1. Purpose of This Agreement

• Establishes the responsibilities of Aahan Web Solutions and its clients regarding personal data processing.
• Applies when Aahan Web Solutions processes personal data on behalf of a client.
• Defines how personal data should be collected, accessed, used, stored, protected, and managed.
• Supports responsible data handling in connection with agreed services.
• Should be read together with the applicable Service Agreement, Terms & Conditions, Privacy Policy, and other relevant policies.

2. Definitions

• Personal Data: Information that identifies or relates to an individual.
• Client: A business, organization, or individual receiving services from Aahan Web Solutions.
• Data Controller: The party that determines the purpose and manner of processing personal data.
• Data Processor: The party that processes personal data on behalf of the Data Controller.
• Processing: Includes collecting, accessing, recording, storing, using, modifying, transferring, or deleting personal data.
• Data Subject: The individual to whom the personal data relates.
• Third-Party Provider: An external service provider involved in delivering services that may process personal data.
• Applicable definitions may vary depending on the relevant data protection laws and jurisdiction.

3. Scope of Data Processing

Depending on the services provided, Aahan Web Solutions may process:

• Names and contact information.
• Email addresses and telephone numbers.
• Business and customer information.
• Website enquiry and contact-form information.
• Account or login information required for service delivery.
• Website analytics and usage information.
• Advertising and marketing information.
• Customer and lead information provided by the client.
• Technical information such as IP addresses, browser type, device information, and similar data where applicable.
• Information required to provide website development, SEO, digital marketing, hosting, analytics, advertising, or related services.
• Personal data only to the extent reasonably necessary to provide the agreed services.

4. Client Responsibilities

The client is responsible for:

• Providing lawful instructions for processing personal data.
• Ensuring personal data is collected and shared lawfully.
• Obtaining required permissions or consent where applicable.
• Providing accurate and relevant information.
• Ensuring website forms and customer databases are used appropriately.
• Ensuring cookies and tracking technologies comply with applicable requirements.
• Ensuring marketing and advertising activities comply with applicable laws and platform policies.
• Informing Aahan Web Solutions about specific data processing requirements or restrictions.
• Maintaining appropriate privacy notices and policies where required.

5. Aahan Web Solutions Responsibilities

Aahan Web Solutions will:

• Process personal data for legitimate service-related purposes.
• Follow reasonable and lawful client instructions.
• Use appropriate measures to protect personal data.
• Restrict access to authorized personnel.
• Use personal data only as reasonably required to provide agreed services.
• Maintain reasonable confidentiality regarding client information.
• Cooperate with the client regarding applicable data protection requirements.
• Take reasonable steps to prevent unauthorized access, disclosure, alteration, or misuse of personal data.

6. Data Security

Aahan Web Solutions may use reasonable security measures such as:

• Access controls.
• Password protection.
• Restricted administrative access.
• Secure software and hosting practices.
• Regular software and security updates where applicable.
• Data backups where included in the applicable service.
• Monitoring and maintenance of supported systems.
• Appropriate security practices for websites and digital platforms.
• Reasonable measures to prevent unauthorized access or disclosure.
• No online system can be guaranteed to be completely secure.

7. Confidentiality

• Client personal data and confidential business information will be treated as confidential.
• Access will be restricted to personnel and service providers who require access for legitimate business purposes.
• Authorized personnel may be required to maintain confidentiality.
• Confidential information will not knowingly be disclosed for unrelated purposes without appropriate authorization, except where legally required.
• Confidentiality obligations may continue after the completion or termination of services where applicable.

8. Third-Party Service Providers

Aahan Web Solutions may use third-party providers for:

• Website hosting.
• Domain registration and management.
• Cloud storage and infrastructure.
• Website analytics.
• Email marketing and communication.
• Google services.
• Meta advertising services.
• Payment processing.
• Software, plugins, and integrations.
• Security and monitoring services.
• Other technology services required to deliver agreed solutions.

Where applicable:

• Third-party providers may process or store personal data.
• Their own privacy policies and terms may apply.
• Reasonable measures should be considered when selecting or using third-party providers.
• Aahan Web Solutions does not control the independent policies or practices of third-party providers.

