General Data Protection Regulation (GDPR)

1. Our Commitment to GDPR

Berachtech Ltd is firmly committed to protecting your personal data and respecting your privacy rights. This policy outlines how we collect, use, store, and protect your personal information in accordance with the requirements of the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable UK data protection laws.

2. Data Controller Information

Berachtech Ltd acts as the Data Controller for all personal data collected through our services and website.

Company: Berachtech Ltd

Data Protection Contact: privacy@berachtech.com

UK Office: 124 City Road, London, EC1V 2NX

India Office: Kochi, Kerala

3. Legal Basis for Processing

We will only process your personal data when we have a valid legal basis to do so. We rely on the following bases:

• Consent: We process your personal data based on your explicit, informed consent when you use our services, submit forms, subscribe to our communications, or interact with our website.
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you when providing our services or preparing to enter into a contract with you.
• Legitimate Interest: We may process your data for our legitimate business interests, provided those interests are not overridden by your rights. This includes improving our services, maintaining security, and preventing fraud.

4. Your GDPR Rights

Under the GDPR, you possess several rights regarding your personal data. You have the right to:

• Right to Access: Request copies of the personal data we hold about you.
• Right to Rectification: Request the correction of any inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): Request the deletion or removal of your personal data when there is no compelling reason for its continued processing.
• Right to Restrict Processing: Request a limitation or suppression on how we use your personal data.
• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format to transfer to another service provider.
• Right to Object: Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your previously granted consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

5. Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing your data. These measures include:

• Encryption of data both in transit and at rest.
• Regular security assessments, vulnerability checks, and audits.
• Strict access controls and robust authentication protocols.
• Ongoing staff training on data protection and privacy best practices.
• Comprehensive incident response procedures.

6. Data Retention

We retain personal data only for as long as reasonably necessary to fulfill the specific purposes for which it was collected. This includes satisfying any legal, accounting, or statutory reporting requirements. Specific retention periods vary depending on the nature of the data and the purpose of the processing.

7. International Data Transfers

As an international business with offices in the UK and India, your data may be transferred outside the European Economic Area (EEA) or the UK. When such transfers occur, we ensure that appropriate safeguards are strictly in place to protect your personal data, utilizing mechanisms such as Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office (ICO).

8. Exercise Your Rights

To exercise any of your GDPR rights, or if you have any questions or concerns about how we handle your personal data, please contact our Data Protection Officer:

We are committed to addressing your inquiries promptly and will respond to all valid, verifiable requests within 30 days as required by the GDPR.