Who is responsible
AryaSol is the data controller for enquiries made through this site and for our own client records. Write to legal@aryasol.com for anything in this policy.
When we work inside your ad or email accounts, you are the controller of that data and we act as your processor under a data processing agreement.
What we collect from this site
Only what you give us, plus what is needed to keep the forms working and the site online.
As of the date above the site sets no analytics or advertising cookies. If that changes, they will only load after you have accepted them in the cookie banner, never before.
- Contact, quote and booking forms: name, work email, phone where you give one, website, the services and budget you select, your chosen meeting time, and anything you type in the message field
- Booking details are also used to create a calendar invitation, which means your name and email appear on that event
- Email correspondence you send us
- Google reCAPTCHA runs on every form and collects device, browser and interaction signals to score whether you are a bot. It is what stops the forms being flooded with spam
- Our host records standard server logs — IP address, page requested, browser type — for security and diagnosing faults
Why we use it
We use enquiry data to reply, quote, and deliver the services you ask for.
We do not sell personal data. We do not use enquiry data to train AI models.
- Contract: delivering the services in your statement of work
- Legitimate interests: replying to enquiries, keeping the forms free of spam, site security
- Consent: analytics and advertising cookies if we add them, and any marketing email you opt into
Client data we process
Delivering campaigns involves customer lists, conversion events and CRM records that belong to you. We access these inside your platforms rather than copying them where possible.
Where an export is unavoidable, it is stored encrypted, limited to the strategist on your account, and deleted when the task closes.
Who else sees it — running this website
These process data about you as a visitor to aryasol.com, each under contract:
- Zoho CRM — every enquiry, quote request and booking is recorded here. The account is hosted in the United States
- Vercel — hosting. Handles every request to the site and keeps short-lived server logs
- Google reCAPTCHA — spam protection on the forms
- Google Calendar — creates the booking, and sends your calendar invitation
- Zoom — creates the meeting where you choose a Zoom call
Who else sees it — delivering client campaigns
Separately, when we run campaigns for a client, these process data inside that client's own accounts. They play no part in this website.
- Google, Meta, Microsoft, LinkedIn, TikTok, X, Taboola, Outbrain — advertising delivery on the channels you run
- Klaviyo, Mailchimp, ActiveCampaign — email delivery on your instance
- Reporting and warehouse vendors named in your data processing agreement
How long we keep it
Enquiries that do not become clients are deleted after 24 months. Client records are kept for the engagement plus seven years where tax and accounting law requires it.
Your cookie choice is stored for 12 months. Marketing consent records are kept as long as the consent stands, plus three years as proof. Should we add analytics, its data would be retained for 14 months.
Security
Access is least-privilege and reviewed quarterly. Two-factor authentication is mandatory on every platform we touch, including yours.
Devices are encrypted. Credentials are held in a managed password vault, never in email or spreadsheets.
If a breach affects your data we notify you without undue delay and within 72 hours of becoming aware.
Your rights
You can ask us to show, correct, export or delete the personal data we hold about you, or object to processing based on legitimate interests. We respond within 30 days.
Requests go to legal@aryasol.com. We may ask you to verify identity before acting.
International transfers
Our Zoho CRM account is hosted in the United States, so anything you submit through a form on this site is transferred there and stored there. Google and Vercel likewise operate globally and may process requests outside your country.
Where that happens we rely on Standard Contractual Clauses or an adequacy decision. For client engagements, transfers are listed in your data processing agreement.
Children
Our services are for businesses. We do not knowingly collect data from anyone under 18. If you believe we have, write to us and we will delete it.
Changes
We update this policy when our processing changes. The date at the top always reflects the current version, and material changes are emailed to active clients.
Questions about this document? Write to legal@aryasol.com and we will answer in writing.