Privacy Policy

We collect information in the following categories:

Information you voluntarily provide when contacting us, filling out a form, or engaging our services:

• Full name
• Email address
• Phone number
• Company or business name
• Billing and invoicing details
• Any other information you choose to share in messages or project briefs

Information automatically collected when you browse our website:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on site
• Referring URL (how you found our website)
• Cookie and analytics data (see Section 5)

Information shared during client engagements:

• Business requirements and goals
• Technical specifications and system details
• Files, assets, or documents uploaded or shared
• Login credentials or access keys (stored securely and never shared)

For users in the UK, EU, and Australia, we process your personal data on one of the following legal bases:

• Contract: Processing is necessary to deliver the services you have requested or agreed to.
• Legitimate Interests: To improve our website and communicate with prospective clients in a way that does not override your rights.
• Consent: Where you have actively opted in to receive marketing communications or newsletter updates.
• Legal Obligation: Where we are required to process data to comply with applicable laws.

We use the information we collect to:

• Provide, manage, and deliver requested services
• Respond to enquiries, questions, and support requests
• Process payments and manage billing
• Send project updates, proposals, and communications
• Improve website performance and user experience
• Analyse website usage to better understand our audience
• Send marketing or service-related updates (only where consent is given)
• Comply with legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Our website uses cookies and similar tracking technologies. These may include:

• Essential cookies: Required for the website to function correctly.
• Analytics cookies: Used to understand traffic patterns and user behaviour (e.g., Google Analytics).
• Marketing cookies: Used to measure campaign performance (e.g., Google Ads, Meta Pixel — if active).

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect website functionality.

Where required by law (e.g., for UK/EU visitors), we will request your consent before placing non-essential cookies.

Where payments are processed, we use trusted third-party payment processors (such as Stripe, Razorpay, or similar). We do not store, process, or retain full payment card details on our servers.

All payment transactions are encrypted and handled in compliance with PCI-DSS standards by the relevant payment provider. Please refer to your payment provider’s privacy policy for further details on how they handle your financial data.

We do not sell, rent, or trade your personal data to any third party.

We may share your information only in the following limited circumstances:

• Service Providers: Trusted third parties who assist us in delivering services (e.g., hosting providers, cloud infrastructure, project management tools, email platforms). These parties are contractually obligated to maintain confidentiality and data security.
• Payment Processors: Solely to complete billing and payment transactions.
• Legal Authorities: Where required by law, court order, or regulatory authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.

We implement reasonable and appropriate technical and organisational safeguards to protect your personal data, including:

• SSL/TLS encryption for all data transmitted via our website
• Secure, access-controlled servers and cloud infrastructure
• Role-based access controls limiting who can view sensitive data internally
• Regular security reviews and software updates

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the unlikely event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

We retain your personal data only for as long as is necessary to:

• Fulfil service obligations and contractual commitments
• Comply with applicable legal, tax, or regulatory requirements
• Resolve disputes and enforce agreements

Once data is no longer required, it will be securely deleted or anonymised. Client project data is typically retained for a minimum of 2 years post-project unless otherwise requested in writing.

Depending on your country of residence and applicable data protection laws (including GDPR, UK GDPR, and Australian Privacy Act), you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request corrections to inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (“right to be forgotten”), where applicable.
• Restriction: Request that we limit how we use your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at: [email protected]

We will respond to all verified requests within 30 days. If you are unhappy with our response, you have the right to lodge a complaint with your local data protection authority.

Airbow IT Services is based in India. If you access our website or services from outside India (including the US, UK, or Australia), your personal data may be transferred to and processed in India or in other countries where our service providers operate.

Where we transfer data internationally, we take reasonable steps to ensure your data is protected in accordance with applicable data protection laws and that appropriate safeguards are in place (such as standard contractual clauses or equivalent protections).

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect or process personal data from minors.

If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] and we will take prompt steps to delete it.

Our website may contain links to third-party websites. These links are provided for your convenience only. We have no control over the content or privacy practices of those sites and accept no responsibility for them.

We encourage you to review the privacy policy of any external website you visit.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Any updates will be published on this page with a revised effective date at the top.

We encourage you to review this page periodically. For material changes, we may notify active clients directly by email.