Privacy Policy

This Privacy Policy explains how Edit Right Advisors collects, uses, shares, and protects personal information. It applies to Website visitors, prospective clients, client representatives, suppliers, and other business contacts. Client project data is also covered by the client’s signed agreement and any data processing terms in it.

1. Definitions

In this policy, “Edit Right Advisors,” “Edit Right,” “we,” “us,” and “our” mean Edit Right Advisors, the business that operates the Website. “You” means any person who visits the Website or contacts us. “Website” means editright.io and its pages. “Services” means our grant writing, proposal development, research writing, program design, monitoring, evaluation, and learning (MEL), and related advisory services.

2. Who is responsible for your information

Edit Right Advisors is the controller of personal information collected through the Website and our business communications. Atiq Rehman, Founder, leads data protection and can be reached at hello@editright.io.

3. Information we collect

We collect only the information we need. This may include:

• Information you give us: your name, job title, organization, business email, phone number, country or time zone, the content of your inquiry, meeting preferences, and messages you send us.
• Engagement information: documents and data you share with us once we agree to work together, under a signed agreement.
• Technical information: IP address, browser and device type, referring pages, approximate location, cookie identifiers, and activity logs. We use this to run and secure the Website.

Please do not send confidential or sensitive information through general Website forms or first emails. Contact us first to arrange a secure exchange (see our Confidentiality Statement). We do not seek special category data, such as health, religion, or ethnicity, through the Website.

4. How we use your information and our lawful bases

We use personal information for the purposes below. Under the EU General Data Protection Regulation (GDPR) and UK GDPR, each use has a lawful basis.

Purpose	Lawful basis
Reply to inquiries and assess a possible engagement	Steps before a contract, or legitimate interests
Schedule and hold meetings	Steps before a contract, or legitimate interests
Deliver agreed Services and manage the client relationship	Performance of a contract
Keep the Website secure and prevent misuse	Legitimate interests
Measure Website use with optional analytics	Consent
Send newsletters or promotional messages	Consent (withdraw at any time)
Keep records and meet legal, tax, and accounting duties	Legal obligation
Handle disputes and legal claims	Legitimate interests

We send promotional messages only after you agree. Every message includes a way to unsubscribe. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

5. How we share information

We do not sell or rent personal information. We do not share personal information for cross context behavioral advertising.

Only team members and contractors who need the information for their work can access it, and they are bound by confidentiality duties. We also use service providers (processors) who act on our instructions, under contract. They may include:

• Website hosting: our WordPress hosting provider
• Email and cloud storage: Google Workspace
• Meeting scheduling: Calendly
• Messaging: WhatsApp Business, when you choose to contact us that way
• Video call tools, when you choose to meet online
• Professional advisers, such as lawyers and accountants, when needed

We may also disclose information when the law, a court order, or a regulator requires it, or to protect our rights, our clients, or others.

6. International transfers

We serve clients in many countries. Your information may be processed outside your country, including in Pakistan and in the countries where our service providers, such as Google and Calendly, store data. When we transfer personal information from the European Economic Area (EEA), the UK, or Switzerland, we use a recognized safeguard. These include an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or the provider’s certification under the EU US Data Privacy Framework. You can ask us for details of these safeguards.

7. How long we keep information

We keep personal information only as long as we need it for the purpose we collected it, or as the law requires.

• Inquiries and client records: one year, then we delete them, unless the law or a signed agreement requires us to keep them longer
• Marketing contacts, if any: until you unsubscribe
• Cookie and analytics data: as set out in the Cookie Policy

When we no longer need information, we delete it, return it to the client, or de-identify it.

8. How we protect information

We use reasonable technical and organizational measures. These include access controls, unique accounts, multifactor authentication, encrypted connections, secure backups, and confidentiality duties for our team. No system is completely secure, so we cannot guarantee absolute security. If a personal data breach is likely to put your rights at risk, we will notify you and the relevant regulator as the law requires.

9. Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you
• correct inaccurate information
• delete your information
• restrict or object to how we use it, including for direct marketing
• receive your information in a portable format
• withdraw consent at any time, without affecting earlier use
• complain to a data protection regulator

EEA and UK residents. You can complain to your local data protection authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk).

California residents. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), you have the right to know, delete, and correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined. We do not use sensitive personal information to infer characteristics. We will not discriminate against you for using your rights.

Pakistan. We handle data in line with the Prevention of Electronic Crimes Act, 2016 (PECA) and other applicable Pakistani law. We will update this policy if new Pakistani data protection law takes effect.

How to make a request. Email hello@editright.io with the subject line “Privacy request.” You can also reach us by phone or WhatsApp at +1 314 998 0221, but please send written requests by email. We may need to verify your identity before we act. An authorized agent may make a request for you with proof of authority. We aim to acknowledge your request within two business days and to give a full response within five business days. The legal deadlines remain the outer limit: one month under GDPR and UK GDPR, or 45 days under CCPA. If the law allows more time and we need it, we will tell you.

10. Do Not Track and Global Privacy Control

We honor Global Privacy Control (GPC) signals as an opt out of optional cookies and of any sale or sharing, where the law requires. There is no common standard for Do Not Track signals, so the Website does not respond to them.

11. Children

The Website and Services are for organizations and adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us information, contact us and we will delete it.

12. Cookies

We use cookies and similar technologies as explained in our Cookie Policy. You can change your choices at any time through the “Cookie settings” link in the Website footer.

13. Changes to this policy

We may update this policy when our Services, tools, or legal duties change. We will post the new version on this page with a new “Effective date” date. If a change is significant, we will give clear notice on the Website or by email before it takes effect.

14. Contact us

If you have questions about this policy, contact us:

• Email: hello@editright.io
• Phone and WhatsApp: +1 314 998 0221
• Website contact form: editright.io/contact

We answer general inquiries within two business days. Detailed or technical inquiries receive a full response within five business days.

This policy should be read with our other website policies: Privacy Policy, Cookie Policy, Terms of Use, Copyright and Intellectual Property Policy, Third Party Links Policy, Website Disclaimer, Professional Services Policy, Data Protection Policy, Confidentiality Statement, Responsible AI Use Statement, and Accessibility Statement.

Book a free call