## Our Approach
We understand that the information you share with us — leads, client records, and business data — is often sensitive, particularly given our focus on financial-services clients. We handle it accordingly.
## Security Measures
– Access to client data is limited to personnel and delivery partners directly involved in your engagement.
– Data is stored using industry-standard security practices, including access controls and, where applicable, encryption in transit.
– Technical delivery partners are engaged under written confidentiality and data-handling obligations before any client data is shared with them.
## Data Ownership
Data you provide to us — including any existing lead or client lists imported as part of an engagement — remains your property at all times. We process it solely to deliver the agreed service.
## Sub-Processors
Where we use third-party platforms (such as Zoho or Freshworks) or independent technical delivery partners to deliver services, those parties act as sub-processors of your data, bound by confidentiality and data-protection obligations consistent with this policy. A current list of sub-processors used for your engagement is available on request.
## Data Breach Response
In the event of a data breach affecting your personal or business data, we will notify affected clients and, where legally required, the relevant regulator (such as India’s Data Protection Board, the UAE Data Office, or the UK ICO) within the timeframe required by applicable law, and take immediate steps to contain and remediate the breach.
## Data Retention and Deletion
Client data is retained only as long as necessary to deliver the engagement and for a reasonable period afterward for legitimate business or legal purposes. You may request deletion of your data at any point, including after an engagement ends, subject to any legal obligation requiring retention.
## Your Requests
To request a copy of your data, ask questions about how it’s handled, or request its deletion, contact hello@nandysys.com.
