Privacy Policy

Last updated: 24 September 2026

1. Who is responsible

The controller for the processing described here is Aditya Lakhera, trading as AuditSeals, Harbatpur, Dehradun district, Uttarakhand, India, PIN 248142. Contact for all privacy matters: aditya@auditseals.eu. AuditSeals is not required to appoint a data protection officer; questions and requests go to this address.

2. What data we process and where it comes from

• Audit requests. Name, business or practice name, work email address, website address and message, plus the time of submission and your confirmation that you have read this policy. You provide this data yourself through the request form.
• Correspondence. Contact details and the content of emails, calls and meetings with you.
• Website visits. Technical connection data such as IP address, date and time, requested page and browser or device information, processed by our hosting provider to deliver and secure the website. This website sets no cookies.
• Business contacts we approach. Name, business role, practice name and business email address or professional profile, taken only from publicly available information on your own website or on your public LinkedIn or Instagram profile. We contact you by email, LinkedIn or Instagram message, and each message tells you who we are and links to this policy. Where we contact you this way, this section is our information notice under Article 14 GDPR.
• Client engagements. The website addresses and publicly visible pages we review, and any documents you choose to send. Our audits are based on publicly visible website content; we do not ask for patient or client records or for access to your internal systems.

Please do not send health data, patient information, passwords, financial information or other sensitive personal data through the form or by email. We do not need it and do not intend to process it.

3. Why we use your data and on what legal basis

• Responding to your audit request, defining the scope and carrying out the audit you request: Article 6(1)(b) GDPR, steps taken at your request before, and in performance of, a contract.
• Business correspondence, administration and keeping records of our services: Article 6(1)(f), our legitimate interest in running the business efficiently.
• Keeping the website secure and available: Article 6(1)(f), our legitimate interest in the security of the website.
• Contacting businesses that may benefit from our services: Article 6(1)(f), our legitimate interest in business development. You can object at any time (see section 7), and we will stop contacting you.
• Keeping records that the law requires us to keep: Article 6(1)(c).

We do not use your data for advertising by third parties, we do not sell it, and we do not use it for profiling or automated decision-making that produces legal or similarly significant effects.

4. Who receives your data

We use the following service providers as processors, only to operate the website and our email:

• Netlify (United States): website hosting and handling of the audit request form, including spam filtering. Form submissions are stored in our Netlify account until deleted.
• Hostinger: email hosting for the address aditya@auditseals.eu.
• Google (Gmail) (United States): email service for correspondence sent from or received at our Gmail address.

We do not otherwise share your data, except where we are legally required to disclose it to authorities.

5. Where your data is processed and international transfers

AuditSeals is operated from India. Data you send to us is therefore accessed and processed in India, a country for which the European Commission has not adopted an adequacy decision. Our processors named above are based in, or process data in, the United States and possibly other countries. For these transfers we rely on the safeguards each provider offers, such as certification under the EU–US Data Privacy Framework or Standard Contractual Clauses. You can ask us for information about the safeguards for a particular provider at aditya@auditseals.eu.

6. How long we keep your data

• Audit requests that do not lead to an engagement, and related correspondence: deleted within 3 months after the last contact.
• Client engagements (requests, reports and correspondence): kept for 3 months after the engagement ends, then deleted. Invoicing and accounting records, where they exist, are kept for as long as the law requires.
• Business contacts we approach: deleted within 3 months after the last contact, or immediately if you object.
• Website connection data: kept by Netlify according to its own settings. We do not export or keep it.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to withdraw any consent you have given, with effect for the future. You also have the right to object at any time to processing based on our legitimate interests, and an absolute right to object to direct marketing.

To exercise these rights, write to aditya@auditseals.eu. We answer within one month. To protect your data we may ask you to confirm your identity using information we already hold, for example by replying from the email address you used. We will not ask for copies of identity documents unless there is real doubt about who you are.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state where you live or work or where you believe an infringement took place. A list of authorities is available from the European Data Protection Board.

8. Are you required to provide data?

No. Providing data is voluntary, but we cannot answer an audit request without your name, business name and email address.

9. Security

The website is served over HTTPS. Submitted information is accessible only to the person operating AuditSeals, and we limit what we collect to what is needed for the purposes above. No system can be guaranteed to be completely secure.

10. Links to other websites

This website may link to external resources such as professional profiles. Messages sent through LinkedIn or Instagram are also processed by those platforms under their own privacy policies. Those websites operate under their own privacy practices, and AuditSeals is not responsible for them.

11. Changes to this policy

We update this policy when our website, services or data-processing practices change. The current version is always published on this page with its date. See also our Cookie Policy and Legal Notice · Engagement Terms.