Privacy policy

1. Who we are

Global IT Soft ("we", "us") provides remote IT support, training and related services to homes and businesses in India, the UAE and the Gulf, the United Kingdom, Europe and the United States. We decide how and why your personal information is used, so we are the data controller (called the "data fiduciary" under India's Digital Personal Data Protection Act, 2023).

You can reach us about anything in this policy at .

2. What we collect

We only collect what we need to help you.

• Contact details you give us when you call, WhatsApp, email or use the contact form: your name, phone number, email address, company and country.
• Support information: the problem you describe, screenshots or files you choose to send, device and software details, and notes we make while helping you.
• Account and billing details for paid plans: the plan, invoices, payment status and the details needed for a proper invoice. Card and bank details are handled by the payment provider, not stored by us.
• Technical data our web host records automatically when you visit the site: IP address, browser type, pages requested and the date and time. These server logs are used for security and to keep the site running.
• Preferences saved in your own browser, such as the region and billing period you picked (see section 6).

We do not ask for, and you should never send us, OTPs, PINs, CVVs, bank passwords or crypto seed phrases.

3. How we use it

• To answer your questions and provide the support, training or plan you asked for.
• To arrange and carry out guided calls and remote sessions.
• To send quotes and invoices, take payment and keep business and tax records.
• To keep our website and services secure and prevent fraud or misuse.
• To improve our services, for example by noticing which problems people ask about most.
• To meet our legal obligations.

We do not sell your personal information, we do not use it for targeted advertising, and we do not send marketing messages unless you ask us to.

4. Legal bases

Where laws such as the EU and UK GDPR or the UAE Personal Data Protection Law require a legal basis, we rely on:

• Contract: to provide the service you requested or to take steps before entering a contract with you.
• Consent: for remote access to your device and for anything optional. You can withdraw consent at any time.
• Legitimate interests: to run, secure and improve our business, balanced against your rights.
• Legal obligation: for invoices, tax and accounting records.

Under India's Digital Personal Data Protection Act, 2023, we process your data on the basis of your consent or for the specified legitimate uses the Act allows, such as when you voluntarily share information to receive a service.

5. Remote sessions

Remote access only starts after you accept the request on your own device, and you can end it at any time. During a session we can see what is on your screen. We only look at what is needed to fix the problem, we do not copy your files unless you ask us to, and we do not record sessions unless you agree first. We suggest you close banking, email and other private windows before a session starts.

6. Website, cookies and storage

• No tracking cookies or analytics. This website does not use advertising or analytics cookies.
• Local storage. The site saves your chosen region and billing period in your browser's local storage so prices stay in your currency. This never leaves your device and you can clear it in your browser settings.
• Fonts. Pages load the Plus Jakarta Sans font from Google Fonts, so your browser connects to Google's servers, which receive your IP address. See Google's privacy policy for details.
• Contact form. The form does not send your message to our server. It opens WhatsApp (or your email app) with the message filled in, and you choose whether to send it.
• IBPS Photo Tool. The tool runs entirely in your browser. Your photos, signatures and certificates are never uploaded. Files you save are kept in your browser's storage on that device until you clear them.
• Links. Our Downloads page and guides link to other websites such as app stores, banks and software makers. Their own privacy policies apply when you visit them.

7. Who we share it with

We share personal information only when needed to provide our services, with:

• Communication services you choose to contact us through, such as WhatsApp (Meta), phone networks and our email provider.
• Remote support and video tools used in a session, such as AnyDesk, TeamViewer, Zoom, Microsoft Teams or Google Meet.
• Our web host, payment providers, accountants and professional advisers.
• Authorities, when the law requires it or to protect the rights, safety and property of our customers and of Global IT Soft.
• A buyer or successor if our business is ever reorganised or sold, under the same protections.

Each of these providers handles data under its own terms and applicable law. We do not allow them to use your information for their own marketing.

8. International transfers

We support customers in several countries, and our team and service providers may process data in India, the UAE, the UK, the European Union, the United States or other countries. When we transfer personal information across borders we take steps the law requires, such as using providers that offer standard contractual clauses or equivalent safeguards, and we never transfer data to countries restricted under India's Digital Personal Data Protection Act.

9. How long we keep it

• Enquiries that do not lead to a service: up to 12 months after our last contact.
• Support records for customers: for as long as you are a customer and up to 3 years afterwards, so we can help with repeat problems.
• Invoices and accounting records: for as long as tax and company law requires, usually 5 to 8 years.
• Server logs: normally no longer than 90 days.

When information is no longer needed we delete it or make it anonymous.

10. Security

We use reasonable technical and organisational measures to protect personal information, including two-factor login on our accounts, encrypted connections, access limited to the people who need it, and permission-only remote tools. No system is perfectly secure, so if we ever become aware of a breach that affects you, we will tell you and the relevant authorities as the law requires.

11. Your rights

Depending on where you live, you can ask us to:

• Give you a copy or summary of the personal information we hold about you.
• Correct, complete or update it.
• Delete it, where we no longer need it or are not legally required to keep it.
• Restrict or object to certain uses, including processing based on legitimate interests.
• Send your data to you or another provider in a portable format.
• Withdraw consent at any time, without affecting what was done before.
• In India, nominate another person to exercise your rights in case of death or incapacity.

Residents of California and other US states have the right to know, delete and correct personal information and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define it.

To use any of these rights, email . We may need to confirm your identity first. We reply within one month, or sooner where local law requires.

12. Children

Our services are meant for adults and businesses. We do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you believe a child has sent us personal information, contact us and we will delete it.

13. Changes to this policy

We may update this policy when our services or the law change. The effective date at the top shows when it was last updated. If a change is significant, we will make it clear on this page.

14. Contact and complaints

For privacy questions, requests or complaints, including as our grievance contact under Indian law, email . We aim to resolve every complaint quickly and fairly.

If you are not satisfied, you can complain to your local data protection authority, for example the Data Protection Board of India, the UAE Data Office, the UK Information Commissioner's Office, or the supervisory authority in your EU country.

See also our Terms of use.