Fall Rise Infotech

Fall Rise Infotech

Data Protection

Production data stays in your cloud accounts, our access is limited and revocable, and the data protection terms your law needs are part of the contract.

Your data stays in your accounts

Production data lives in your own cloud accounts, not on our machines. We work with sample or anonymised data wherever possible, and our access is limited to what the work needs and can be revoked by you at any time.

The rules depend on where you and your users are

We confirm which rules apply during scoping and build to them from the first version:

  • UK — UK GDPR and the Data Protection Act 2018; transfers to India need a safeguard such as the IDTA
  • Canada — PIPEDA, plus provincial acts in British Columbia, Alberta, and Quebec
  • Australia — the Privacy Act 1988 and Australian Privacy Principles, including APP 8 on overseas disclosure
  • United States — state laws such as CCPA/CPRA, HIPAA for health data, COPPA for children’s apps
  • UAE — the Personal Data Protection Law onshore, or the DIFC and ADGM regimes in those free zones

Built in, not bolted on

Access control, audit logs, encryption, data retention, and deletion requests are designed into the first version, because adding them after launch costs more and leaves gaps.

Book a free scoping call

Tell us where your users are and what data you handle, and we will cover the rules that apply on the scoping call.

View our work

FAQ

Yes. The data protection and transfer terms your law requires are part of the agreement, alongside the NDA and confidentiality clauses.

Only where the work needs it, through access you grant and can revoke. Development and testing use sample or anonymised data wherever possible.

Countries We Serve

Let's work together

We're open to new projects and partnerships — reach out to see how we can collaborate.

Contact