Skip to Content

Data Controller and Data Processor Roles

Andabhurji Global Solutions provides software implementation, customization, integration, design, development, migration, consulting, support, training, creative services, marketplace services, e-commerce services, print-on-demand solutions, and related technology services to clients worldwide.

Depending on the nature of the engagement, Andabhurji Global Solutions may act either as a Data Controller, a Data Processor, or a similar role recognized under applicable privacy and data protection laws.

When We Act as a Data Controller

Andabhurji Global Solutions acts as a Data Controller when we determine the purposes and means of processing personal information for our own business operations, including but not limited to:

  • Managing our websites, applications, and online services

  • Responding to inquiries and support requests

  • Managing customer and vendor relationships

  • Marketing and business development activities

  • Recruiting and employment-related activities

  • Managing billing, payments, and contracts

  • Maintaining security, compliance, and fraud prevention systems

  • Improving our products and services

In these situations, we are responsible for handling personal information in accordance with applicable privacy and data protection laws.

When We Act as a Data Processor or Service Provider

In many client engagements, Andabhurji Global Solutions acts solely as a Data Processor, Service Provider, Technology Partner, Implementation Partner, Consultant, or Authorized Agent on behalf of the client.

Examples include:

  • Software implementation projects

  • ERP, CRM, HRMS, Accounting, Inventory, POS, and business management systems

  • E-commerce and marketplace implementations

  • Website development and management

  • Cloud migration and system integration projects

  • Customer data migration services

  • Managed technology services

  • Hosting, maintenance, and support services

  • Print-on-demand and order fulfillment integrations

  • Business automation and workflow implementations

In such cases:

  • The client remains the Data Controller, Business Owner, or Principal Organization.

  • The client determines the purpose, legal basis, and scope of personal data processing.

  • We process personal data only in accordance with documented instructions from the client, applicable contracts, and legal requirements.

  • We do not sell, rent, or independently exploit client-controlled personal information.

  • Ownership of customer, employee, supplier, vendor, business, and operational data remains with the respective client unless otherwise agreed in writing.

Client Responsibilities as Data Controller

Where the client acts as the Data Controller, the client is responsible for:

  • Obtaining necessary consents and permissions

  • Providing privacy notices where required

  • Determining lawful grounds for processing

  • Managing user rights requests

  • Maintaining data accuracy

  • Ensuring compliance with applicable laws and regulations

  • Defining retention and deletion requirements

Andabhurji Global Solutions is not responsible for the content, legality, accuracy, or regulatory compliance of data uploaded, collected, stored, or managed by clients through systems we implement, customize, host, support, or maintain.

Third-Party Platforms and Services

Many projects involve third-party platforms, software products, cloud providers, payment gateways, communication tools, marketplace providers, fulfillment partners, or hosting providers.

In such cases:

  • Personal information may be processed by those third-party providers according to their own privacy policies, terms of service, and legal obligations.

  • Andabhurji Global Solutions does not control the privacy practices of independent third-party providers.

  • Clients are encouraged to review the privacy and security policies of all third-party services used within their solutions.

Data Processing Agreements

Where required by applicable law, contract, customer requirements, or regulatory obligations, Andabhurji Global Solutions may enter into Data Processing Agreements (DPAs), confidentiality agreements, security agreements, or similar contractual arrangements governing the processing of personal information.

International Operations

As we serve customers globally, personal information may be accessed, processed, stored, transmitted, or supported across multiple jurisdictions by authorized personnel, contractors, service providers, cloud providers, or technology partners, subject to appropriate contractual, technical, organizational, and legal safeguards.

No Ownership of Client Data

Unless expressly agreed otherwise in writing:

  • Client data remains the property of the respective client.

  • End-user data remains under the control of the respective client acting as Data Controller.

  • Andabhurji Global Solutions acquires no ownership rights in customer data merely by providing implementation, hosting, support, customization, integration, consulting, or maintenance services.

Upon termination of services, data handling, return, migration, export, retention, or deletion shall be governed by applicable agreements, legal obligations, technical limitations, and client instructions.