Privacy Policy.

1. Introduction

ATA International Consulting and Design Services ("ATAICDS," "ATA," "we," "our," or "us") respects the privacy of individuals who visit our website, contact us, request information about our services, submit inquiries, or otherwise interact with us.

This Privacy Policy explains how we collect, receive, use, store, disclose, retain, and protect personal information in connection with our website, https://ataicds.com/, and related business communications and website functions.

ATAICDS provides architecture, engineering, construction-related design support, drafting, Building Information Modeling (BIM), lighting design, photometric analysis, engineering documentation, and associated professional support services.

This Policy applies primarily to personal information processed through our public website and related inquiries. Where ATAICDS processes information on behalf of a client as part of a project, the applicable client agreement, confidentiality obligations, data-processing terms, and other applicable legal requirements may also govern that information.

By using our website, you acknowledge that you have had an opportunity to review this Policy. Where applicable law requires consent or another legal basis for processing, we will obtain or rely on the appropriate basis rather than treating website access alone as consent.

2. Information We Collect

Depending on how you interact with ATAICDS, we may collect the following categories of information.

2.1 Information You Provide Directly

When you contact us, request a quotation, submit a business inquiry, apply for a position, or communicate with our team, you may provide:

• Name, job title, company name, and professional designation.
• Business email address, telephone number, and business address.
• Information included in messages, inquiry forms, emails, or other communications.
• Project descriptions, scope requirements, schedules, drawings, specifications, and reference documents you voluntarily submit.
• Resume, employment history, qualifications, and other application information when applying for employment or contract opportunities.
• Other information reasonably necessary to respond to your request or establish a business relationship.

Please do not submit passwords, payment-card security codes, government identification numbers, sensitive personal information, or confidential project documents through a general website form unless specifically requested through an appropriate and secure process.

2.2 Information Collected Automatically

When you visit our website, our hosting provider or website systems may automatically process certain technical information, including:

• Internet Protocol (IP) address.
• Browser type and version.
• Operating system and device information.
• Pages visited, referring pages, timestamps, and general usage information.
• Server access logs, error reports, and security-related events.

We use this information, where available and appropriate, to maintain website functionality, diagnose technical problems, investigate suspicious activity, understand website performance, and protect our systems.

2.3 Cookies and Similar Technologies

Our website or third-party services integrated with it may use cookies, session identifiers, or similar technologies to maintain functionality, remember preferences, measure website performance, or support security.

The actual cookies and technologies used depend on the website configuration and services enabled at the time of your visit.

Where required by law, we will obtain consent before placing non-essential cookies or activating applicable tracking technologies. You may be able to manage cookies through your browser settings or an available website preference tool. Disabling certain cookies may affect website functionality.

2.4 Information From Other Sources

We may receive business contact information from your organization, professional directories, public business websites, referrals, business partners, or other lawful sources.

We use such information for legitimate business purposes, subject to applicable legal requirements and any relevant marketing preferences.

3. How We Use Personal Information

ATAICDS may use personal information for the following purposes:

1. Responding to inquiries, requests for proposals, quotations, and service questions.
2. Communicating about our architecture, engineering, drafting, BIM, lighting, photometric, and related services.
3. Evaluating potential projects, preparing proposals, and coordinating meetings.
4. Managing existing client, supplier, contractor, and professional relationships.
5. Reviewing employment and independent-contractor applications.
6. Maintaining website functionality, performance, and security.
7. Detecting fraud, misuse, unauthorized access, and other potentially unlawful activities.
8. Maintaining business records and fulfilling applicable accounting, tax, contractual, and legal obligations.
9. Sending relevant business updates or marketing communications where permitted by law.
10. Establishing, exercising, or defending legal claims.
11. Enforcing our website terms and protecting our rights, personnel, clients, and property.

We will not knowingly use personal information for a materially incompatible purpose without an appropriate legal basis or any additional notice or consent required by law.

4. Legal Bases for Processing

Where applicable privacy law requires a legal basis, ATAICDS may process personal information on the basis of:

• Consent provided for a specified purpose.
• Steps requested by you before entering into a contract or performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests, where recognized by law and not overridden by applicable individual rights.
• Establishment, exercise, or defense of legal claims.
• Another lawful basis permitted under applicable legislation.

The availability and applicability of each basis depend on the jurisdiction, the type of information, and the specific processing activity.

5. How We Share Information

ATAICDS does not sell personal information for money. We may disclose information in the following circumstances, as appropriate and lawful:

5.1 Service Providers

We may share necessary information with service providers supporting our operations, including website hosting providers, email and communications providers, IT and cybersecurity providers, document-management platforms, and other business service providers.

These parties may process information on our behalf or in accordance with their own applicable terms. Where appropriate, we use contractual, organizational, or technical safeguards to restrict their use of information.

5.2 Clients and Business Partners

We may share business communications or project-related information with authorized representatives of the organization concerned when reasonably necessary to respond to an inquiry, coordinate a project, or perform agreed services.

