legally required. • Consent Withdrawal: Withdraw previously given consent for marketing communications. • Nomination: Nominate an individual to exercise privacy rights in the event of death or incapacity. To exercise your rights or register a privacy grievance, contact our designated Grievance Contact: Email: work.affanshaikh@gmail.com Phone / WhatsApp: +91 94287 77887 Subject Line: Privacy Data Request - [Your Name / Brand] Response Window: Within thirty (30) days of receipt.