Privacy Policy

Effective Date: [Sep 2016 ] Last Updated: [January2026]

Expert Assistant (“Expert Assistant,” “we,” “us,” or “our”) operates the website https://getexpertassistant.com (the “Site”) and provides virtual assistance, transaction coordination, administrative support, social media management, and related business support services (collectively, the “Services”).

We take the privacy of our visitors, prospective clients, clients, and applicants seriously. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, who we share it with, and the choices and rights available to you.

By using the Site or engaging our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who This Policy Applies To

This Policy applies to:

• Visitors who browse the Site
• Prospective clients who submit an enquiry or book a consultation
• Clients who engage us for Services
• Candidates and applicants who apply to join our team
• Anyone who otherwise communicates with us by email, phone, or social media

This Policy does not apply to third-party websites, tools, or platforms that we may link to or that you may ask us to operate on your behalf. Those are governed by their own privacy policies.

2. Information We Collect

2.1 Information You Provide Directly

• Contact and identity details — name, business name, job title, email address, phone number, mailing address, country/state.
• Enquiry and consultation details — the nature of your business, the support you are looking for, expected hours, industry, budget indications, and anything else you choose to tell us during a discovery call or in a form.
• Service and account details — onboarding information, workflow documentation, preferences, escalation contacts, and communications with your assigned assistant or account manager.
• Billing information — billing name, billing address, invoicing contact, tax identifiers, and payment references. We do not store full card numbers. Card and bank details are collected and processed directly by our third-party payment processors.
• Recruitment information — where you apply to work with us: résumé/CV, employment history, education, references, and right-to-work information.

2.2 Client Data Processed on Your Behalf

To deliver the Services, your assistant may be given access to systems and information belonging to you, including CRMs, MLS or transaction platforms, email inboxes, calendars, cloud storage, social accounts, spreadsheets, and websites. This may include personal information about your customers, leads, tenants, patients, employees, or contacts (“Client Data”).

For Client Data, you are the data controller and we act as a service provider / data processor. We process Client Data only:

• on your documented instructions,
• for the purpose of performing the Services, and
• in accordance with our agreement with you and applicable law.

We do not sell Client Data, and we do not use it to build our own marketing lists or train commercial AI models.

2.3 Information Collected Automatically

When you visit the Site we may automatically collect:

• IP address and approximate location (city/region level)
• Browser type, device type, operating system, and screen resolution
• Referring URL and exit pages
• Pages viewed, time on page, and clickstream behaviour
• Date and time stamps
• Cookie and similar identifiers

This is collected through cookies, pixels, and analytics tools — see Section 8 (Cookies).

2.4 Information from Third Parties

We may receive information about you from lead-generation partners, referral sources, publicly available business directories, LinkedIn and other social platforms, and our payment or CRM providers.

3. How We Use Your Information

We use personal information to:

1. Respond to enquiries and schedule discovery or consultation calls
2. Match you with a suitable assistant and prepare an onboarding plan
3. Deliver, manage, supervise, and quality-assure the Services
4. Communicate about your engagement — status updates, reporting, escalations, and service changes
5. Issue invoices, process payments, and manage collections
6. Maintain security, prevent fraud, and enforce our Terms & Conditions
7. Improve the Site, our service offerings, training programs, and internal processes
8. Send marketing communications about our services, where permitted (you can opt out at any time)
9. Assess applications for employment or contractor engagement
10. Comply with legal, tax, accounting, and regulatory obligations

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

4. Legal Bases for Processing (EEA / UK Visitors)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object to such processing — see Section 10.

5. How We Share Information

We disclose information only as described below.

• Our personnel. Assistants, team leads, quality reviewers, and account managers who need access to perform the Services. All personnel are bound by written confidentiality obligations and are onboarded on a least-privilege, need-to-know basis.
• Service providers (sub-processors). Vendors that support our operations, such as cloud hosting, email and communication platforms, CRM, project management and time-tracking tools, payment processors, accounting software, and analytics providers. They are contractually restricted to using information solely to provide services to us.
• Professional advisers. Lawyers, auditors, accountants, and insurers, where reasonably required.
• Legal and regulatory disclosure. Where required by law, subpoena, court order, or lawful government request, or where necessary to establish, exercise, or defend legal claims.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to equivalent protections.
• With your direction. Where you instruct us to share information with a third party (for example, a title company, brokerage, lender, vendor, or your own client).

6. Location of Processing and International Transfers

Expert Assistant is based in Delhi, India, and delivers all Services remotely. Our team, systems, and infrastructure operate from India, and some of our hosting, communication, and productivity vendors store data in the United States, the European Union, or Singapore.

This means that if you are located in the United States, the United Kingdom, the EEA, Canada, Australia, or elsewhere, your personal information and any Client Data you entrust to us will be transferred to, accessed from, and processed in India by our personnel.

We rely on the following safeguards for these transfers:

• Contractual commitments. Our client agreements include confidentiality, security, and data-protection obligations that carry through to every member of our delivery team.
• EEA/UK transfers. Where the GDPR or UK GDPR applies, we enter into the European Commission’s Standard Contractual Clauses (Module Two or Module Three, as applicable) and the UK International Data Transfer Addendum. India has not received an adequacy decision, so these clauses form the transfer mechanism, supported by supplementary technical and organizational measures.
• US clients. We act as a service provider under the CCPA/CPRA and comparable state laws, and are contractually restricted from retaining, using, or disclosing personal information for any purpose other than performing the Services.
• Indian law. As an entity established in India, our processing is subject to the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy.

