Privacy Policy

Last updated: 4 June 2026

Abhinaya Cinemas ("we", "us", "our") operates the website abhinayacinemas.com and the single-screen cinema at M C Road, Perunna, Changanacherry — Kottayam, Kerala 686101. This policy explains what personal information we collect from you, why we collect it, and what choices you have. We handle personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Information we collect

Information you give us directly

• Contact form submissions — your name, email address, optional phone number, and the message you send through the form on our site.
• Job applications — your name, email, resume and any details you choose to share when you apply to a role.
• Bookings and screenings enquiries — when you contact us about private screenings, group bookings or sponsorships, we keep the correspondence required to serve your request.

Information we receive automatically

• Technical data — IP address, browser type and version, device type, pages visited and time spent. This is used in aggregate to keep the site running well.
• Cookies and similar storage — a small number of strictly-necessary cookies (and equivalent browser storage) used by our infrastructure provider (Cloudflare) to deliver the site reliably and securely.

Information from third parties

Ticketing for our screenings is handled by BookMyShow. When you click "Book Now" on our site, you are taken to BookMyShow's platform. They collect payment and identity information directly from you under their own privacy policy — Abhinaya Cinemas does not see or store your payment details.

2. How we use your information

• Respond to enquiries you send via the contact form.
• Process and evaluate job applications.
• Send transactional or service emails you've asked for (for example, an answer to a booking enquiry).
• Keep the website secure and operational.
• Comply with applicable law and respond to lawful requests.

We do not use the information you provide for advertising, and we do not sell or rent personal data to third parties.

3. Service providers we share data with

We rely on a small set of trusted infrastructure providers to operate the site. They process data on our behalf and only for the purposes we instruct:

• Supabase — secure database and serverless function hosting (data stored in their managed Postgres cluster).
• Cloudflare — website hosting, CDN and DDoS protection.
• Resend — transactional email delivery (for example, forwarding contact-form messages to our inbox).
• BookMyShow — ticketing partner; their privacy policy applies once you leave our site to book.

4. How long we keep your information

Contact-form messages and job applications are retained only as long as needed to respond to you or evaluate your application, and routinely cleared thereafter. Operational logs and aggregate analytics are kept for a limited period for security and quality of service.

5. Your rights

Under the DPDP Act and other applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated information.
• Request that we erase information we no longer need to hold.
• Withdraw consent for any processing that is based on consent.
• Raise a grievance with us directly.

To exercise any of these rights, please write to hello@abhinayacinemas.com. We aim to respond within a reasonable time.

6. Children

Our website is intended for a general audience. We do not knowingly collect personal information directly from children under 18. If you believe a child has shared information with us, please contact us and we will delete it.

7. Cookies

We use a minimal set of strictly-necessary cookies to make the site work — for example, to remember your last selected tab and to keep infrastructure-level protections (Cloudflare) functioning. We do not use third-party advertising or behavioural-tracking cookies. You can control cookies through your browser settings.

8. Security

We use industry-standard security measures including TLS encryption in transit, server-side database access controls (Postgres row-level-security), and limited access for personnel. No method of transmission is ever 100% secure; we work to protect your data but cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. We encourage you to review this page periodically.

10. Contact us