GDPR Compliance

1. Scope

This page explains how BUSYNETPORTAL approaches GDPR-style data protection rights where the General Data Protection Regulation, UK GDPR, or similar data protection rules apply to a user, customer, or website visitor.

BUSYNETPORTAL is based in India. Depending on the relationship, service, customer location, and data involved, we may act as a data controller for our own website, marketing, support, billing, and account data, and as a data processor or service provider for customer-controlled reporting data.

2. Data Controller and Processor Roles

For website contact forms, support requests, billing, sales communication, and our own service administration, BUSYNETPORTAL generally determines why and how personal data is processed.

For customer-provided BUSY data, dashboard data, reporting inputs, user lists, and related implementation material, the customer generally controls the business purpose and instructions. In that situation, BUSYNETPORTAL processes data to provide the contracted service.

3. Lawful Bases

Depending on the context, processing may rely on consent, contract performance, legitimate interests, legal obligations, or other lawful bases recognized under applicable data protection law. Examples include responding to inquiries, providing contracted services, maintaining security, billing, support, and meeting legal obligations.

4. GDPR Rights

Where GDPR or similar law applies, individuals may have rights over their personal data. These rights may depend on the data type, our role, the legal basis, and applicable exceptions.

• Right to access personal data.
• Right to correct inaccurate personal data.
• Right to request deletion of personal data.
• Right to restrict or object to certain processing.
• Right to data portability where applicable.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with a relevant supervisory authority.

5. How to Submit a Request

To submit a data rights request, email support@busynotify.in with your name, company, contact email, request type, and enough information for us to verify the request. For customer-controlled reporting data, we may need to route the request to the customer account administrator or data controller.

6. International Transfers

If personal data is transferred across borders, appropriate safeguards should be used where required by applicable law. These safeguards may include contractual commitments, processor terms, security controls, or other transfer mechanisms depending on the relationship and jurisdiction.

7. Retention

We retain personal data only for as long as needed for the relevant service, support, billing, legal, security, audit, or operational purpose. Customer-controlled reporting data retention may depend on the subscription, implementation scope, customer instructions, and legal obligations.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, misuse, alteration, loss, or disclosure. No website, cloud service, or transmission method can be guaranteed to be completely secure.

9. Subprocessors and Third Parties

We may use hosting, infrastructure, communication, payment, analytics, support, development, or other service providers to operate the website and services. These providers should process data only for authorized purposes and according to applicable contractual and legal requirements.

10. Relationship With Privacy Policy

This GDPR Compliance page supplements the Privacy Policy. If there is a conflict between this page and a signed customer agreement or data processing agreement, the signed agreement will control for that customer relationship to the extent permitted by law.