Data Handling and Security

1. Introduction

N V VENTURE recognizes that remote IT support and digital marketing services may involve access to business systems, devices, accounts, files and information. This page explains the general administrative, technical and operational measures used to reduce security and privacy risks.

This page should be read together with the Privacy Policy, Terms of Service, Remote Access Consent Agreement, Payment and Billing Terms, Refund and Cancellation Policy, Acceptable Use Policy, and any separately signed service, confidentiality or data-processing agreement.

No security measure, remote-support platform, internet connection or electronic-storage system can guarantee complete protection against every possible threat.

2. Security Principles

• Collect and access only information reasonably necessary for the approved service.
• Limit access according to the service requirement.
• Use reasonable authentication and access controls.
• Keep client information confidential.
• Avoid unnecessary copying or retention of client information.
• Use approved tools and service providers.
• Maintain appropriate service and consent records.
• Respond reasonably to suspected security incidents.
• Remove or return temporary service information when reasonably practicable.
• Improve security practices as services, technologies and risks evolve.

3. Scope-Limited Access

N V VENTURE will make reasonable efforts to access only devices, accounts, systems, files and information necessary for the approved service. Remote access does not authorize access to unrelated personal files, accounts, systems or information.

The client must not authorize access to any device, account or system that the client does not own, control or lawfully administer.

• Devices identified in the approved service request.
• Accounts identified by the client.
• Systems necessary for the approved work.
• Files reasonably relevant to the requested service.
• Information required to diagnose, complete or document the service.

4. Remote-Access Authorization

Remote access will begin only after N V VENTURE has reasonably confirmed the client business, authorized representative, requested service, applicable scope, applicable pricing and acceptance of the Remote Access Consent Agreement.

Unattended or persistent access requires separate written authorization and an applicable managed-services or ongoing-support agreement.

• For attended support, the client may observe the session.
• The client may ask questions.
• The client may pause or terminate the session.
• Remote access ends when the session is disconnected.

5. Least-Privilege Access

Where reasonably practicable, N V VENTURE will request only the level of access necessary to perform the approved service. Clients should not provide broader access than reasonably necessary.

• Standard-user access where administrator access is unnecessary.
• Temporary administrator access where required.
• Access limited to a specific account or application.
• Time-limited access.
• Removal or revocation of temporary access after completion.

6. Authentication and Account Security

N V VENTURE may use reasonable authentication controls for its own systems and approved service tools. Clients remain responsible for protecting their own accounts, passwords, recovery methods and authentication devices.

• Strong and unique passwords.
• Multi-factor authentication where available and appropriate.
• Restricted user accounts.
• Access logging and account review.
• Revocation of access when no longer required.
• Secure recovery procedures.

7. Passwords and Credentials

Clients should enter passwords and authentication codes directly whenever reasonably possible. Clients must not send passwords, banking credentials, payment-card PINs, one-time banking codes or unnecessary authentication secrets through ordinary website forms or unprotected email.

N V VENTURE does not require access to a client's online bank account for ordinary IT support.

• Temporary credentials should be limited to the approved scope.
• They should not be reused personal passwords.
• They should provide no more access than reasonably required.
• They should be changed or revoked after the work is completed.

8. Remote-Support Tools

N V VENTURE may use approved third-party remote-support tools. These tools may process connection information, device identifiers, session date and time, session duration, technician and client identifiers, connection status and technical diagnostic information.

Clients should download or open remote-support software only through a source verified by N V VENTURE.

• End the session if the technician cannot be verified.
• End the session if requested activity appears unrelated to the approved scope.
• End the session if a suspicious payment request or banking-access request is made.
• Report suspected unauthorized access to support@nvventure.com.

9. Session Logging

N V VENTURE may retain technical and administrative session records. Session logging does not necessarily mean that the client's screen, audio or video is being recorded.

• Connection date and time.
• Session duration.
• Assigned technician.
• Client or device identifier.
• Remote-support tool used.
• Approved service scope.
• Actions documented in the support ticket.
• Completion status and recommendations.

10. Session Recording

Screen, audio or video recording requires separate affirmative consent. Recording permission must not be automatically selected as part of general remote-access consent.

• What will be recorded.
• Why recording is necessary.
• Who may access the recording.
• How long it may be retained.
• How consent may be withdrawn before recording begins.

11. File Access and Transfer

N V VENTURE will not intentionally transfer or copy client files unless the transfer is reasonably necessary, the client has authorized it, and the applicable optional permission has been selected where required. Transferred files will be used only for the approved service. Where reasonably practicable, temporary files will be restricted, stored only as long as necessary, returned where appropriate, and securely deleted when no longer required, subject to legal, security and backup requirements.

• Clients must not intentionally provide stolen information.
• Clients must not intentionally provide malware or unlawful content.
• Clients must not provide information they are not authorized to disclose.
• Clients should avoid unnecessary sensitive information.

12. Data Minimization

N V VENTURE aims to collect, access and retain only information reasonably necessary for responding to enquiries, preparing proposals, delivering approved services, processing payments, maintaining service and consent records, preventing fraud and security abuse, complying with legal obligations, resolving disputes and establishing or defending legal claims.

