Privacy Policy

1. Data we collect

We collect only what we need to respond to you and deliver our services:

• Contact details you submit: name, email address, phone number, company and the message you send us.
• WhatsApp conversation data when you message us, including your WhatsApp number and message content.
• Technical and usage data such as pages viewed, referring page, approximate location, device and browser type, collected through analytics.
• Client project data you share with us so we can build and operate your AI systems.

2. Why we use your data

We use personal data to:

• Respond to enquiries and provide quotations.
• Deliver, support and improve the services you engage us for.
• Maintain records, invoices and legal or tax compliance.
• Measure website performance and improve our content.
• Send service-related communication. Marketing messages are sent only where you have consented, and you can opt out at any time.

3. Legal basis and consent

We are a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and process your personal data on the basis of your consent or for the legitimate uses permitted by that Act, as well as to perform a contract with you and to meet legal obligations. Where we operate as a Data Processor on behalf of a client, we process data only on that client's documented instructions.

Consent is requested in clear language, is limited to the purposes described in this policy, and can be withdrawn at any time by writing to us. Withdrawing consent does not affect processing carried out before withdrawal, and may mean we can no longer provide a service.

4. Sharing and processors

We do not sell personal data. We share it only with service providers who help us operate, such as cloud hosting and database providers, email and messaging platforms including the WhatsApp Business Platform, analytics providers, AI model providers used to deliver a service, and professional advisers. These providers process data on our instructions and under confidentiality obligations. We may also disclose data where required by law.

Some providers may process data outside India. Where that happens, we take reasonable steps to ensure an appropriate level of protection.

5. Retention

We keep enquiry data for as long as needed to respond and for a reasonable follow-up period, and client and financial records for as long as required by contract and by applicable tax and accounting law. After that, data is deleted or anonymised.

6. Security

We use access controls, encryption in transit and reputable infrastructure providers to protect personal data. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to reduce risk.

7. Your rights as a Data Principal

Under the DPDP Act, 2023 and other applicable law, you have the following rights. To exercise them, email us using the details below; we may verify your identity and will respond within 30 days.

• Right to access a summary of the personal data we process about you and the processing activities involved.
• Right to correction, completion, updating and erasure of your personal data.
• Right to withdraw consent at any time, as easily as it was given.
• Right to nominate another individual to exercise your rights in the event of death or incapacity.
• Right to grievance redressal through our Grievance Officer before approaching the Data Protection Board of India.
• Where GDPR applies to you, additional rights to restriction, objection and data portability, and the right to complain to your local supervisory authority.

8. Cookies and consent banner

We use a cookie banner to obtain your choice before non-essential (analytics) cookies are set. Your preference is stored on your device and can be changed at any time by clearing site data or using the cookie controls on our Cookie Policy page. See our Cookie Policy for the full list of categories.

9. Data breach notification

If a personal data breach occurs, we will notify the Data Protection Board of India and each affected individual without undue delay, as required by the DPDP Act, 2023 and applicable rules, and describe the nature of the breach and the steps we are taking.

10. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Third-party links

Our website links to third-party sites and embeds Google Maps. Their privacy practices are governed by their own policies, and we are not responsible for them.

12. Contact and grievance officer

In line with the Information Technology Act, 2000, the rules made under it and the DPDP Act, 2023, our Grievance Officer can be reached at: Grievance Officer, Horizon AI Solutions, Thuckalay, Kanniyakumari District, Tamil Nadu, India. Email: connect@horizonaisolutions.in. Phone/WhatsApp: +91 78688 43056. Complaints are acknowledged within 48 hours and resolved within 30 days.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India, or to the consumer forum having jurisdiction.