Privacy Policy

1. Who we are

AyronLegion India Private Limited is an enterprise AI consulting, modernisation, and application development company registered in India, with an affiliate in Singapore. When this policy refers to “AyronLegion”, “we”, “us” or “our”, it means these entities.

We are the data controller for personal information collected through this website and through general enquiries. When we deliver services under a signed engagement agreement, that agreement sets out separately how personal data is handled for that engagement.

Our contact and registration details are in section 11 at the bottom of this page.

2. What information we collect

Information you give us. When you use the contact form or write to us directly, you share information such as your name, organisation, role, work email address, and the content of your message. We collect only what you choose to send.

Basic website activity. Like every website on the internet, ours records standard access information — such as which pages were visited and when — as part of normal infrastructure operation. This is used to keep the site running, diagnose problems, and protect against abuse. We do not use this information to identify or track individual visitors.

Contact form verification. Our contact form uses a third-party service (Cloudflare Turnstile) to check that submissions come from real people rather than automated bots. This check happens in the background and does not require you to solve a puzzle or take any action. It is not used to track you or serve you advertising.

3. Why we use your information

We use the information we collect for three purposes only:

• To respond to you. When you send us an enquiry, we use your contact details to reply, understand your situation, and — where appropriate — have a follow-up conversation or prepare a proposal.
• To keep the website working and secure. Standard access records and bot-detection help us maintain the site and prevent misuse.
• To meet our legal obligations. We keep certain records as required by Indian company law, tax regulations, and applicable data-protection rules.

4. What we do not do

To be explicit:

• We do not sell your personal information to anyone.
• We do not share your details with third parties for their own marketing.
• We do not run advertising campaigns or use tracking pixels on this website.
• We do not send unsolicited marketing emails.
• We do not collect the personal data of children.

5. Who we share information with

We share personal information only where we need to in order to operate the business:

• Cloud hosting and email. Our website and email are hosted on Microsoft Azure. Enquiries submitted through the contact form are delivered to our mailbox via Microsoft’s infrastructure. Microsoft handles this as a data processor under a formal data protection agreement with us.
• Bot protection. Our contact form is protected by Cloudflare Turnstile. Cloudflare processes the technical signals needed to run that check, under a formal data protection agreement with us.
• Professional advisers. Our accountants, auditors, and legal advisers may see limited personal data as part of their work. They are bound by confidentiality.
• Legal requirements. We may disclose information where required by law, court order, or a regulatory authority.

Every third party we engage is bound by written obligations to keep your data secure and use it only for the purpose we have specified.

6. Where your data is held

AyronLegion operates from India and Singapore. Our cloud infrastructure is operated by Microsoft, whose data centres are located globally. This means your information may be processed or stored in India, Singapore, the European Economic Area, the United Kingdom, or the United States, depending on which Microsoft region your request is routed to. Where data moves between jurisdictions, appropriate safeguards apply — including standard contractual clauses recognised under GDPR and UK GDPR.

7. How long we keep your information

• Enquiries and correspondence — kept for up to two years from the last exchange, then deleted or anonymised, unless a longer period applies to an active engagement.
• Website access records — kept for up to 90 days, then deleted unless retained as part of a security investigation.
• Client and engagement records — kept for as long as the engagement lasts and for the period required by Indian company and tax law (typically seven years).

8. Your rights

Depending on where you are based, you may have the right to:

• Ask us what personal information we hold about you, and receive a copy.
• Ask us to correct information that is inaccurate.
• Ask us to delete your information, in certain circumstances.
• Ask us to stop using your information in a particular way.
• Receive your information in a portable format.
• Withdraw consent where we have relied on consent to process your data.
• Lodge a complaint with your local data protection authority.

These rights apply under the EU General Data Protection Regulation (GDPR), the UK GDPR, and India’s Digital Personal Data Protection Act 2023, among others. To exercise any of these rights, write to us at privacy@ayronlegion.com. We will respond within one month.

If you are in the EEA, you may complain to the data protection authority in your country. If you are in the UK, this is the Information Commissioner’s Office (ICO). If you are in India, this is the Data Protection Board of India.

9. Cookies

This website does not use advertising or analytics cookies. The only cookies set are those strictly necessary to operate the site and run the contact form bot-protection check. No consent is required for these. If we introduce any optional cookies in future, we will update this policy and ask for your consent first.

10. Changes to this policy

If we make a significant change to how we handle personal data, we will update this page and revise the effective date at the top. The current version is always at ayronlegion.com/privacy.

11. Contact us

For any question about this policy or to exercise your rights, contact us by email or post. We aim to acknowledge all requests within five working days.