Who we are
ASqware is a digital marketing agency. For the purposes of data protection law we are the data controller for personal data collected through this website and through our own business activities — that is, we decide why and how it is processed.
If you have any question about this policy, or want to exercise any of the rights described below, contact us at hello@asqware.com or on +91 9747233154.
What we collect
We collect very little, and almost all of it is information you deliberately give us.
- Information you submit through the enquiry form — your name, company, email address, telephone number, the nature of your enquiry and anything else you choose to write in the message field.
- Correspondence — the content of emails, calls and messages exchanged with us, including through WhatsApp.
- Usage data collected by analytics — pages viewed, approximate location derived from IP address, device and browser type, how you arrived at the site, and how long you stayed.
- Technical data logged automatically by our hosting provider, including IP address and request times, kept for security and diagnostics.
- Client data processed during an engagement — for example access to your analytics, advertising or CRM accounts. This is covered by the separate agreement between us, and we act as a processor rather than a controller for it.
Why we use it, and on what legal basis
We only use personal data for the purposes set out below. Where the UK or EU GDPR applies, the lawful basis for each is given in brackets.
- To reply to your enquiry and discuss whether we can help (legitimate interests, and steps taken at your request before entering a contract).
- To provide the services set out in a signed agreement, and to invoice for them (performance of a contract).
- To understand how the website is used and improve it (consent, given through the cookie banner).
- To send occasional marketing emails, where you have asked to receive them (consent, withdrawable at any time).
- To keep records required for tax, accounting and legal purposes (legal obligation).
- To protect the website and our systems from abuse (legitimate interests).
International transfers
We are based in India and some of our providers are based in the United States, the European Union and elsewhere. That means personal data may be transferred outside the country you live in.
Where data covered by the UK or EU GDPR is transferred outside those areas, the transfer relies on the appropriate safeguards permitted by that legislation — usually Standard Contractual Clauses, or the provider's certification under an approved framework. If you would like details of the safeguards applied to a particular transfer, ask us and we will tell you.
How long we keep it
We keep personal data only as long as there is a reason to, and then delete it.
- Enquiries that do not become clients: up to 24 months from the last contact, so we can pick up a conversation that resumes later.
- Client records: for the duration of the engagement and for 8 years afterwards, to meet Indian tax and accounting requirements.
- Marketing consent records: for as long as you remain subscribed, and for 24 months after you unsubscribe, so we can prove the unsubscribe was honoured.
- Analytics data: retained in Google Analytics for 14 months by default.
- Server logs: typically 30 to 90 days depending on the provider.
Your rights
Whatever jurisdiction you are in, you can ask us to show you the personal data we hold about you, correct it if it is wrong, delete it, or stop using it for a particular purpose. We will not charge you for this and we will not treat you differently for asking.
Under India's Digital Personal Data Protection Act you have the right to access a summary of your data and how it is processed, to correction and erasure, and to nominate someone to exercise your rights on your behalf if you are unable to.
Under the UK and EU GDPR you additionally have the right to data portability, the right to object to processing based on legitimate interests, the right to restrict processing, and the right to lodge a complaint with your national supervisory authority — in the UK, the Information Commissioner's Office.
Under California's CCPA and CPRA you have the right to know what is collected and why, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of, but the right to know and to delete still applies.
To exercise any of these, email hello@asqware.com. We will respond within 30 days, and we may ask you to confirm your identity first so that we do not disclose your data to somebody else.
If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India, or to your own national supervisory authority if you are in the UK or the EU.
Security
We take reasonable technical and organisational measures to protect personal data: access to systems is limited to the people who need it, accounts use multi-factor authentication, the website is served over HTTPS, and client account access is granted through delegated permissions rather than shared passwords.
No system is completely secure, and we will not pretend otherwise. If a breach occurs that is likely to cause you harm, we will notify you and the relevant authority within the timeframes the law requires.
Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of the page. Where a change materially affects how we use data you have already given us, we will tell you directly rather than relying on you noticing.
Contact
Email hello@asqware.com, call +91 9747233154, or write to us at our registered office address given at the top of this policy.