Clients should avoid providing information unrelated to the requested service.

13. Storage and Transmission

Depending on the service and selected provider, business information may be stored or transmitted through business email, customer relationship management systems, cloud storage, remote-support platforms, appointment systems, payment and invoicing providers, and collaboration platforms.

• Access restrictions.
• Secure transmission.
• Password protection and multi-factor authentication.
• Device security and software updates.
• Anti-malware protection.
• Logging, monitoring and confidentiality requirements.

14. International Processing

N V VENTURE operates from India. Information supplied by a client in the United States, Canada or another approved country may be accessed from India, transferred to India, processed in India, or processed in another country where an approved service provider operates.

Clients remain responsible for determining whether a separate Data Processing Addendum or industry-specific agreement is required before access to regulated or highly sensitive information is permitted.

15. Service Providers and Subprocessors

N V VENTURE may use third-party providers for website hosting, business email, scheduling, customer relationship management, remote support, cloud storage, file transfer, video conferencing, payment processing, invoicing, accounting, analytics, advertising, security and fraud prevention.

Providers may be assessed based on the nature of the service, available safeguards and business requirements. Third-party providers remain responsible for their own systems, services and legal obligations.

16. Personnel and Contractor Access

Client information should be accessible only to personnel or approved contractors who reasonably require it for the authorized service, technical supervision, billing, administration, security investigation, or legal and compliance requirements.

• Confidentiality obligations.
• Access restrictions.
• Security instructions.
• Appropriate supervision.
• Removal of access when no longer required.

17. Client Backups

The client is responsible for maintaining current, tested and recoverable backups unless a separate written agreement expressly makes N V VENTURE responsible for backup services. N V VENTURE cannot guarantee recovery where a usable backup does not exist.

• Save open work.
• Back up important files.
• Verify that the backup can be accessed.
• Close unrelated confidential information.
• Sign out of personal financial accounts.

18. Client Security Responsibilities

Security depends on cooperation between N V VENTURE, the client and relevant third-party providers.

• Maintain lawful control over devices and accounts.
• Protect credentials and use properly licensed software.
• Install reasonable security updates.
• Maintain appropriate backups.
• Disclose regulated or highly sensitive information.
• Obtain required employee, contractor or customer permissions.
• Review access permissions and revoke temporary credentials.
• Report suspicious activity promptly.
• Follow reasonable security recommendations.

19. Regulated and Highly Sensitive Information

Unless expressly accepted under a separate written agreement, N V VENTURE's standard services are not designed for systems containing protected healthcare information, payment-card environments requiring specialized compliance, regulated banking systems, government-classified information, criminal-justice information, large biometric databases, children's personal information or highly sensitive identity-document repositories.

The client must disclose applicable regulatory requirements before access begins. N V VENTURE may pause or refuse access until appropriate contractual and technical safeguards are agreed.

20. Information Retention

Information may temporarily remain in protected backups until the applicable backup cycle expires.

• General enquiries: up to 24 months after the last meaningful interaction.
• Proposals and service communications: up to three years after the relationship ends.
• Support records and session metadata: up to three years after service completion.
• Remote Access Consent records: up to seven years after the applicable service.
• Contracts, invoices and tax records: up to eight years or longer where legally required.
• Security-incident records: as long as reasonably necessary for investigation, legal compliance and risk management.

21. Secure Disposal

When information is no longer reasonably required, N V VENTURE may delete, anonymize or securely dispose of it, subject to contractual requirements, legal obligations, security requirements, dispute or claim preservation, backup cycles and technical limitations.

Deletion from an active system may not result in immediate deletion from every protected backup copy.

22. Security-Incident Response

If N V VENTURE becomes aware of a suspected security incident, it may investigate, restrict affected access, preserve records, contain the incident, assess impact, correct weaknesses, coordinate with providers, and inform affected clients, individuals or authorities where required.

The timing and content of any notification will depend on the circumstances, available information, contractual requirements and applicable law.

23. Reporting a Security Concern

Reports should be sent to support@nvventure.com. Suggested subject: SECURITY REPORT - Business Name - Date. Reports should include enough information for N V VENTURE to understand and investigate the concern.

• Suspected unauthorized remote access.
• Suspicious communication claiming to represent N V VENTURE.
• Incorrect or suspicious payment instructions.
• Exposed credentials.
• A possible website vulnerability.
• A suspected loss or disclosure of client information.
• Misuse of an N V VENTURE service.

24. No Absolute Security Guarantee

N V VENTURE uses reasonable safeguards appropriate to its services and operational circumstances. However, no electronic system is completely secure, no remote-access platform is risk-free, no cybersecurity service can eliminate every threat, and third-party services may experience failures or security incidents.

Nothing on this page guarantees that a client will never experience data loss, unauthorized access, malware, fraud, service interruption or another security incident.

25. Changes to This Page

N V VENTURE may update this page to reflect changes in services, technology, security practices, service providers, business operations or applicable requirements. The updated version will display a revised Last Updated date.

26. Contact

N V VENTURE

Ghaziabad, Uttar Pradesh, India 201016

Email: support@nvventure.com

Website: nvventure.com