Privacy Policy

Your privacy matters to us. This policy explains, in plain language, what personal data ABHORIZON GROUP PVT. LTD. collects through the allynQ website and in the course of our business, why we collect it, and how you can control it.

1. Who we are

This website, www.allynq.co (the “Website”), is owned and operated by ABHORIZON GROUP PVT. LTD., a private limited company based in Vadodara, Gujarat, India, which carries on business under the brand name allynQ (“allynQ”, “we”, “us” or “our”).

We are responsible for deciding how and why your personal data is processed in connection with the Website and our business communications. If you have any question about this Privacy Policy, write to us at info@allynq.co.

2. Scope of this policy

This Privacy Policy explains how we collect, use, store, share and protect personal data when you:

• visit or browse the Website;
• submit an enquiry, request or application through a form on the Website;
• contact us by email, phone or any other channel;
• interact with us as a client, merchant, partner, supplier or prospective business contact.

It does not cover the practices of third-party websites, programmes or services that may be linked from the Website. Where a loyalty programme operated with one of our clients has its own privacy notice, that notice will govern the personal data of programme members.

3. Applicable law

We process personal data in accordance with the laws of India, including the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 together with any rules notified under it, to the extent applicable.

Where you access the Website from outside India, you acknowledge that your personal data will be processed in accordance with this policy and Indian law. Where the laws of your country give you additional rights, we will make reasonable efforts to respect them.

4. Personal data we collect

Information you give us

• Identity and contact details, such as your full name, business email address, phone number, company name, job title and country.
• Enquiry details, such as the solution you are interested in and the content of your message.
• Business information you choose to share during discussions, such as details of a proposed programme, partnership or market.
• Records of your consent, for example when you agree to this Privacy Policy before submitting a form.

Information collected automatically

• Technical data, such as IP address, browser type and version, device type, operating system, referring page and the date and time of your visit.
• Usage data, such as the pages you view and the links you click, to the extent recorded in standard server or hosting logs.

Information from third parties

• Business contact information from publicly available sources, professional networks or referrals, where you are a representative of an organisation we may work with.
• Information from our partners or clients where you have asked them to introduce you to us.

We do not knowingly collect sensitive personal data such as financial account details, health information, biometric data or government identification numbers through the Website. Please do not include such information in your enquiry.

5. How we use your personal data

We use personal data for the following purposes:

• to respond to your enquiry and communicate with you about it;
• to understand your requirements and prepare proposals for loyalty programmes, merchant partnerships, introductions or market expansion;
• to enter into and perform contracts with clients, merchants, partners and suppliers;
• to manage our business relationships, including record keeping, invoicing and account management;
• to operate, maintain, secure and improve the Website;
• to detect, prevent and investigate fraud, spam, abuse and security incidents;
• to comply with legal and regulatory obligations and respond to lawful requests from authorities;
• to establish, exercise or defend legal claims.

We will not use your personal data for purposes that are materially different from those described above without informing you and, where required, obtaining your consent.

6. Legal basis for processing

Depending on the context, we process personal data on one or more of the following bases:

• Consent: when you submit a form on the Website and confirm that you agree to this Privacy Policy, you consent to us processing your data to respond to your enquiry. You may withdraw consent at any time.
• Legitimate uses: where you voluntarily provide personal data for a specified purpose, such as an enquiry, and have not indicated that you do not consent to its use for that purpose.
• Contract: where processing is needed to enter into or perform an agreement with you or your organisation.
• Legal obligation: where we are required to process data to comply with applicable law.

Withdrawing consent will not affect processing carried out before withdrawal, and we may continue to retain data where required by law.

7. Marketing communications

We may send you business updates or information about our services where you have asked us to, or where you are an existing business contact and the communication relates to similar services. Every marketing email will include a simple way to opt out, and you can also opt out at any time by writing to info@allynq.co.

We do not sell, rent or trade your personal data to third parties for their own marketing.

8. Sharing your personal data

We share personal data only where necessary and only with:

• Service providers who help us operate our business and the Website, such as website hosting, form-processing, email and cloud storage providers. At present this includes our hosting provider and Formspree, which processes enquiries submitted through the Website forms.
• Clients, merchants and partners where you have asked for an introduction or where sharing is needed to deliver a programme or partnership you are involved in, and only with your knowledge.
• Group companies of ABHORIZON GROUP PVT. LTD., where needed to deliver our services, subject to the same standards of protection.
• Professional advisers such as lawyers, auditors and accountants, under duties of confidentiality.
• Authorities where required by law, court order or a lawful request from a government or regulatory body.
• Successors in the event of a merger, acquisition, restructuring or sale of all or part of our business, subject to this policy.

We require our service providers to process personal data only on our instructions, to keep it confidential and to protect it with appropriate security measures.

9. International transfers

Some of our service providers may store or process personal data outside India. Where this happens, we take reasonable steps to ensure that the data receives a level of protection consistent with this policy and with applicable Indian law, and that transfers are not made to any country or territory restricted under such law.

10. How long we keep personal data

We keep personal data only for as long as it is needed for the purposes described in this policy, including to meet legal, accounting or reporting requirements. As a general guide:

• Enquiries that do not lead to a business relationship are kept for up to 24 months from our last communication, and then deleted or anonymised.
• Records relating to clients, merchants and partners are kept for the duration of the relationship and for up to 8 years afterwards, in line with applicable tax and company law requirements.
• Technical logs are kept for a limited period, typically not more than 12 months, unless needed to investigate a security incident.

When personal data is no longer needed, we delete it or anonymise it so that it can no longer be linked to you.

11. How we protect personal data

We use reasonable technical and organisational security practices to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These include encrypted connections (HTTPS) for the Website, restricted access to personal data on a need-to-know basis, and the use of reputable service providers with their own security controls.

No method of transmission over the internet or method of electronic storage is completely secure. While we work hard to protect your data, we cannot guarantee its absolute security. If we become aware of a personal data breach that is likely to affect you, we will take appropriate steps and notify you and the relevant authorities where required by law.

12. Your rights

Subject to applicable law, you have the right to:

• request a summary of the personal data we hold about you and the processing activities carried out on it;
• request correction, completion or updating of inaccurate or incomplete personal data;
• request erasure of personal data that is no longer necessary for the purpose for which it was collected, unless we are required to retain it by law;
• withdraw consent that you have previously given;
• have your grievances relating to personal data addressed; and
• nominate another person to exercise your rights in the event of death or incapacity, where permitted by law.

To exercise any of these rights, email info@allynq.co with the subject line “Data request”. We may need to verify your identity before acting on a request. We aim to respond within 30 days, or within any shorter period required by law.

13. Grievance Officer

In accordance with applicable law, any complaint or concern about the processing of your personal data may be addressed to our Grievance Officer:

• Grievance Officer, ABHORIZON GROUP PVT. LTD.
• Vadodara, Gujarat, India
• Email: info@allynq.co (subject line: “Grievance”)

We will acknowledge your complaint promptly and work to resolve it within the time required by law. If you are not satisfied with our response, you may have the right to approach the Data Protection Board of India or another competent authority.

14. Children

The Website and our services are intended for businesses and professionals. They are not directed at children, and we do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Cookies

Please see our Cookie Policy for information about cookies and similar technologies used on the Website.

16. Third-party links

The Website may contain links to websites operated by third parties. We are not responsible for their content or privacy practices, and we encourage you to read their privacy notices before sharing personal data with them.

17. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. The updated version will be published on this page with a revised “Last updated” date. Where changes are significant, we will take reasonable steps to bring them to your attention.