Virus Solution Provider India Data Handling Policy
virusolutionprovider.in
Data Receipt and Acceptance
When you entrust your storage device or media to Virus Solution Provider India ("VSP India") for data recovery services, a formal chain of custody is established from the moment of pickup from your location by our authorized courier partner or upon receipt at our ISO-certified laboratory in New Delhi. Each device is logged into our secure laboratory management system with a unique service identification number, and its physical condition is documented. You will receive a media receipt acknowledging our custody. All devices are stored in a secure, access-controlled environment within our laboratory, with access limited to authorized personnel only. We maintain detailed logs of all handling activities performed on your device throughout the service engagement, ensuring full traceability and accountability.
Data Access During Recovery
During the diagnostic and recovery phases, only designated and certified engineers with a legitimate need to access your device are granted permission. All access is logged and monitored through our laboratory access control system. Engineers access your data solely for diagnosing the failure, performing recovery procedures, and verifying recovered data integrity. We employ the principle of least privilege, ensuring engineers access only the data strictly necessary for their tasks. Under no circumstances do our engineers browse, copy, or utilize your data for any purpose beyond the specific service engagement, except as required by applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). All access activities are conducted within our secure laboratory under continuous video surveillance.
Data Handling and Storage
All recovered data is handled in accordance with our standard operating procedures designed to maintain data integrity and confidentiality. Recovered data is stored on secure, encrypted storage systems within our laboratory network, isolated from external internet access and protected by firewalls, intrusion detection systems, and role-based access controls. During the recovery process, your data may be temporarily stored on various secure media as necessary for technical procedures. All such media are subject to the same security protocols as our primary systems. We maintain comprehensive audit trails documenting all data access and storage activities, retained for a minimum of 3 years for compliance purposes.
Post-Recovery Data Delivery
Upon successful recovery and your approval, recovered data is delivered to you through our free delivery service within India or through a secure digital transfer method at our discretion. We will provide a detailed inventory of all recovered files for your verification. Following delivery, we retain a secure backup of your recovered data for 30 calendar days. During this period, you may request re-delivery if needed. It is your sole responsibility to create and maintain your own backup copies immediately upon receipt. After 30 days, the backup copy is securely and permanently erased using industry-standard data destruction methods.
Data Retention and Secure Erasure
VSP India retains a secure backup of your recovered data for 30 calendar days following delivery for quality assurance and dispute resolution purposes. Upon expiration of this period, or earlier upon your written request, the retained data is permanently erased using secure overwriting methods or physical destruction of media. You may request earlier erasure at any time, and we will comply within 5 business days. Any unrecovered data remaining on your original device will not be accessible following the conclusion of the service engagement.
Physical Security and Compliance
Our ISO-certified laboratory in New Delhi is equipped with 24/7 video surveillance, biometric and keycard access controls, intrusion detection systems, and secure storage for customer devices. We comply with the data protection obligations under the Digital Personal Data Protection Act, 2023 (DPDPA) of India and maintain documented security protocols. All personnel undergo background verification and confidentiality training. In the event of a data breach, we will notify affected customers and the relevant authorities as required by applicable law.