Privacy Policy

This Privacy Policy explains how Voro Ventures Private Limited (CIN: U62099DC2026PTC475687) ("Voro", "we", "us"), which operates the brand Voro Films and the website vorohq.com (the "Website"), collects, uses, shares and protects personal data. It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and the rules made under it (together, "Applicable Law").

1. Who we are

For personal data collected through the Website, enquiries, contracts and billing, Voro is the Data Fiduciary. Our registered office is at 4550, Chawri Bazar, Charkhewalan, Delhi 110006, India, and our corporate office is at 603-604, Bhutani Alphathum, Sector 90, Noida, Uttar Pradesh 201305.

When we film or photograph people on behalf of a client (for example, a client's employees or event attendees), the client usually decides why and how that footage is used. In those cases the client is the Data Fiduciary and Voro processes the footage as the client's Data Processor, under the client's instructions and our project agreement.

2. Personal data we collect

We do not intentionally collect sensitive personal data such as health, financial account credentials or biometric data through the Website. Please do not send such data to us unless we specifically ask for it for a lawful purpose.

3. How we use personal data

• To respond to enquiries and prepare quotes — based on your consent, given when you submit our enquiry form.
• To deliver a project — scheduling, crew coordination, shooting, editing, review and delivery — for the specified purpose for which you voluntarily provided the data.
• To invoice and comply with law — GST, income-tax (including TDS), companies law and record-keeping obligations.
• To operate and secure the Website — preventing spam and abuse, troubleshooting and understanding usage in aggregate.
• To send relevant updates about our services — only with your consent. You can opt out at any time.
• To establish, exercise or defend legal claims, and to comply with orders of courts, tribunals or government authorities.

We do not sell personal data, and we do not use personal data for automated decisions that have legal effects on you.

4. People who appear in our footage

• Clients are responsible for informing their employees, guests and attendees that photography or filming will take place, and for obtaining any consent required under Applicable Law (for example, through event registration terms, venue signage or written releases).
• Where we are asked to collect releases on a client's behalf, we use a written release form and share the signed copies with the client.
• Footage involving children (persons below 18 years) is captured only where the client confirms that verifiable consent of a parent or lawful guardian has been obtained.
• Anyone who appears in our footage and wishes to raise a concern may write to grievance@vorohq.com. Where the client is the Data Fiduciary, we will forward the request to them and assist them in responding.

5. Sharing of personal data

We share personal data only on a need-to-know basis with:

• Production crew and freelancers engaged for your project, bound by written confidentiality obligations;
• Service providers who host our website, email, cloud storage, review and file-transfer tools, accounting and payment systems, under contracts that require them to protect the data;
• Professional advisers such as chartered accountants, auditors and lawyers;
• Government and regulatory authorities, including for drone flight permissions (where airspace rules require it), and where required by law or a lawful order;
• A successor entity, in the event of a merger, acquisition or restructuring, subject to this Policy.

6. Storage and transfers outside India

Our primary data is stored with reputable cloud providers whose servers may be located in or outside India. Any transfer outside India is made in accordance with Applicable Law, including any restrictions notified by the Central Government on transfers to particular countries or territories.

7. Retention

We erase personal data earlier when you validly withdraw consent and no other legal ground for retention applies, or when the purpose has been served.

8. Security

We follow reasonable security practices appropriate to the nature of the data, including encrypted connections (HTTPS), access controls and two-factor authentication on business accounts, restricted access to project folders, time-limited sharing links and confidentiality agreements with crew. No system is completely secure; if a personal data breach occurs we will act in accordance with Applicable Law, including notifying affected persons and the Data Protection Board of India where required.

9. Your rights

Subject to Applicable Law, you have the right to:

• obtain a summary of the personal data we process about you and the processing activities;
• request correction, completion, updating or erasure of your personal data;
• withdraw consent at any time (this does not affect processing already carried out);
• have a readily available means of grievance redressal;
• nominate another individual to exercise your rights in the event of death or incapacity.

To exercise these rights, write to grievance@vorohq.com from the email address you used with us, or include enough detail for us to verify your identity. You also have a duty under Applicable Law not to provide false information or file frivolous complaints.

10. Cookies

The Website uses essential cookies and local storage to function (for example, remembering that you dismissed our cookie notice) and may use privacy-friendly analytics to understand traffic in aggregate. Embedded content such as Google Maps may set its own cookies, governed by the provider's policy. You can block or delete cookies in your browser settings; some features may not work as expected if you do.

11. Third-party links

The Website may link to third-party sites and platforms (such as social media, maps or video hosts). We are not responsible for their privacy practices; please review their policies.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer with any complaint or question about the processing of your personal data:

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days of receipt. If you are not satisfied with our response, you may approach the Data Protection Board of India in accordance with Applicable Law.

13. Changes to this Policy

We may update this Policy from time to time. The "last updated" date at the top shows when it was last revised. Material changes will be highlighted on the Website.