Privacy Policy & Data Protection Notice

01. Overview & Data Fiduciary Role

This Privacy Policy applies to personal data collected through abtbizsol.com, abtinfocloud.com, customer client portals, cloud service platforms, application staging environments, and during professional B2B engagements with ABT Info Cloud ("ABT", "we", "us", or "our").

When providing multi-tenant enterprise software, managed cloud infrastructure, or data engineering services on behalf of our enterprise clients, ABT processes client data strictly as a Data Processor in accordance with written Data Processing Agreements (DPAs) and documented instructions from the respective client (the Data Fiduciary).

02. Categories of Personal Data We Collect

We restrict data collection to what is necessary, proportionate, and relevant for specified business and technical operations:

• Business Contact Information: Name, professional title, corporate organization, corporate email address, business telephone number, and communication records when inquiring about our enterprise services.
• Technical & Telemetry Data: IP address, browser type and version, operating system, network identifiers, device telemetry, referral URLs, access timestamps, and telemetry gathered via consent-managed cookies.
• Contractual & Engagement Data: Authorized representative credentials, billing and invoicing details, tax identification numbers (GSTIN/PAN/VAT), and enterprise support ticket correspondence.
• Careers & Candidate Data: Curricula vitae (CVs), employment history, academic qualifications, references, and interview assessments submitted via our Careers portal.

03. Lawful Grounds for Processing (DPDP & GDPR)

We process personal data only when substantiated by valid legal grounds under applicable data protection laws:

04. Purposes of Data Processing

Your personal data is collected and utilized solely for explicit, legitimate business purposes:

1. Architecting, provisioning, maintaining, and supporting infrastructure, cloud platforms, and enterprise solutions.
2. Verifying corporate identities and preventing fraudulent or unauthorized access to our production systems.
3. Responding to technical inquiries, dispatching proposals, and coordinating solution demos.
4. Monitoring cloud performance, optimizing website navigation, and measuring digital campaign efficacy with consent.
5. Complying with statutory audits, court orders, cyber incident response reporting under CERT-In guidelines, and corporate recordkeeping obligations.

05. Consent Management & Withdrawal

Under the DPDP Act 2023, where consent forms the legal basis of processing, you have the right to give, manage, or withdraw your consent at any time:

• Notice is provided prior to or at the time of seeking consent, in plain language detailing specific purposes and categories of data.
• Withdrawal of consent may be exercised as easily as giving it, by emailing our designated Grievance Officer at grievance@abtinfocloud.com.
• Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal or processing sustained by alternative legal grounds.

06. Data Principal & Subject Rights

Regardless of your geographic location, ABT honors comprehensive data protection rights:

• Right to Access & Summary: Receive confirmation of whether your data is being processed, a summary of data held, and identities of data fiduciaries/processors with whom data has been shared.
• Right to Correction & Erasure: Request the correction of inaccurate data, completion of incomplete records, or erasure of personal data that is no longer necessary for the specified purpose.
• Right of Grievance Redressal: Avail expeditious grievance redressal mechanisms through our Grievance Officer before escalating to the Data Protection Board of India or competent Supervisory Authority.
• Right to Nominate (DPDP Sec 14): Nominate any other individual to exercise your data principal rights in the event of death or incapacity.
• GDPR Specific Rights: Data Portability (Art. 20), Restriction of Processing (Art. 18), and Right to Object to Direct Marketing or profiling (Art. 21).

07. Cross-Border Data Transfers & Cloud Infrastructure

ABT Info Cloud operates tier-grade data centers and private cloud clusters located primarily within the Republic of India. When multi-cloud architectures necessitate data transfer outside India or the European Economic Area (EEA):

• Transfers comply with restrictions or approvals mandated by the Central Government under Section 16 of the DPDP Act 2023.
• Transfers originating from the EEA/UK are governed by standard contractual clauses (SCCs) approved by the European Commission, ensuring adequate levels of data protection.

08. Retention, Security & Encryption Standards

We enforce rigorous technical and organizational controls aligned with ISO/IEC 27001 standards:

• Data Encryption: All data in transit is encrypted using TLS 1.3; data at rest across cloud storage volumes and backup pools is encrypted using AES-256.
• Access Controls: Role-based access controls (RBAC), multi-factor authentication (MFA), and automated audit logs for all administrative sessions.
• Data Retention: Personal data is deleted or securely anonymized once the purpose of collection is fulfilled, or upon expiration of statutory retention periods under Indian tax, corporate, and limitation laws.

09. Grievance Redressal Officer & Contact Details

For any inquiries, requests to exercise your legal rights, or formal privacy complaints, please contact our designated Grievance Officer: