Privacy / GDPR
Serve EU customers
with confidence.
The General Data Protection Regulation sets the global bar for privacy. We build the notices, rights process and records, and keep them current.
Trusted & Backed by:
What it requires
What GDPR
asks of you.
Lawful basis and consent
A lawful basis for every purpose, with clear consent where it is required.
Data subject rights
Access, rectification, erasure and portability, answered within one month.
Records of processing
A written record of what you process and why.
Breach notification
The supervisory authority within 72 hours where there is risk.
International transfers
Safeguards for data leaving the EEA, such as standard contractual clauses.
Data protection by design
Privacy built into systems and processes from the start.
How we get you there
Build it once,
run it for good.
Map your processing
We record what you process, where it flows, and the lawful basis for each purpose.
Draft the controls
Notices, consent, a rights process, a breach runbook and transfer safeguards.
Put them to work
Rights handling, records and consent live on the platform, with your team trained.
Stay current
We keep records and notices current as your processing and the guidance change.
Overlap
One control set,
many laws.
GDPR work carries across to other privacy laws. We map it so the effort is shared.
Packages
One package,
every stage.
Readiness, Implementation and Sustain, with the Consent and DSAR modules where you need them.
See packagesIndependence
We prepare you for GDPR and run the programme. Supervisory authorities enforce the regulation; we are not one.
Resources
Start with a readiness checklist.
Questions
GDPR, in your words.
Do we need GDPR if we are an Indian company?
Yes, if you offer goods or services to people in the EU or monitor their behaviour. The regulation follows the data subject.
How long does a rights request give us?
One month, extendable in limited cases. We give you a process with identity checks and SLA timers.
What are standard contractual clauses?
A legal safeguard for moving personal data outside the EEA. We put the right transfer mechanism in place for your flows.
Do you issue a GDPR certificate?
No. GDPR has no general certification. We make you compliant and keep the records that prove it.
Privacy. Security. Intelligence.
Built for trust.
Tell us what you need to prove. We reply within one working day.