Privacy Policy

Effective Date: 10 July 2025

ACEVO Global Advisory Pvt. Ltd. ("ACEVO", "we", "our") is committed to protecting the privacy and confidentiality of personal data in line with global data protection standards, including:

  • EU General Data Protection Regulation (GDPR)
  • UK Data Protection Act 2018 (UK GDPR)
  • India's Digital Personal Data Protection Act (DPDP) 2023
  • Other jurisdiction-specific laws where applicable

This Privacy Policy explains how we collect, process, and safeguard personal data across all ACEVO services, including consulting and digital platforms such as GenderGov.

1. Scope

This Policy applies to:

  • Visitors to any ACEVO-operated website
  • Clients of ACEVO consulting services
  • Users of ACEVO digital/SaaS products, including GenderGov and future platforms
  • Business contacts, partners, and suppliers

2. Data We Collect (General)

We may collect:

  • Identity & Contact Data: name, email, phone, company, job role
  • Billing & Transaction Data: invoices, payment references (processed securely via third-party providers)
  • Technical Data: IP address, browser, device, login data, cookies
  • Communication Records: emails, calls, support tickets

3. Product-Specific Processing

a) Consulting Services

  • Data collected: project briefs, business documents, client contact details
  • Purpose: deliver consulting projects, issue invoices, maintain records for compliance
  • Retention: typically up to 7 years after project completion (or as required by law)

b) GenderGov Platform

  • Data collected: job titles, salary bands, gender distribution data, HR records uploaded by client, login credentials
  • Hosting: All client data is stored on secure EU-based servers only
  • Purpose: generate pay transparency reports and dashboards
  • Important: GenderGov outputs are informational tools — they do not replace legal or regulatory advice
  • Retention: client data is retained only for the duration of subscription or until client requests deletion

c) Other Digital Products (Future SaaS)

  • Data collected: HR templates, organisation data, workforce inputs
  • Hosting: EU/UK servers unless otherwise communicated
  • Purpose: provide SaaS-based compliance and HR tools
  • Retention: per client instruction

4. Lawful Basis for Processing

We rely on:

  • Contract performance (to deliver services/products)
  • Legal obligations (record-keeping, compliance)
  • Legitimate interests (platform improvement, fraud prevention)
  • Consent (cookies, marketing, optional analytics)

5. Data Sharing

We may share data with:

  • Authorised sub-processors (hosting, analytics, payment gateways) — listed on our Sub-processor List
  • Internal project teams under confidentiality
  • Regulators/law enforcement, where legally required

We never sell or rent personal data.

Sub-Processors

To deliver our services, ACEVO may engage carefully selected third-party service providers ("sub-processors"), such as hosting providers, payment gateways, and email service tools. These sub-processors process personal data strictly on our instructions and under contractual safeguards that meet GDPR requirements.

A current list of authorised sub-processors is maintained in Annex A to our Data Processing Agreement (DPA). Clients will be notified of any intended changes to this list in advance, and may object in accordance with the DPA.

6. International Data Transfers

Where data is transferred outside the EU/UK, we use safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements (DPAs)
  • Adequacy decisions

7. Cookies & Analytics

We use cookies to improve website functionality and analyse traffic.

You can manage preferences via our cookie banner or browser settings.

Full details are provided in our Cookie Policy.

8. Data Retention

  • Consulting projects: up to 7 years
  • GenderGov: until subscription ends or client requests deletion
  • Other SaaS products: per client instruction
  • Anonymised/aggregated data: may be retained indefinitely for analytics

9. Your Rights

Under GDPR, UK GDPR, and DPDP, you may:

  • Access your data
  • Rectify inaccurate data
  • Request deletion ("right to be forgotten")
  • Restrict processing
  • Object to processing (e.g., marketing)
  • Request portability of data
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with a supervisory authority

Contact us: support@acevoglobal.com

10. Data Security

We apply safeguards including:

  • Encryption and secure transmission
  • Role-based access controls
  • Regular security reviews

If a breach occurs, we will notify affected parties and regulators as required.

11. Children's Privacy

Our services are for professional/business users. We do not knowingly collect data from individuals under 16.

12. Updates to Policy

This Policy may be updated periodically. The latest version will always be available at www.acevoglobal.com/policies.

GenderGov Note: GenderGov is operated by ACEVO Global Advisory Pvt. Ltd. Our services follow ACEVO's Privacy Policy, with dedicated provisions for GenderGov included in Section 3(b).