5.3 Legal and Regulatory Requirements

We may disclose information when reasonably necessary to comply with applicable law, a lawful request from a competent authority, a court order, or other binding legal process, or to establish, exercise, or defend legal claims.

5.4 Business Transfers

If ATAICDS undergoes a merger, restructuring, acquisition, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable confidentiality and privacy obligations.

5.5 With Your Direction or Consent

We may disclose information for another purpose when you request or authorize the disclosure, or when otherwise permitted by applicable law.

We do not authorize third parties to use personal information for purposes inconsistent with applicable law or our contractual obligations.

6. International Data Transfers

ATAICDS operates with business interests and operations involving India and the United States and may engage with clients or service providers in other countries.

Depending on the services and systems used, information may be processed or stored in a country other than the country in which it was collected. Different countries may have different data-protection laws.

Where required, ATAICDS will implement appropriate safeguards, contractual arrangements, consent, or other lawful transfer mechanisms before transferring personal information internationally.

7. Data Security

ATAICDS takes reasonable measures appropriate to the nature of the information and the risks involved to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Depending on the systems and information involved, these measures may include:

• Restricting access to authorized personnel.
• Using appropriate account permissions and authentication controls.
• Maintaining reasonable website, server, and system security practices.
• Using secure transmission methods where available and appropriate.
• Maintaining confidentiality obligations for personnel and service providers.
• Reviewing access permissions and retaining information only as reasonably necessary.
• Investigating and responding to suspected security incidents.

No website, email system, network, cloud service, or electronic transmission method can be guaranteed to be completely secure. We therefore cannot promise absolute security.

Where a security incident triggers a notification obligation under applicable law, ATAICDS will take the steps required by that law.

8. Data Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including responding to inquiries, maintaining business records, fulfilling contracts, resolving disputes, meeting legal requirements, and protecting our legitimate interests.

Retention periods depend on the type of information, its purpose, applicable law, and any relevant contractual obligations.

When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to lawful retention requirements, backups, archival systems, litigation holds, and other applicable exceptions.

9. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information, subject to legal exceptions.
• Withdraw consent where processing relies on consent.
• Request information about certain processing or disclosures.
• Object to or restrict certain processing where the law provides that right.
• Opt out of marketing communications.
• Lodge a complaint with a competent data-protection authority.
• Exercise other rights available under applicable privacy legislation.

To exercise an applicable right, contact us using the details in Section 15. We may request reasonable information to verify your identity and clarify your request.

We will respond within the time period required by applicable law. Some requests may be denied or limited where a legal exception applies, where we must retain information, or where the request would adversely affect another person's rights.

Marketing Preferences

You may opt out of promotional emails by using an unsubscribe mechanism where provided or by contacting us directly. We may continue to send non-promotional communications necessary for an existing business relationship, security, legal compliance, or administration.

10. India-Specific Privacy Information

Where applicable, ATAICDS will process digital personal data in accordance with the Indian Digital Personal Data Protection Act, 2023, the rules and provisions in force from time to time, and other applicable Indian laws.

Where the law applies, we will provide required notices, obtain consent when required, honor applicable individual rights, implement prescribed safeguards, and comply with applicable retention, deletion, and personal-data-breach obligations.

The application and commencement of specific statutory obligations may depend on the relevant law, notification, rule, and processing activity.

11. United States and Other Jurisdictions

Privacy rights and obligations vary by jurisdiction.

Where applicable, ATAICDS will comply with privacy, consumer-protection, data-security, and breach-notification laws that apply to its activities, including relevant US state laws where their requirements and thresholds are met.

If a jurisdiction provides additional rights or requires specific disclosures, those rights and disclosures will apply to the extent required by law.

12. Children's Privacy

Our website and professional services are intended for business, professional, and general audiences, not specifically for children.

We do not knowingly solicit personal information from children in circumstances where parental consent or additional protections are required. If you believe a child has provided personal information to us inappropriately, please contact us so that we can assess the matter and take appropriate steps.

13. Third-Party Websites and Services

Our website may contain links to third-party websites, professional platforms, document repositories, or other online services.

Those third parties may have their own privacy policies, terms, and data-handling practices. ATAICDS does not control independent third-party websites and is not responsible for their privacy practices.

We encourage visitors to review the privacy notices of any third-party service before submitting personal information to it.

14. Changes to This Privacy Policy

We may update this Policy to reflect changes in our services, technology, legal obligations, or business practices.

The revised version will be published on this page with an updated “Last Updated” date. Where required by law, we will provide additional notice or obtain consent for material changes.

Your continued use of the website after an update does not replace any consent that the law specifically requires.

15. Contact Us

For privacy questions, requests concerning personal information, or complaints about our handling of personal data, contact:

Please include “Privacy Request” in the subject line of your email. Do not include passwords, payment-card information, or unnecessary sensitive personal information in your request.

We will review and respond to requests in accordance with applicable law.

This Privacy Policy describes general website and business privacy practices. It does not replace a client-specific data-processing agreement or any additional privacy notice required for a particular service or jurisdiction.