Introduction and Scope
Virus Solution Provider ("VSP", "we", "us", or "our"), founded and operated by Sundeep Maan, is a registered data recovery and cybersecurity service provider with its principal place of business located at GH 6, 451, near St Mark Girls School, Meera Bagh, Paschim Vihar, New Delhi, Delhi 110087, India. This Privacy Policy ("Policy") governs the collection, use, storage, processing, disclosure, and protection of personal information and data of users, visitors, customers, and any entity interacting with our website located at https://virusolutionprovider.com ("Website") or availing any of our data recovery, ransomware decryption, cybersecurity consulting, or related services ("Services"). By accessing our Website or using our Services, you expressly acknowledge that you have read, understood, and hereby consent to the terms and data practices described in this Policy. If you do not agree with any part of this Policy, you must immediately discontinue the use of our Website and Services. We reserve the right to modify, amend, or update this Policy at any time without prior individual notice, and your continued use constitutes acceptance of such changes.
Information We Collect
We collect information that you voluntarily provide to us, as well as information that is automatically gathered when you interact with our Website and Services. The categories of information we collect include, but are not limited to:
Personal Identification Information: When you fill out our contact forms, request a quote, initiate a service request, or communicate with us via phone, email, or any digital channel, we may collect your full name, email address, telephone or mobile number, postal or billing address, company name, job title, and any other identifying information you choose to share with us.
Device and Service-Related Information: When you engage our data recovery or cybersecurity services, we may collect detailed information about your device(s) including make, model, serial number, operating system, storage capacity, file system type, error messages, failure symptoms, and any other technical data necessary to diagnose, assess, and perform the requested service. This may include, in limited circumstances, file metadata and directory structures.
Technical Usage Data: When you visit our Website, we and our third-party service providers may automatically collect certain technical information including your Internet Protocol (IP) address, browser type and version, operating system, device type, referring and exit URLs, pages viewed, time and date of access, clickstream data, and other similar diagnostic and usage data. This information is collected using cookies, log files, web beacons, pixel tags, and similar tracking technologies as more particularly described in our Cookie Policy.
Legal Basis for Processing
We process your personal information based on one or more of the following legal grounds, as applicable under the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (DPDPA) of India, and other applicable data protection laws:
Consent: Where you have freely given specific, informed, and unambiguous consent for the processing of your personal data for one or more specific purposes, including but not limited to service fulfillment, marketing communications, and analytics.
Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract, including but not limited to providing data recovery services, processing payments, and delivering recovered data.
Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject, including but not limited to retaining records as required by applicable Indian laws, responding to lawful requests from government or law enforcement authorities, and complying with court orders or legal processes.
Legitimate Interests: Where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. Our legitimate interests include improving and securing our Services, conducting business analysis, preventing fraud and abuse, and enforcing our legal rights.
How We Use Your Information
We use the information we collect for the following business and operational purposes:
Service Delivery and Fulfillment: To respond to your inquiries, provide quotations, perform diagnostic assessments, execute data recovery and cybersecurity services, process payments, communicate service status updates, and deliver recovered data through secure channels.
Business Operations and Improvement: To operate, maintain, analyze, and improve our Website and Services, develop new offerings, conduct research and analytics, monitor usage trends, personalize user experience, and optimize our service delivery processes.
Communication: To communicate with you regarding your service requests, respond to your comments, questions, and complaints, send administrative information such as confirmations, invoices, technical notices, updates, and security alerts, and, where permitted by applicable law, send marketing and promotional communications about our Services, special offers, and industry updates. You may opt out of marketing communications at any time by contacting us or following the unsubscribe instructions in such communications.
Legal and Compliance: To comply with applicable legal and regulatory obligations, establish, exercise, or defend legal claims, detect, prevent, and respond to fraud, abuse, security incidents, and technical issues, and enforce our Terms of Service, Terms and Conditions, and other legal agreements.
Business Transfers: In connection with or during negotiations of any merger, acquisition, reorganization, sale of assets, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock, your information may be transferred to the acquiring entity subject to standard confidentiality obligations.
