Data Protection Policy

This policy explains the principles Edit Right Advisors follows when handling business, personal, and client information. It supports our public Privacy Policy and the data terms in each client agreement.

1. Definitions

In this policy, “Edit Right Advisors,” “Edit Right,” “we,” “us,” and “our” mean Edit Right Advisors, the business that operates the Website. “You” means any person who visits the Website or contacts us. “Website” means editright.io and its pages. “Services” means our grant writing, proposal development, research writing, program design, monitoring, evaluation, and learning (MEL), and related advisory services.

2. Accountability

Atiq Rehman, Founder, oversees data protection at Edit Right Advisors. He can be reached at hello@editright.io. We review our practices when laws, tools, or Services change.

3. Collect only what we need

We classify information as public, internal, confidential, or restricted. We collect only what an agreed Service needs. We keep client records separate from public material. We collect sensitive information only when suitable safeguards are in place.

4. Access, storage, and transfer

We limit access to people who need it. We use unique accounts, strong authentication, prompt removal of access, and regular reviews of shared folders. We store and send sensitive client information only through secure, approved channels, never through open public links.

5. Use only for agreed purposes

We use client information only for the Services in the signed agreement and follow documented client instructions. We do not reuse confidential proposals, datasets, or unpublished ideas for training materials, public examples, or AI systems without the client’s permission.

6. Retention, deletion, and incidents

We keep records according to a schedule based on project closure, audit needs, and legal duties. At the end of a project, we securely delete, return, or de-identify client information as agreed. We report and contain any loss, misdirection, unauthorized access, or exposure of data at once. We notify clients and regulators as the law and our agreements require.

7. Service providers and transfers

We check that cloud, AI, communication, and analytics providers meet our standards for security, confidentiality, retention, and international transfers. We set these duties in writing. Our team and contractors receive practical guidance on handling data.

8. Your rights

See section 9 of our Privacy Policy for your rights and how to use them.

9. Contact us

If you have questions about this policy, contact us:

• Email: hello@editright.io
• Phone and WhatsApp: +1 314 998 0221
• Website contact form: editright.io/contact

We answer general inquiries within two business days. Detailed or technical inquiries receive a full response within five business days.

This policy should be read with our other website policies: Privacy Policy, Cookie Policy, Terms of Use, Copyright and Intellectual Property Policy, Third Party Links Policy, Website Disclaimer, Professional Services Policy, Data Protection Policy, Confidentiality Statement, Responsible AI Use Statement, and Accessibility Statement.

Book a free call