• Enquiries that do not convert: typically up to 24 months from last contact
• Active client records: for the duration of the engagement
• Contracts, invoices, and financial records: typically 7 years, or as required by applicable tax and accounting law
• Client Data processed on your behalf: for the duration of the engagement, then deleted or returned within [30/60/90] days of termination, unless retention is legally required
• Recruitment records for unsuccessful applicants: typically 12 months, unless you ask us to keep them longer

Backups and archival copies may persist for a limited additional period until they are overwritten on our standard cycle.

8. Cookies and Tracking Technologies

The Site uses cookies and similar technologies:

• Strictly necessary cookies — required for the Site to function, security, and load balancing. These cannot be disabled.
• Functional cookies — remember preferences such as language or form entries.
• Analytics cookies — help us understand traffic, page performance, and how visitors use the Site (for example, Google Analytics).
• Advertising and remarketing cookies — used, if enabled, to measure campaign effectiveness and show relevant ads on third-party platforms (for example, Meta Pixel, LinkedIn Insight Tag, Google Ads).

You can control cookies through your browser settings and, where offered, through our cookie banner. Disabling certain cookies may affect Site functionality.

We do not currently respond to browser “Do Not Track” signals. We do honour Global Privacy Control (GPC) signals where legally required.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including:

• Encryption of data in transit (TLS/SSL)
• Role-based access controls and least-privilege provisioning
• Password management practices and, where supported, multi-factor authentication
• Confidentiality and non-disclosure agreements with all personnel
• Security and data-handling training during onboarding
• Prompt revocation of system access when an assistant leaves an engagement
• Periodic review of access rights and vendor security posture

Please note: we ask clients to grant access through their own tools using dedicated, permission-limited credentials rather than sharing master or personal passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a breach affecting your personal information, we will notify you and, where required, the relevant supervisory authority, without undue delay.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information, subject to legal exceptions
• Restrict or object to certain processing, including direct marketing
• Portability — receive your information in a structured, machine-readable format
• Withdraw consent at any time, without affecting prior lawful processing
• Opt out of “sale” or “sharing” of personal information and of targeted advertising (we do not sell personal information)
• Non-discrimination for exercising your rights
• Lodge a complaint with your local data protection authority

Additional Rights Under Indian Law

Where the Digital Personal Data Protection Act, 2023 applies, you additionally have the right to:

• Obtain a summary of the personal data we process about you and the processing activities undertaken
• Obtain the identities of other data fiduciaries and processors with whom your data has been shared, and a description of what was shared
• Request correction, completion, updating, or erasure of your personal data
• Nominate another individual to exercise your rights in the event of your death or incapacity
• Have your grievance addressed by our Grievance Officer (see Section 15), and escalate to the Data Protection Board of India if you are not satisfied with our response

Under the DPDP Act you also have a corresponding duty not to impersonate another person, suppress material information, or file frivolous or false grievances.

11. Children’s Privacy

The Site and Services are intended for businesses and professionals. They are not directed to children, and we do not knowingly collect personal information from them.

Definitions of “child” differ by jurisdiction — under the Indian DPDP Act, 2023 a child is anyone under 18 years, and processing their data requires verifiable parental consent; under the GDPR the threshold is 16 years (or as low as 13 in some Member States); under COPPA in the United States it is 13 years. We apply the strictest applicable standard and do not knowingly process the data of anyone under 18 through the Site. If you believe a child has provided us with information, contact us and we will delete it promptly.

12. Third-Party Links and Platforms

The Site contains links to third-party sites and social media profiles, including LinkedIn, Facebook, and Instagram. We are not responsible for the privacy practices or content of those platforms. Review their policies before providing information.

13. Marketing Communications

If you opt in, or where permitted by law based on an existing business relationship, we may send you emails about our services, offers, and content. Every marketing email contains an unsubscribe link. You may also email [Support@getexpertassistant.com] to opt out. We will continue to send transactional and service-related messages relating to an active engagement.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. Material changes will be communicated by posting a prominent notice on the Site or, for active clients, by email. Continued use of the Site or Services after changes take effect constitutes acceptance.

15. Contact Us

Expert Assistant [Insert Full Legal Entity Name — e.g. Expert Assistant Services Pvt. Ltd. / LLP / Proprietorship] [Insert Registered Address], Delhi, [PIN], India [Insert CIN / LLPIN / GSTIN, if applicable]

• Privacy enquiries: [Contact@getexpertassistant.com]
• General: [info@getexpertassistant.com]
• Phone: [+1 217 334 2948]
• Website: https://getexpertassistant.com

Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are:

• Name: [Evan A]
• Designation: Grievance Officer / Data Protection Officer
• Email: [grievance@getexpertassistant.com]
• Address:Janakpuri, Delhi, India

We will acknowledge grievances within 48 hours and aim to resolve them within 30 days of receipt.