Privacy policy

Your privacy, in plain words

What this website collects, why we collect it, how long it stays, and how you can see it, change it or have it deleted.

Last updated: 19 October 2026

The short version

  • We use Google Analytics, Google Ads and the Meta Pixel to see how the site is used and which ads bring families to us. Google and Meta may also use your visit to show our ads to people who have been on this site (remarketing).
  • We use Microsoft Clarity to see how people move through our pages (session recordings and heatmaps), so we can make the site easier to use. Anything that could identify you, like your reference code, is hidden from those recordings.
  • We save how you reached us (for example, the ad you came from) and a random reference code (like WB-4K7Q) in your browser, and stop using them after 90 days.
  • When you tap WhatsApp or Call, we log that tap. We don't record your name, phone number, IP address or messages in that log.
  • You can ask us to delete your log entries. Just send us your reference code on WhatsApp (you'll find it under Your rights).

Who we are

This website is run by WonderBump Studio, a newborn, maternity and baby photography studio with studios across Bengaluru, Karnataka, India. WonderBump Studio is a brand of Kiran Nair Photography. Under India's Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the "data fiduciary" for the information described here.

Registered address: No.44, Shri Shrinivasa Nilaya, Chikkabellandur, Gunjur to Carmelaram Rd, Carmelaram Post, Bengaluru, Karnataka 560035.

This policy covers this website. For photos from our sessions that appear on it, see Children.

Want this policy in Kannada or Hindi? Message us on WhatsApp and we'll send it to you.

What this website collects, and why

This website has no sign-up or contact forms. We don't ask for your name, phone number or email here. What we do collect is about how the site is used and which ads work:

  • Google Analytics 4 (usage analytics). It shows us which pages are visited, the kind of device and browser used, roughly where visitors are, and which buttons get tapped. We send it our own events when you tap WhatsApp or Call, pick a studio in the studio finder or arrive through a link to a particular studio, or tap "Get directions". Those events carry the service and studio you were looking at, the page, which button it was and where it sits on the page, how you found us (for example a Google ad or a search) and your reference code. WhatsApp and Call taps also carry a random ID for that tap. When you open one of our review links (wonderbumpstudio.com/review/…), our server tells Google Analytics which studio's link was opened, with this browser's Google Analytics ID if it has one (otherwise a random one), and sends you on to Google's review form.
  • Google Ads conversion measurement. On our live website the Google Ads tag runs on every page and receives the pages you visit. When you tap WhatsApp or Call, we tell Google Ads that this counts as an enquiry, with the random ID for that tap. The other details above go to Google Analytics only, never to Google Ads. Google uses its own cookies to tell whether the tap followed a click on one of our ads, and may use your visit to show our ads to you later (remarketing).
  • Meta Pixel (the same, for our Facebook and Instagram ads). It records page views, and when you tap WhatsApp or Call it records a "Contact" event with the same details we send to Google Analytics for that tap, including the tap ID. The pixel may also record button taps and basic page details on its own. Meta may use your visit to show our ads to you on Facebook and Instagram (remarketing).
  • Microsoft Clarity (session recordings and heatmaps). It records how you use our pages, such as scrolling, taps and mouse movement, so we can watch a replay or see a heatmap and find what is confusing or broken. Sensitive content is masked before it leaves your browser: your reference code and your distance from our studios are never recorded. We don't use Clarity for ads.

As with any website, your browser also sends Google, Meta and Microsoft your IP address and device details (such as your browser and operating system) with each of these.

Google Ads, Meta and Microsoft Clarity run only on our live website, wonderbumpstudio.com, never on test copies of it. Google, Meta and Microsoft handle this information under their own policies: how Google uses information from sites that use its services (opens in a new tab) and the Meta Privacy Policy (opens in a new tab) and the Microsoft Privacy Statement (opens in a new tab).

Your location. If you let our studio finder use your location, your browser uses it to sort our studios by distance, right on your device. Your exact location stays on your device and is never sent to us. We only keep which of our studios is nearest (see wb_studio below) and include it, like any studio you choose, in the details above.

Maps. Some studio pages can show a Google map, which loads only after you tap "Show map", so nothing is requested from Google Maps until then. Once it loads, Google receives your IP address and device details and may set its own cookies, under its own policies.

Cookies and browser storage

These are the things our own website saves in your browser. They only work on this website.

wb_attr

Stored in
A cookie and your browser's local storage
Lasts
The cookie: 90 days after it was last updated. The local storage copy: until your next visit replaces it or you clear this site's data. We never use it after 90 days.
How you reached us, saved for every visitor: the ad click ID if you came from an ad (gclid, gbraid or wbraid from Google, fbclid from Meta), the campaign tags on the link (utm_source, utm_medium, utm_campaign, utm_term), the first page you landed on, the name of the website that sent you (for example google.com) and when. A new ad click from the same network (Google or Meta) replaces the old one, so we can keep one of each. Each ad click ID is only used for 90 days after its click.

wb_ref

Stored in
A cookie and your browser's local storage
Lasts
The cookie: 90 days after your last visit. The local storage copy: until your next visit replaces it or you clear this site's data. We never use it after 90 days.
A random reference code, like WB-4K7Q. On its own it doesn't say who you are. If you send it to us on WhatsApp, our team can match your chat to your enquiry log entries, to see which ad and visit it came from, and may note a booking against it.

wb_studio

Stored in
Your browser's session storage
Lasts
This browser session only (until you close the tab)
The studio you chose (in the studio finder, or from a link), or the nearest one the finder picked from your location, so our WhatsApp message can mention it.

wb_service_intent

Stored in
Your browser's session storage
Lasts
This browser session only (until you close the tab)
The kind of shoot you looked at on our homepage or gallery (maternity, newborn or toddler), so our WhatsApp message can mention it.

wb_notice_v1

Stored in
Your browser's local storage
Lasts
Until you clear this site's data
Remembers that you closed our cookie notice (or the cookie choice you made), so we don't ask again.

