Privacy Policy

Last updated: 20 September 2026 · Applies to: www3.assoftwaregroup.com

1. Who we are

This website is operated by A & S Software Consultancy Pvt. Ltd. ("we", "us", "our"), a private limited company incorporated in India, with its registered office at G-14, Third Floor, South Extension-1, Main Market, New Delhi 110049, India.

For matters relating to this policy and to personal data, contact: director@assoftwaregroup.com, or write to the registered office above.

For the purposes of the Digital Personal Data Protection Act, 2023 (India) we act as a Data Fiduciary in respect of the data described in section 4. For the purposes of the UK GDPR and the EU GDPR, where those apply, we act as a controller in respect of that same data.

2. The short version

This website is a set of static pages. It has no server-side application, no database, and no user accounts. Specifically:

It sets no cookies, of any kind, including analytics and advertising cookies.
It runs no analytics, no tag manager, no advertising pixels and no session recording.
It loads no third-party fonts, scripts or embeds. Every asset is served from this domain.
It has no form that submits data to us. The demo request form assembles a message in your own email application and sends nothing by itself.

Because of this, we do not need to ask for your consent to cookies, and you will not see a cookie banner. There is nothing to consent to.

3. Hosting and technical logs

This website is hosted on Amazon Web Services and delivered through the Amazon CloudFront content delivery network. To deliver a page to you, the network necessarily processes your IP address and basic request information (the page requested, the time, your browser's user-agent string) in transit. This is technically unavoidable for any website.

We do not enable access logging on this distribution, and we do not build profiles, analytics or reports from request data. Amazon Web Services may retain limited operational and security records under its own terms as our hosting provider.

Where UK or EU data protection law applies to this processing, our lawful basis is our legitimate interest (Article 6(1)(f)) in delivering and securing the website.

4. Information you send us

If you use the demo request form, your browser opens a pre-filled message in your own email application. Nothing is transmitted to us at that point. If you then choose to send that message, or if you email, telephone or write to us directly, we receive the information you chose to provide — typically your name, your role, your institution, your work email address, a telephone number if you give one, and what you have told us about your requirements.

Why we process it

To respond to your enquiry and arrange a demonstration.
To prepare a proposal, quotation or contract if you ask for one.
To keep a record of our correspondence with your institution.

Lawful basis

India (DPDP Act 2023): the certain legitimate use of data you have voluntarily provided to us for the purpose for which you provided it, and your consent where consent is required.
UK / EU GDPR, where applicable: taking steps at your request prior to entering into a contract (Article 6(1)(b)), and our legitimate interest in responding to business enquiries (Article 6(1)(f)).

Retention

We keep enquiry correspondence for as long as there is an active business relationship or a realistic prospect of one, and for up to three years after the last contact, after which it is deleted. Where a contract follows, records are retained for the period required by the contract and by applicable tax, accounting and company law.

What we do not do

We do not sell personal data.
We do not share it with advertisers or data brokers.
We do not use it for automated decision-making or profiling.
We do not add you to a marketing list because you asked a question. If we ever offer a mailing list, it will be a separate, explicit opt-in.

5. Who we share information with

We disclose personal data only in these circumstances:

Our email provider. Correspondence sent to us is processed by our email service provider in the ordinary course of receiving and storing email.
Our alliance partner. Where your enquiry concerns the United Kingdom or Europe, we may pass it to OLT ERP Limited, London, registered in England and Wales, so that it can respond. OLT ERP Limited is a separate legal entity and acts as its own controller in respect of what you then send it.
Professional advisers — lawyers, auditors and accountants — where necessary and under a duty of confidence.
Where we are legally required to, to comply with law, legal process or a lawful request from a competent authority.

6. International transfers

We are established in India and our alliance partner is established in the United Kingdom. If you contact us from the United Kingdom or the European Economic Area, your correspondence will be transferred to and processed in India.

Where such a transfer is subject to the UK GDPR or the EU GDPR, we rely on appropriate safeguards, including the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses, as applicable. A copy of the relevant safeguards is available on request from director@assoftwaregroup.com.

7. Your rights

If the DPDP Act 2023 (India) applies to you

You have the right to:

obtain a summary of the personal data we process about you and the processing activities we undertake;
have inaccurate or misleading personal data corrected, completed or updated;
have personal data erased where it is no longer needed for the purpose for which it was collected, unless retention is required by law;
nominate another person to exercise these rights in the event of your death or incapacity;
a readily available means of grievance redressal (see section 9), and to complain to the Data Protection Board of India if we do not resolve your grievance.

If the UK GDPR or EU GDPR applies to you

You have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing carried out on the basis of legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with a supervisory authority — in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in the EEA, the authority in your country of residence, place of work or the place of the alleged infringement.

To exercise any of these rights, write to director@assoftwaregroup.com. We will respond within the period required by applicable law, and in any event without undue delay. We may need to verify your identity before acting on a request.

8. Institutional data in OltErp deployments

This policy covers this website and enquiries made through it. It does not govern the student, staff and financial data held in an OltErp deployment.

In those deployments the institution is the Data Fiduciary under the DPDP Act 2023, and the controller under the UK or EU GDPR where those apply. We act as a Data Processor on the institution's documented instructions. Institutional data remains the property of the institution in every deployment model, and an export is available at any time in a documented format.

The handling of that data is governed by the implementation contract, a non-disclosure agreement executed before any institutional data reaches us, and a data processing agreement where the institution or its regulator requires one. We maintain ISO 27001:2013 certification for information security management.

Students, parents and staff of an institution using OltErp should direct data protection requests to their own institution in the first instance, as the body responsible for that data.

9. Grievance redressal

If you are dissatisfied with how we have handled your personal data or a request relating to it, contact the Director in writing:

The Director
A & S Software Consultancy Pvt. Ltd.
G-14, Third Floor, South Extension-1, Main Market
New Delhi 110049, India
director@assoftwaregroup.com
+91 70427 31360

We aim to acknowledge within three working days and to resolve within thirty days. If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India, or to the relevant supervisory authority where the UK or EU GDPR applies.

10. Security

This website serves static content over HTTPS only. We maintain ISO 27001:2013 certification for our information security management system, apply role-based access to correspondence and institutional data, and require confidentiality undertakings from personnel with access to it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

This website is aimed at administrators and decision-makers at educational institutions. It is not directed at children, and we do not knowingly collect personal data from children through it. Where OltErp holds data about students who are children, that data is held on behalf of the institution, which is responsible for the verifiable consent required by the DPDP Act 2023 or equivalent law.

12. Links to other websites

This website links to other sites, including saas.assoftwaregroup.com and www.olterp.co.uk. Those are governed by their own terms and privacy notices, and we are not responsible for the content or privacy practices of any site we link to.

13. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The date at the top of this page shows when it was last revised. Where a change materially affects how we handle personal data you have given us, we will take reasonable steps to notify you.

Privacy policy