1. Who we are and what this policy covers
This policy explains how Allsoft Consulting Private Limited (“allsoft®”, “we”, “us”) handles personal data when you visit this website or ask us for a demo of allsoft® Books.
We are the data controller (under the EU and UK GDPR) and the data fiduciary (under India’s Digital Personal Data Protection Act, 2023, the “DPDP Act”) for the data described here.
- Company: Allsoft Consulting Private Limited
- Registered office: Office 408, Fourth Floor, Magneto Offizo, G E Road, Raipur, Chhattisgarh, India
- CIN: U74999CT2018PTC008542
- GSTIN: 22AAQCA9248R1ZT
- Email: contact@allsoft.co
This policy covers this website only. Data that a customer stores in the allsoft® Books software is governed by the customer’s agreement with us, where the customer decides how its data is used and we act as its processor (data processor). It is not covered by this website policy.
2. What we collect
Demo-request form. When you ask for a demo we collect your name, company, work email, phone or WhatsApp number, company size, the need you are looking to meet, and any message you write. Please do not put sensitive information in the message box.
Consent records. We record your cookie choice (accept or reject), the date and time, and the policy version, so we can show that we respected it.
Analytics data, only after you consent. Google Analytics 4 and Microsoft Clarity collect information about how you use the site: pages viewed, clicks, scrolling, approximate location, browser and device type, and a random identifier set in a cookie. Clarity can also record your session as a replay. We ask Clarity to mask form fields and other sensitive content.
Security data. Google reCAPTCHA v3 checks whether a form submission looks like it comes from a person. It uses signals such as your IP address, browser data and interactions with the page.
Technical logs. Our host keeps standard server logs (IP address, request, time and browser type) to deliver the site and keep it secure.
We do not intentionally collect special categories of personal data.
3. Why we use your data, and our lawful bases
| Purpose | Data | Lawful basis (GDPR) | Basis (DPDP Act) |
|---|---|---|---|
| Reply to your demo request and arrange the demo | Form data | Steps taken at your request before a contract (Art. 6(1)(b)); our legitimate interest in responding to business enquiries (Art. 6(1)(f)) | Your consent, given when you submit the form |
| Follow up about allsoft® Books after your enquiry | Form data | Legitimate interest in business-to-business follow-up (Art. 6(1)(f)); you can object at any time | Your consent |
| Measure and improve the website | Analytics data, replay data | Consent (Art. 6(1)(a)) | Your consent |
| Protect forms from spam and abuse | reCAPTCHA signals, logs | Legitimate interest in security (Art. 6(1)(f)) | Legitimate use |
| Keep a record of your cookie choice | Consent records | Legal obligation and legitimate interest (Art. 6(1)(c), (f)) | Legitimate use (proof of consent) |
| Meet legal, tax and accounting duties; handle claims | Form and business records | Legal obligation (Art. 6(1)(c)); legitimate interest (Art. 6(1)(f)) | Legitimate use |
Analytics and session replay run only after you accept them. If you reject, or ignore the banner, they do not load. You can withdraw consent at any time (see section 9). Withdrawing does not affect anything we did before.
We do not sell personal data and we do not use it for automated decisions that significantly affect you.
4. Who we share data with
We use these service providers (processors) to run this website:
- Google (Google Analytics 4 and Google reCAPTCHA v3): website analytics, using Google Consent Mode so measurement follows your choice; and spam protection on forms.
- Microsoft (Clarity): session replay and heatmaps, only after consent.
- Amazon Web Services (Simple Email Service, SES): delivers the email that carries your demo request to us and any reply or confirmation sent back to you.
- Vercel: hosts the website and delivers it to your browser.
These providers may use the data only to provide their service to us, under their data-processing terms. Google and Microsoft may also act under their own privacy policies for some of the data their tools collect.
We may also disclose data where the law requires it, to protect our rights, or to professional advisers under a duty of confidentiality. If our business is sold or reorganised, data may pass to the new owner, who must respect this policy.
5. International transfers
Our company is based in India. Our providers operate in several countries, including the United States and other regions, so your data may be processed outside your own country.
- For transfers out of the EEA or UK, we rely on adequacy decisions or the Standard Contractual Clauses (with the UK addendum where needed) in our providers’ data-processing terms, or the EU-US Data Privacy Framework where a provider is certified.
- Under the DPDP Act, we transfer data outside India only to countries and under conditions the Government of India has not restricted.
You can ask us for details of the safeguards we use (see section 12).
6. How long we keep data
- Demo-request data: kept while we are in contact with you and for up to 24 months after our last contact, unless you become a customer (then the customer record rules apply) or ask us to delete it sooner.
- Consent records: kept for as long as needed to prove your choice, up to 3 years.
- Analytics and replay data: kept in Google Analytics and Clarity for up to 14 months, after which it is deleted automatically.
- Email delivery and server logs: kept for a short period, normally up to 90 days.
- Tax, billing and legal records: kept for as long as the law requires.
When a retention period ends, we delete or anonymise the data.
7. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and limiting who can see form submissions. No system is completely secure. If a personal data breach affects you, we will notify you and the authorities as the law requires.
8. Children
This website is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children. If you think a child has sent us data, contact us and we will delete it.
9. Your rights
Under the GDPR and UK GDPR you can ask us to: give you access to your data; correct it; erase it; restrict its use; give you a portable copy; and stop processing based on legitimate interests or direct marketing (object). You can withdraw consent at any time. You can complain to your local data protection authority (in the UK, the Information Commissioner’s Office).
Under the DPDP Act you can: get a summary of the personal data we process and who we share it with; ask us to correct, complete, update or erase it; withdraw your consent; use our grievance redressal service; and nominate another person to exercise these rights if you die or cannot act for yourself.
To withdraw cookie consent, use the “Cookie settings” link in the footer of any page and change your choice.
To use any other right, email contact@allsoft.co. We may ask you to verify your identity. We reply within 30 days (or sooner if the law requires), and there is normally no charge. We can refuse a request only where the law allows, and we will tell you why.
10. Grievance officer
If you have a concern about how we handle your data, please contact our grievance officer first:
- Name: Nitin Kabra, Grievance Officer
- Company: Allsoft Consulting Private Limited, Office 408, Fourth Floor, Magneto Offizo, G E Road, Raipur, Chhattisgarh, India
- Email: contact@allsoft.co
- Hours: Monday to Friday, 10:00 am to 6:00 pm IST
We will acknowledge your complaint and aim to resolve it within the time the law allows. If you are not satisfied, you may complain to the Data Protection Board of India (for matters under the DPDP Act) or to your local data protection authority.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it last changed. If a change is significant, we will say so on the website.
12. Contact
For any privacy question, or to ask for details of our safeguards or service providers, write to contact@allsoft.co or to the address in section 1.