GDPR

1. Policy Statement


Aion Voice Ltd. is committed to safeguarding the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR) and relevant U.S. data protection regulations. While our servers are securely hosted in the United States, we ensure compliance with applicable laws and implement robust measures to protect all personal data processed by our systems.




---


2. Scope


This policy applies to:


All personal data collected, processed, or stored by Aion Voice Ltd.


Employees, contractors, suppliers, customers, and third parties involved with our services.


All business processes involving the handling of personal data.






---


3. Data Hosting and Security


3.1 Server Location


Our servers are securely hosted in the United States and are managed in compliance with U.S. data protection regulations.


3.2 Security Measures


We employ state-of-the-art technical and organizational security measures, including:


Encryption of data at rest and in transit.


Multi-factor authentication for accessing data systems.


Regular security audits, vulnerability assessments, and system monitoring.


Strict access controls to ensure only authorized personnel can access personal data.




3.3 Data Transfers


As our servers are located in the U.S., personal data may be transferred outside of the European Economic Area (EEA). Such transfers are conducted in accordance with GDPR requirements, ensuring that adequate safeguards are in place to protect data integrity and privacy.




---


4. Compliance with GDPR Principles


Although our servers are based in the U.S., Aion Voice Ltd. is committed to adhering to the following GDPR principles:


4.1 Lawfulness, Fairness, and Transparency


We process personal data in a transparent manner and only for legitimate purposes, providing clear information to data subjects about how their data will be used.


4.2 Purpose Limitation


Personal data is collected and processed only for specific, explicit, and legitimate purposes, ensuring no further processing is conducted outside these purposes.


4.3 Data Minimization


We only collect the personal data necessary to achieve the stated purposes of processing.


4.4 Accuracy


We ensure personal data is accurate and up-to-date, providing mechanisms for individuals to update their data when needed.


4.5 Storage Limitation


Personal data is retained only for as long as necessary for its intended purpose, after which it is securely deleted.


4.6 Security and Confidentiality


We implement appropriate measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.




---


5. Data Subject Rights


Under GDPR, individuals whose data we process have the following rights:


Right to Access: Individuals can request access to their personal data held by Aion Voice Ltd.


Right to Rectification: Individuals can request corrections to inaccurate or incomplete data.


Right to Erasure (Right to be Forgotten): Individuals can request the deletion of their personal data under certain circumstances.


Right to Restrict Processing: Individuals can request restrictions on processing their data.


Right to Data Portability: Individuals can request a copy of their data in a structured, commonly used format.


Right to Object: Individuals can object to certain types of data processing, including direct marketing.


Right to Lodge a Complaint: Individuals can lodge complaints with their local data protection authority if they believe their rights have been violated.






---


6. U.S. Data Protection Regulations


As our servers are based in the U.S., Aion Voice Ltd. complies with applicable U.S. data protection laws, such as:


The California Consumer Privacy Act (CCPA) for customers residing in California.


Any additional federal or state regulations governing data privacy and security.




Where U.S. regulations differ from GDPR, we ensure adequate protections are in place to meet GDPR requirements for data subjects in the EEA.




---


7. Reporting Data Breaches


In the event of a data breach:


Aion Voice Ltd. will assess the breach's impact and take immediate action to mitigate risks.


Affected individuals and the appropriate regulatory authorities will be notified within 30 days if the breach poses a risk to individuals' rights and freedoms.






---


8. Contact Information


For questions or concerns about this policy or to exercise your data subject rights, please contact:


Data Protection Officer Jason Shepherd &Toby Hyder
Email: hello@aionvoice.ai






---


9. Policy Review


This policy will be reviewed annually or as necessary to ensure compliance with evolving data protection laws and regulations.


January 2025 version 1