Google and Meta cookies

Stored in
Cookies set by Google and Meta
Lasts
Set by Google and Meta
Google Analytics and Google Ads set their own cookies (their names usually start with _ga or _gcl), and the Meta Pixel sets its own (usually _fbp and _fbc). See Google's list of cookies (opens in a new tab) and Meta's cookies policy (opens in a new tab).

Microsoft Clarity cookies

Stored in
Cookies set by Microsoft Clarity, on our live website only
Lasts
Set by Microsoft (usually up to a year)
Clarity sets its own cookies (usually _clck and _clsk) so it can group the pages of one visit into a single recording. See Clarity's list of cookies (opens in a new tab).

Our enquiry log

When you tap a WhatsApp or Call button, we save one line in our enquiry log. It holds:

  • your reference code (like WB-4K7Q) and the time of the tap
  • a random ID for the tap (the same one sent to Google Analytics, Google Ads and Meta, so the records can be matched)
  • whether it was WhatsApp or a call, the page you were on and where the button sits on that page
  • the service and studio you were looking at
  • the ad click ID and campaign tags, if you came from an ad, the first page you landed on and how you found us, including the name of the website or app that sent you (for example instagram.com), never the full address of the page you came from
  • whether you were on a phone or a computer

Its fields hold no name, phone number, IP address or message content, and we don't record your name or number in it. We don't store your browser details either: we only use them in the moment to tell a phone from a computer and to filter out bots. Your IP address is only used briefly, in scrambled form and in memory, to stop abuse, and is never saved in the log. Like any website, our hosting provider keeps standard request logs, which include IP addresses, for a limited time.

Your reference code can link a log entry to your WhatsApp chat, so we treat the log as personal data. Only our team can open it, with a password. The website is hosted by Vercel, and the log is kept in a database run by Neon; they handle this data for us as our service providers.

When someone opens one of our review links (wonderbumpstudio.com/review/…), we also count it in the same database: only which studio's link was opened and when, with no IP address, browser details, reference code or anything else that could identify you.

If you later book a session, our team may note the booking against your reference code (the date, service, studio, amount and a short note), so we can tell which ads lead to real bookings. For bookings that came from a Google ad, we may share the ad click ID with Google Ads, along with the booking time and value, so Google can learn which ads work (this is called offline conversion import). Google already has that click ID from your ad click; we don't send your name or number. Once a booking has been shared with Google Ads, we can't take it back from Google.

WhatsApp chats and calls

Tapping a WhatsApp button opens WhatsApp with a message ready for you to send. It ends with your reference code, for example "(Ref: WB-4K7Q)". You can edit or delete that before sending.

Once you message or call us, the chat or call is handled by WhatsApp (part of Meta) or your phone network, and by our team. WhatsApp's own privacy policy (opens in a new tab) applies to the app. We use what you share with us there to answer you and arrange your session.

Children

This website is meant for parents and parents-to-be, and it doesn't ask for any details about your child.

Some photos and videos on this site show babies and children from our sessions. If one shows your child and you'd like it removed, message us on WhatsApp and we'll take it down.

How long we keep things

The cookie copies of the ad details and reference code expire after 90 days (for the reference code, 90 days after your last visit). The copies in local storage stay until your next visit replaces them or you clear this site's data, and we never use them after 90 days. The studio choice goes when you close the tab or browser.

We keep the enquiry log only as long as we need it to understand which ads work. We're setting a fixed time limit for this and will publish it here.

Your rights and choices

Under the DPDP Act, you have the right to:

  • ask what personal data we hold about you and how we use it
  • have it corrected, completed or updated
  • have it erased
  • withdraw any consent you've given
  • have a complaint (grievance) heard by us
  • nominate someone to act for you if you pass away or become unable to act yourself. Tell us on WhatsApp who you'd like that to be.

Today, the ways to use them on this website are the ones below: asking us about, correcting or deleting your log entries, clearing or blocking cookies in your browser, Google's opt-out add-on, and the button that clears what this site saved.

Delete your enquiry log entries

Send us your reference code (the WB- code at the end of your WhatsApp message, or the one shown in the box below) and we'll delete your log entries, unless the law requires us to keep them for a while. More than one visitor can end up with the same short code, so we may check the time of your visit with you to make sure we only delete yours. A booking already shared with Google Ads can't be taken back from Google. WhatsApp is the easiest way to reach us: message us on WhatsApp, or call +91 91879 10726.

You can also email any privacy request to hardcorewonders@gmail.com.

Cookies and browser storage

You can clear or block cookies and site data at any time in your browser's settings (usually under Privacy, or Site settings). That removes everything above, including Google's and Meta's cookies. Google also offers a Google Analytics opt-out add-on (opens in a new tab), and you can manage ads in My Ad Center (opens in a new tab) and Meta's ad preferences (opens in a new tab). Or use the button below to clear what our own site saved.

Grievance officer

Our grievance officer is Varun Nair, who answers questions and complaints about your personal data. Email hardcorewonders@gmail.com or message us on WhatsApp, and we'll pass it on.

We'll reply to every request or complaint as soon as we can, and within 90 days at the latest.

If you're not satisfied after using our grievance process, you can complain online to the Data Protection Board of India.

Changes to this policy

If what this website collects changes, we'll update this page and the date below.

Last updated: 19 October 2026

Back to the home page

Book on WhatsApp