Privacy Policy

Who we are

AV Solutions is an IT and software company based in Kolkata, West Bengal, India. We decide how and why the personal information described in this policy is used, which makes us its data fiduciary under Indian law and its controller under laws such as the GDPR.

This policy covers our website and the ways you can get in touch with us: our contact and job application forms, email, phone, WhatsApp and our social media pages. It also covers the business contact details of our clients and suppliers.

It does not cover personal information inside the software we build, host or manage for our clients. There, our client decides how the information is used and we act on their instructions under our agreement with them. If you use a system we run for one of our clients, please contact that organisation first; we'll help them respond to you.

What we collect

We only collect what you choose to give us, basic technical information every website receives and, if you accept analytics cookies, how you use our website.

• Enquiries. When you use our contact form: your name, company (optional), email address, phone number (optional), the service you're interested in, how you'd like us to reply, and your message.
• Newsletter. When you sign up for our newsletter, or tick the box on our contact form: your email address.
• Job applications. Your name, email address, phone number, what you tell us about yourself, and your CV with anything you include in it.
• Direct messages. When you email, call, WhatsApp or message us on social media: your contact details and whatever you tell us. The platform you use (for example WhatsApp or LinkedIn) also handles that message under its own privacy policy.
• Clients and suppliers. Business contact details, and the contract, billing and payment information we need to work together.
• Technical information. Like any website, the server that delivers our pages automatically receives technical details from your browser, such as your IP address, browser type and the page you asked for. Our hosting provider may keep these in logs for a short time to keep the website running securely. We don't use them to identify you or to build a profile of you.
• Website usage, only if you accept analytics cookies. Through Google Analytics: the pages you view and for how long, how you arrived, your approximate location (country and city), and your type of device and browser. We look at this only as totals and trends. See cookies and analytics.

We never ask for sensitive information such as health, financial, biometric or government-ID details, or information about religion, politics or sexuality. Please don't include it in your messages.

How we use it, and why

We use your information only for the purpose you gave it to us for:

Under India's Digital Personal Data Protection Act, 2023, we process your information with your consent, or for the specific purpose you voluntarily provided it for. Where we rely on your consent, you can withdraw it at any time (see your rights).

We will never:

• sell, rent or trade your personal information;
• use it for targeted advertising, or share it with anyone for that purpose;
• make decisions about you by purely automated means, or profile you;
• add you to our newsletter or any marketing list without your consent. Every newsletter includes an unsubscribe link, and you can also email us to stop.

Cookies and analytics

We use Google Analytics to see which pages people read and how they find us, but only if you accept analytics cookies in the banner shown on your first visit. Until then, nothing is loaded from Google and no analytics cookies are set. Declining is as easy as accepting, and you can change your mind anytime from “Cookie settings” at the foot of every page.

Google Analytics doesn't store your IP address, we tell Google not to use the data for advertising, and it's kept for at most 14 months. We don't use advertising pixels or any other tracking, and our fonts and images are served from our own website.

Our Cookie Policy lists every cookie, what it's for and how long it lasts.

Who we share it with

We only share personal information with:

• Service providers who help us run our business, such as the companies that host our website, deliver our email and store our files, and Google, which provides our website analytics if you accept analytics cookies. They may only use it to provide their service to us, on our instructions, and must keep it confidential and secure.
• Professional advisers such as accountants, auditors and lawyers, who are bound by confidentiality.
• Authorities, when the law, a court order or a lawful government request requires it, or when it's needed to protect someone's rights or safety.
• A new owner, if our business is ever reorganised, merged or sold. They would have to protect your information as this policy describes.

We don't share it with anyone else.

International transfers

We're based in India, so your information is handled in India. Our service providers may store it on servers in other countries. Whenever your information leaves the country you're in, we protect it as the law requires there:

• From the EU, EEA or UK: using approved safeguards, such as the European Commission's Standard Contractual Clauses or the UK's International Data Transfer Agreement, unless the destination has an adequacy decision.
• From mainland China: only with your separate consent and the other steps the Personal Information Protection Law requires.
• From India: in line with any restrictions the Government of India sets under the Digital Personal Data Protection Act.
• From anywhere else: with the safeguards your local law requires.

How long we keep it

We keep personal information only for as long as we need it, then delete it or make it anonymous:

• Enquiries that don't lead to work: up to 2 years after our last contact.
• Client and supplier records: for as long as we work together, and afterwards for as long as tax, accounting and company laws require us to keep business records.
• Newsletter: until you unsubscribe. After that we keep only a note that you unsubscribed, so we never email you again by mistake.
• Job applications: up to 12 months, so we can consider you for other roles, unless you ask us to delete yours sooner. If you join us, your application becomes part of your employee record.
• Technical logs: kept by our hosting provider for a short period, for security.
• Website analytics: at most 14 months, in Google Analytics.