Data Sharing and Disclosure
We do not sell, trade, rent, or lease your personal information to third parties for their marketing purposes. We may share your information with the following categories of recipients under the circumstances described below:
Service Providers and Business Partners: We may share your personal information with trusted third-party service providers and business partners who assist us in operating our business, delivering our Services, processing payments, managing communications, hosting our Website, conducting data analytics, providing technical infrastructure, and performing other business functions. These service providers are contractually bound to maintain the confidentiality and security of your personal information and are permitted to process your data only for the specific purposes instructed by us and in compliance with applicable data protection laws.
Legal and Regulatory Authorities: We may disclose your personal information if required to do so by law, regulation, legal process, subpoena, court order, or governmental or regulatory request, including but not limited to responding to requests from Indian law enforcement authorities, courts, or regulatory bodies. We may also disclose your information where we believe in good faith that such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our users, customers, employees, or the public.
Professional Advisors: We may disclose your personal information to our legal counsel, auditors, accountants, insurers, and other professional advisors where necessary for the purpose of obtaining professional advice, managing risks, or establishing, exercising, or defending legal rights.
With Your Consent: We may share your personal information for any other purpose with your explicit consent obtained prior to such sharing.
Data Retention and Storage
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting obligations, establishing or defending legal claims, and operating our business. The criteria used to determine our retention periods include:
Service Data: Customer data, including device details and service records, is retained for the duration of the service engagement and for a period of up to 3 years thereafter for warranty, quality assurance, and legal compliance purposes. Recovered data is retained for a maximum of 30 days following delivery to the customer, after which it is securely and permanently erased in accordance with our data destruction protocols.
Contact and Communications Data: Contact information and communications records are retained for up to 3 years from the date of your last interaction with us, after which they may be anonymized or securely deleted.
Technical Data: Log files, analytics data, and usage information are retained for a period of up to 26 months from the date of collection, or longer if required by applicable law or necessary for the establishment or defense of legal claims.
Legal and Compliance Data: Records maintained for legal, regulatory, or compliance purposes may be retained for longer periods as required or permitted by applicable law, including up to 8 years as prescribed under Indian company and tax laws.
Data Security Measures
We implement and maintain reasonable and appropriate technical, organizational, administrative, and physical security measures designed to protect your personal information against unauthorized access, alteration, disclosure, destruction, loss, or misuse, having due regard for the state of the art, the costs of implementation, the nature, scope, context, and purposes of processing, and the risk of varying likelihood and severity for the rights and freedoms of natural persons. Our security measures include, but are not limited to:
Encryption: We use Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption protocols to protect data transmitted between your browser and our servers. Where appropriate, we also employ encryption at rest for stored data.
Access Controls: Access to personal information is restricted to authorized personnel, contractors, and agents who have a legitimate business need to access such data and who are subject to strict contractual confidentiality obligations and may be subject to disciplinary action or legal proceedings if they fail to meet these obligations.
Physical Security: Our facility at Paschim Vihar, New Delhi, is equipped with 24/7 video surveillance, access control systems, and other physical security measures designed to prevent unauthorized physical access to our systems and data.
Incident Response: We maintain a documented incident response plan to promptly address and mitigate any actual or suspected data breaches or security incidents. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by applicable law.
No Guarantee: Please be advised that no method of transmission over the Internet, method of electronic storage, or security system is 100% secure or impenetrable. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Your Rights and Choices
Subject to applicable law, including the Digital Personal Data Protection Act, 2023 (DPDPA) of India and other relevant data protection regulations, you may have the following rights with respect to your personal information processed by us:
Right of Access: You have the right to request confirmation from us as to whether or not we are processing your personal information and, where that is the case, to request access to such personal information along with certain related information, including the purposes of processing, the categories of personal information processed, the recipients or categories of recipients to whom the personal information has been disclosed, and the envisaged storage period.
Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal information we hold about you without undue delay.
Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal information where one of the following grounds applies: the personal information is no longer necessary for the purposes for which it was collected or otherwise processed; you withdraw consent on which the processing is based and there is no other legal ground for the processing; you object to the processing and there are no overriding legitimate grounds for the processing; the personal information has been unlawfully processed; or the personal information must be erased for compliance with a legal obligation under Indian law.