9. International Data Transfers

• Some third-party services may store or process data outside the client’s country.
• International processing may occur depending on the technology and service providers used.
• Aahan Web Solutions will take reasonable steps to support lawful data transfers where applicable.
• Clients should consider the data protection requirements applicable to their specific business and jurisdiction.

10. Data Breach

If Aahan Web Solutions becomes aware of a confirmed security incident involving personal data:

• Reasonable steps will be taken to investigate the incident.
• Appropriate measures may be taken to contain and mitigate the incident.
• The client may be notified where required by applicable law or contractual obligations.
• Relevant information may be provided to assist the client in meeting its applicable obligations.
• Further actions may be taken based on the nature and severity of the incident.

11. Data Retention and Deletion

• Personal data may be retained for as long as reasonably necessary to provide agreed services.
• Data may also be retained where required for legal, contractual, accounting, security, or legitimate business purposes.
• Clients may request deletion or return of applicable personal data after termination of services, subject to legal requirements.
• Certain information may remain temporarily in backups.
• Backup data may be deleted according to applicable backup retention procedures.
• Data may be retained where deletion is prohibited or restricted by applicable law.

12. Data Subject Requests

Where applicable, individuals may request:

• Access to their personal data.
• Correction of inaccurate information.
• Deletion of personal data.
• Restriction of processing.
• Objection to certain processing activities.
• Data portability where legally applicable.
• Information about how their personal data is being processed.

Aahan Web Solutions may provide reasonable assistance to the client in responding to applicable data subject requests.

13. Cookies and Tracking Technologies

• Websites may use cookies and similar technologies.
• Analytics tools may collect website usage information.
• Advertising platforms may use pixels, tags, cookies, or similar technologies.
• The client is responsible for implementing appropriate cookie notices and consent mechanisms where required.
• Clients should ensure their privacy and cookie policies accurately explain applicable tracking technologies.
• Tracking technologies should be configured according to applicable laws and platform requirements.

14. Marketing and Advertising Data

For services such as:

• SEO.
• PPC advertising.
• Google Ads.
• Meta Ads.
• Social media management.
• Email marketing.
• Content marketing.
• Analytics and reporting.

Aahan Web Solutions may process customer, lead, audience, or marketing information supplied by the client.

The client is responsible for:

• Lawfully collecting customer information.
• Obtaining required consent where applicable.
• Maintaining lawful marketing databases.
• Using customer information appropriately.
• Complying with advertising platform policies.
• Ensuring promotional communications comply with applicable requirements.

15. Data Accuracy

• Clients are responsible for providing accurate and relevant personal data.
• Clients should promptly notify Aahan Web Solutions of incorrect or outdated information.
• Aahan Web Solutions may rely on information supplied by the client.
• Aahan Web Solutions is not responsible for inaccuracies originating from client-provided information.
• Personal data should only be supplied where the client has appropriate authority to provide it.

16. Government and Legal Requests

Aahan Web Solutions may disclose information when:

• Required by applicable law.
• Required by a valid court order.
• Requested by an authorized government authority.
• Necessary to comply with a legally binding requirement.
• Required to protect legal rights or comply with lawful proceedings.

Where legally permitted, reasonable notice may be provided to the client before disclosure.

17. Data Protection Laws

• This DPA is intended to establish general data processing responsibilities.
• Applicable data protection requirements may vary depending on the client’s location and business activities.
• Different requirements may apply to different types of personal data.
• Clients are responsible for understanding the laws applicable to their business.
• Clients requiring specific regulatory compliance should obtain advice from a qualified legal professional.
• This DPA should be customized where specific legal or contractual requirements apply.

18. Changes to This DPA

• Aahan Web Solutions may update this DPA from time to time.
• Updates may be made to reflect changes in services, technology, security practices, or applicable requirements.
• The updated version may be published on the website or provided to applicable clients.
• Clients should periodically review the latest version of the DPA.

19. Contact

For questions regarding this Data Processing Agreement, clients may contact Aahan Web Solutions regarding:

• Personal data processing.
• Data security.
• Privacy practices.
• Data protection requirements.
• Data deletion or retention.
• Third-party data processing.
• Other privacy-related concerns.

Legal Notice: This DPA is a general business document and is not a substitute for legal advice. Businesses with specific regulatory, contractual, sensitive-data, or international data-transfer requirements should have this agreement reviewed by a qualified legal professional before relying on it as a binding agreement.