Privacy Notice

Version: 2026-10-12. Effective: 12 October 2026.

1. Scope and contact

This notice explains how TURNKNOB, the platform trading name at https://turnknob.in, handles information for studio discovery, account access and bookings. It does not claim a registered company or registered office. Contact support@turnknob.in with the subject “Privacy request” for privacy questions, access/correction requests, account closure or a complaint. The studio you engage is separately responsible for information it handles in supplying its services. This notice is information about processing, not a request for unrestricted permission to use your data.

2. Information handled

• Account information: name, email, account role, optional phone/profile fields and authentication identifiers. Authentication is handled through the configured sign-in service; never send your password or OTP to support.
• Studio information: business contact/location, listing descriptions, rooms, equipment, prices, policies and photos you choose to publish. Public listing fields and uploaded listing images may be visible to visitors and search engines.
• Booking and business records: session details, booking status, relevant artist/studio contact details, manual-payment references, reviews and invoices where used. We do not request card numbers, CVVs or online-banking passwords.
• Support and interest-form submissions: what you send us, the requested response/contact permission and any separately selected newsletter preference. Avoid sensitive or unnecessary third-party information.
• Security and operational information: technical logs, network addresses processed by hosting/reverse-proxy services, error information and information necessary to authenticate and protect the service.
• Policy-acceptance evidence: authenticated account identifier and role, server-recorded time, exact document versions/content hashes, explicit agreement/acknowledgement statements and limited browser/user-agent information. The acceptance feature does not store a raw client IP address or email in its acceptance record.

3. Why information is used

We use relevant information to provide account access, publish your chosen listing, route and manage booking requests, support a session, maintain accurate business records, answer requests, prevent misuse, investigate an incident and keep evidence of the agreement governing a studio account. Processing must have a lawful basis under the law that applies; inclusion in a contract does not itself make every data use necessary or lawful. Where specific consent is needed, we request it separately and honour applicable withdrawal rights. Optional marketing is not a condition of accepting studio terms.

4. Sharing and service providers

Relevant information is shared with the artist/studio involved in your booking or enquiry and with authorised support/administrative personnel on a need-to-know basis. Hosting, database/authentication and media services include AWS and Supabase. Communications and operational providers may process the information necessary to deliver a requested message or maintain the service. We may disclose information where required by law, to protect safety or security, or to establish/defend a legal claim. We do not sell personal information. Do not treat a publicly displayed studio address/contact as permission to repurpose private booking information.

5. Optional connections and location

You can choose to connect supported external calendars, such as Google Calendar or Calendly, where available. The connection flow identifies the requested access; do not connect if you do not want the corresponding calendar information used. Provider terms/privacy notices apply to their services. Core studio listing and booking do not require a calendar connection. Device location is requested only when you choose a location-based feature and permit your browser to share it. You may decline browser location permission and use city/search fields instead.

6. Cookies, local storage and analytics

Essential browser storage keeps sign-in/session state, preferences and the account interface functioning. The Cookies & Analytics Notice gives further details. Optional behavioural telemetry is disabled in this beta release; accepting studio terms or acknowledging this notice does not turn it on. We do not treat an untouched or pre-selected checkbox as an optional analytics/marketing choice. If optional analytics is introduced, we will explain its purpose and offer a separate lawful choice before enabling it where required. Security/service logs are different from optional behavioural analytics.

7. Retention, closure and minimisation

We keep information only for the purpose and period reasonably necessary to run the service and meet applicable obligations. Account/listing records are normally needed while the account is active; booking, payment, tax or dispute records may need longer retention under applicable law. Minimal agreement evidence may be retained after closure to establish which terms applied and resolve a claim. We review retention rather than promising that every record disappears immediately when an account closes. Ask support about deletion or anonymisation; we will explain any specific lawful reason for retaining information. Routine backups may retain a protected copy until their normal expiry. Do not use the platform as your only archive for session files or statutory financial records.

8. Security and international handling

We use access controls, encrypted transport and restricted server-side handling for sensitive configuration. Access to acceptance audit records is limited to the account holder and authorised administrators; public policy text does not expose account records. No system is perfectly secure. Use a unique password, protect devices and report suspected compromise promptly. Providers may process information in India and other countries depending on the service and its configuration; we do not claim that all data is stored exclusively in India. Transfers and provider arrangements must comply with applicable law.

9. Requests, choices and complaints

You may ask to access, correct, obtain a copy of or delete relevant information, close an account, withdraw an optional consent or raise a concern, subject to applicable law and necessary identity verification. Use support@turnknob.in, state the request and account/listing reference and do not send a password or full identity document unless a secure, proportionate verification process has been agreed. We will respond within applicable legal periods and explain a refusal or necessary retention. A complaint to TURNKNOB does not prevent you from using a competent regulator, consumer forum or court where available. Contract acceptance and withdrawal of an optional data-use consent are separate matters.

10. Children and third-party information

Platform accounts are intended for adults aged 18 or over. Do not create an account for a child or upload unnecessary information about children. If a session involves a minor, the studio/artist must arrange appropriate guardian authority and safeguards directly; that does not authorise publishing a child's information on TURNKNOB. Notify support if a child's information appears to have been provided improperly. Obtain the required permission before publishing photos or contact details relating to staff, artists or visitors.

11. Updates

We publish dated/versioned notices and may correct wording or links without an individual email for every edit. Material changes to purposes, sharing or choices receive prominent notice or other appropriate notice before they apply where required. A new purpose requiring consent will not be enabled solely because you continue using the service. Check the policy pages periodically; the acceptance audit preserves the notice version acknowledged at that time. Applicable law takes precedence over this notice, including data-protection provisions as they come into force.