Right to Restrict Processing: You have the right to request the restriction of processing of your personal information where the accuracy of the personal information is contested by you, the processing is unlawful and you oppose the erasure of the personal information and request the restriction instead, we no longer need the personal information for the purposes of processing but it is required by you for the establishment, exercise, or defense of legal claims, or you have objected to processing pending the verification of whether our legitimate grounds override your rights.
Right to Data Portability: Where the processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal information in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller without hindrance from us.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw such consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Grievance Redressal: You have the right to lodge a complaint with the relevant data protection authority in India if you believe that the processing of your personal information infringes applicable data protection laws. However, we encourage you to contact us first so that we may attempt to resolve your concern directly.
To exercise any of the foregoing rights, please submit a written request to us using the contact details provided in the footer of this document or through the contact form available on our Website. We will respond to your request within the time period prescribed by applicable law, which is generally 30 to 45 days from the date of receipt of a valid request. We may request specific information from you to verify your identity before processing your request, and we reserve the right to charge a reasonable fee or refuse to act on a request where the request is manifestly unfounded, excessive, or repetitive.
Cookies and Tracking Technologies
Our Website uses cookies, web beacons, pixel tags, and similar tracking technologies to distinguish you from other users of our Website, enhance your browsing experience, analyze usage patterns, understand user preferences, and deliver relevant content and advertising. A cookie is a small text file that is stored on your browser or device by a website's server and enables the website to remember your actions and preferences over a period of time.
Types of Cookies We Use:
Essential/Necessary Cookies: These cookies are strictly necessary for the operation of our Website and enable you to navigate the Website and use its features, such as accessing secure areas. Without these cookies, certain services cannot be provided.
Functional Cookies: These cookies enable the Website to remember choices you make (such as your language preference or region) and provide enhanced, more personalized features.
Analytics/Performance Cookies: These cookies allow us to recognize and count the number of visitors to our Website, collect information about how visitors use our Website (such as which pages are most frequently visited and whether users receive error messages), and improve the performance and design of our Website.
Advertising/Targeting Cookies: These cookies record your visit to our Website, the pages you have visited, and the links you have followed. We may use this information to make our Website and the advertising displayed on it more relevant to your interests.
Cookie Management: You can control and manage cookies in various ways. Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and you should consult your browser's help menu or settings for more information. Please note that if you disable or refuse cookies, some parts of our Website may become inaccessible or may not function properly. By continuing to use our Website without adjusting your browser settings to reject cookies, you consent to our use of cookies as described in this Policy.
Third-Party Links and Services
Our Website and communications may contain links to third-party websites, applications, platforms, and services that are not owned, operated, or controlled by us. This includes, but is not limited to, links to our social media profiles on Facebook, Twitter/X, YouTube, LinkedIn, Instagram, and WhatsApp, as well as links to third-party payment processors, analytics providers, and other service providers. We have no control over, and assume no responsibility or liability for, the content, privacy policies, data practices, or security practices of any such third-party websites or services. We encourage you to review the privacy policies and terms of service of any third-party website or service that you choose to visit or interact with, as their data practices may differ materially from ours. The inclusion of any link does not imply endorsement by us of the linked website or service.
Changes to This Privacy Policy
We reserve the right, at our sole discretion, to modify, change, update, or otherwise amend this Privacy Policy at any time and without prior individual notice to you. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this Policy and may, in our discretion, notify you by email (if we have your email address on file) or by posting a prominent notice on our Website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our Website or Services after any modifications to this Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you must immediately cease using our Website and Services and, where applicable, request the deletion of your personal information as described in the "Your Rights and Choices" section of this Policy.
Governing Law and Jurisdiction
This Privacy Policy and all matters relating to the collection, processing, and protection of your personal information shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (DPDPA), and any rules, regulations, or guidelines issued thereunder. Any dispute, controversy, claim, or cause of action arising out of or relating to this Policy or the processing of your personal information shall be subject to the exclusive jurisdiction of the courts situated in New Delhi, India. By accepting this Policy, you submit to the personal jurisdiction of such courts and waive any objection based on improper venue or forum non conveniens.