Data Protection

Our Commitment to Data Protection

Asquarei.ai is committed to protecting the personal data and privacy of our clients, partners, and website visitors. We recognize the importance of responsible data handling and comply with applicable data protection laws and regulations worldwide.

This Data Protection Policy describes how we collect, process, store, and protect personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection legislation.

Data Controller

Asquarei.ai acts as the data controller for personal data collected through our website, services, and business operations. As the data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with applicable data protection laws.

Legal Basis for Processing

We process personal data only when we have a valid legal basis to do so. The legal bases we rely on include:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your rights do not override those interests

Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, job title, company name
• Contact Data: Email address, phone number, mailing address
• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, navigation patterns, referral source
• Communication Data: Records of correspondence, inquiries, and feedback
• Transaction Data: Details about services purchased and payment information

Data Storage & Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations:

• Client data is retained for the duration of the business relationship and for a reasonable period thereafter as required by law
• Marketing data is retained until you withdraw consent or unsubscribe
• Technical and usage data is retained for up to 24 months for analytics purposes
• Financial records are retained in accordance with applicable tax and accounting regulations

When personal data is no longer required, it is securely deleted or anonymized in accordance with our data retention policies.

Data Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls with the principle of least privilege
• Regular security assessments and penetration testing
• Employee security training and awareness programs
• Incident response procedures for data breach management
• Secure backup and disaster recovery systems

International Data Transfers

When we transfer personal data outside your country of residence, we ensure that appropriate safeguards are in place to protect your data:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
• Transfers to countries with an adequacy decision from the European Commission
• Binding Corporate Rules where applicable
• Your explicit consent for specific transfers when required

Your Data Protection Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing of your personal data
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.

Third-Party Data Processors

We may engage trusted third-party service providers to process personal data on our behalf. All third-party processors are:

• Carefully vetted for their data protection and security practices
• Bound by data processing agreements that comply with applicable regulations
• Required to process personal data only in accordance with our instructions
• Subject to regular reviews to ensure ongoing compliance

Changes to This Policy

We may update this Data Protection Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Any updates will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Data Protection Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.