You can ask us to delete your information sooner, unless the law requires us to keep it.

Your rights

Wherever you live, you can ask us to do any of the following. We give everyone these rights, not just people whose local law requires it:

• Access: tell you what personal information we hold about you, how we use it, and who we've shared it with.
• Correction: correct, complete or update it.
• Deletion: delete it, unless the law requires us to keep it.
• Withdraw consent: stop using it where we relied on your consent. Withdrawing is as easy as giving consent, and doesn't affect anything we did before.
• Object or restrict: stop or limit how we use it, including for any marketing.
• Portability: give you a copy in a common, machine-readable format.
• Nominate: name someone who can exercise these rights for you if you die or become unable to (a right under Indian law).
• Complain: raise a grievance with us, and with a data protection authority (see laws by region).

To use any of these rights, email support@avsolutions.in and tell us what you'd like. We may ask a few questions to confirm it's really you, but we won't ask for more information than we need to do that. Someone you authorise can also ask on your behalf, with proof that you've authorised them.

It's free. We'll reply within one month. If a request is complex and the law allows more time, we'll tell you why and when to expect our answer. We'll never treat you differently for using your rights.

Laws by region

We work with clients around the world. This policy is written to meet the data protection laws below, and wherever your local law gives you more protection than this policy, we follow your local law.

India

Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025; Information Technology Act, 2000. If we can't resolve your grievance, you can complain to the Data Protection Board of India.

European Union (including Ireland, Denmark and Spain)

General Data Protection Regulation (GDPR) and national laws such as Ireland's Data Protection Act 2018, Denmark's Data Protection Act and Spain's Organic Law 3/2018 (LOPDGDD). You can complain to your local supervisory authority, such as the Data Protection Commission (Ireland), Datatilsynet (Denmark) or the AEPD (Spain).

United Kingdom

UK GDPR and the Data Protection Act 2018. You can complain to the Information Commissioner's Office (ICO).

United States

State privacy laws where they apply, such as the California Consumer Privacy Act as amended by the California Privacy Rights Act. We do not sell personal information or share it for cross-context behavioural advertising, and have not done so in the past 12 months. You have the rights to know, delete and correct your information, and not to be discriminated against for using them.

Canada

Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws such as Quebec's Law 25. You can complain to the Office of the Privacy Commissioner of Canada.

Australia

Privacy Act 1988 and the Australian Privacy Principles. You can complain to the Office of the Australian Information Commissioner (OAIC).

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and the DIFC and ADGM data protection laws where they apply.

China

Personal Information Protection Law (PIPL). We ask for your separate consent before transferring your personal information outside mainland China.

Africa

Kenya's Data Protection Act, 2019 (Office of the Data Protection Commissioner); Uganda's Data Protection and Privacy Act, 2019 (Personal Data Protection Office); Zimbabwe's Cyber and Data Protection Act, 2021 (POTRAZ); and the Democratic Republic of the Congo's Digital Code, 2023. In Mozambique, Sudan and other countries, we apply everything in this policy together with any local rules that apply.

Everywhere else

We apply this policy to everyone. If your local law gives you additional rights, contact us and we'll honour them.

Keeping it secure

We protect personal information with appropriate technical and organisational measures. These include encrypted connections to our website, limiting access to the people who need it for their work, and using service providers who are bound by security and confidentiality obligations.

No system is completely secure. If a breach affects your personal information, we'll tell you and the relevant authorities as the law requires, including the Data Protection Board of India and, for people in the EU or UK, the supervisory authority within 72 hours where required.

Children

Our website and services are meant for businesses and adults. We don't knowingly collect personal information from anyone under 18. If you believe a child has sent us their details, email support@avsolutions.in and we'll delete them.

Other websites

Our website links to other services, including WhatsApp, LinkedIn, Instagram and YouTube. When you follow those links, their own privacy policies apply, not this one.

Changes to this policy

We'll update this policy when our practices or the law change, and change the “last updated” date at the top. If a change significantly affects how we use your information, we'll make it clear on this page, and ask for your consent where the law requires it.

Contact us and grievances

For any question, request or complaint about your personal information, email support@avsolutions.in. We'll acknowledge your message and reply within one month.

If you're not satisfied with our answer, you can complain to the data protection authority where you live (see laws by region). In India, you can take your grievance to the Data Protection Board of India after contacting us.