PRIVACY POLICY
Effective Date: July 2024
Last Updated: November 2025
1. INTRODUCTION & COMMITMENT
Kaanha Tech ("we," "us," "our," "Company," "Kaanha Tech," or "White Lions Group Pty Ltd") is committed to protecting your privacy and ensuring transparency about how we collect, use, disclose, and safeguard your personal information. This Privacy Policy explains our practices regarding data privacy for all individuals who interact with our website, services, products, and communications.
By accessing Kaanha Tech's website, using our services, or providing your personal information, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.
2. SCOPE & APPLICABILITY
This Privacy Policy applies to:
  • Our website (www.kaanha.tech)
  • All AI solutions and consulting services offered by Kaanha Tech
  • Mobile applications and digital platforms
  • Email communications and newsletters
  • Discovery calls and consultation sessions
  • Any interaction with Kaanha Tech
This policy does NOT apply to:
  • Third-party websites linked from our site
  • Third-party services integrated with our solutions (AWS, Azure, etc.)
  • Services provided by third parties on our behalf
3. INFORMATION WE COLLECT
3.1 Information You Provide Directly
Contact Information:
  • Name, email address, phone number
  • Company name and job title
  • Business address and location
  • Website URL (if applicable)
Service Inquiry Information:
  • Details about your business challenges
  • Industry and business type
  • Current technology infrastructure
  • Budget and timeline information
  • Project requirements and specifications
Communication Information:
  • Messages and inquiries submitted through contact forms
  • Email communications and conversations
  • Discovery call notes and transcripts
  • Feedback and testimonials
Payment Information:
  • Billing address and payment details
  • Invoice records and transaction history
  • Banking information (securely processed through third-party payment processors)
3.2 Information Collected Automatically
Website Usage Data:
  • IP address and location data
  • Browser type and operating system
  • Pages visited and time spent on each page
  • Referral source and exit pages
  • Device type and screen resolution
Cookies & Tracking Technologies:
  • Session cookies (for website functionality)
  • Persistent cookies (to remember preferences)
  • Web beacons and pixels (to track engagement)
  • Analytics tools (Google Analytics, heatmaps)
Engagement Data:
  • Downloads and resource access
  • Form submissions and interactions
  • Video viewing and content engagement
  • Newsletter subscriptions
3.3 Information from Third Parties
  • Business Partners: Information shared during partnership discussions
  • Referral Sources: Data provided by those who refer you to us
  • Public Sources: Information from public databases or business listings
  • Social Media: If you interact with our social media accounts
  • Client References: Data from companies that recommend us
3.4 Sensitive Data
We do NOT intentionally collect sensitive personal information such as:
  • Racial or ethnic origin
  • Political opinions
  • Religious or philosophical beliefs
  • Trade union membership
  • Genetic data or biometric data
  • Health or sex life information
If you inadvertently provide such information, we will delete it immediately upon request.
4. HOW WE USE YOUR INFORMATION
4.1 Service Delivery
  • Providing AI solutions, consulting, and professional services
  • Responding to inquiries and support requests
  • Developing custom solutions tailored to your needs
  • Delivering project updates and progress reports
  • Processing payments and managing billing
4.2 Communication
  • Sending service-related updates and notifications
  • Responding to your questions and concerns
  • Providing technical support and assistance
  • Scheduling discovery calls and meetings
  • Following up on service inquiries
4.3 Marketing & Business Development
  • Sending newsletters about AI trends and industry insights
  • Promoting new services and special offers
  • Inviting you to webinars, events, or workshops
  • Sharing case studies and success stories (with anonymization)
  • Providing thought leadership content
4.4 Website Improvement
  • Analyzing user behavior to improve website functionality
  • Conducting A/B testing and optimization
  • Identifying and fixing technical issues
  • Personalizing your browsing experience
  • Understanding which content is most valuable
4.5 Legal & Compliance
  • Fulfilling legal and regulatory obligations
  • Establishing, exercising, or defending legal claims
  • Protecting against fraud and security threats
  • Complying with law enforcement requests
  • Maintaining audit trails and compliance records
4.6 Analytics & Insights
  • Aggregating data to understand market trends
  • Creating anonymized reports on service usage
  • Benchmarking performance metrics
  • Conducting research and analytics
  • Improving our AI models and solutions
4.7 Legitimate Business Interests
  • Enhancing customer relationships and satisfaction
  • Developing new products and services
  • Preventing fraud and unauthorized access
  • Protecting our business and intellectual property
  • Ensuring network and information security
5. LEGAL BASIS FOR PROCESSING (GDPR)
Under GDPR, we process your data based on:
  • Consent: You have explicitly consented to data processing
  • Contract: Processing is necessary to provide services you've requested
  • Legal Obligation: We are required to process data by law
  • Vital Interests: Processing is necessary to protect your vital interests
  • Public Task: Processing is necessary for a public task
  • Legitimate Interests: We have legitimate business interests that are not overridden by your privacy rights
6. DATA SHARING & DISCLOSURE
6.1 We DO NOT Sell Your Data
Kaanha Tech does NOT sell, rent, lease, or trade your personal information to third parties for marketing purposes.
6.2 We May Share Your Data With
Service Providers:
  • Cloud hosting providers (AWS, Azure, Google Cloud)
  • Payment processors and financial institutions
  • Email service providers and CRM systems
  • Analytics platforms and tools
  • IT support and security vendors
Legal Requirements:
  • Law enforcement agencies (with valid legal process)
  • Government agencies and regulators
  • Courts and judicial proceedings
  • Tax authorities
  • Data protection authorities
Business Transfers:
  • In case of merger, acquisition, or sale of assets
  • Successor organizations (with appropriate data protection agreements)
Your Consent:
  • Partners or vendors you specifically authorize
  • References you provide permission for
  • Third parties for purposes you explicitly agree to
6.3 Data Processors & Agreements
All third-party service providers are bound by Data Processing Agreements (DPAs) requiring:
  • Confidentiality and security obligations
  • Restricted use of data solely for contracted services
  • Compliance with GDPR, CCPA, and other regulations
  • Notification of data breaches
  • Assistance with data subject rights
7. DATA RETENTION
7.1 How Long We Keep Your Data
7.2 Deletion Upon Request
You may request deletion of your data at any time. Upon project completion or termination, we securely delete or anonymize your information unless:
  • Legal or regulatory requirements mandate retention
  • Disputes or claims may arise
  • Professional indemnity insurance requirements
  • Tax or accounting obligations
8. YOUR RIGHTS & CHOICES
8.1 Rights Under GDPR (EU/EEA Residents)
Right to Access:
  • Request what personal data we hold about you
  • Receive a copy of your data in a portable format
  • Response timeframe: 30 days (extendable to 90 days)
Right to Rectification:
  • Correct inaccurate or incomplete personal data
  • Request we update outdated information
Right to Erasure ("Right to be Forgotten"):
  • Request deletion of your personal data
  • Exceptions: Legal obligations, legitimate interests, public records
  • Response timeframe: 30 days
Right to Restrict Processing:
  • Request we limit how we use your data
  • We continue storing but limit active processing
  • Useful if data accuracy is disputed or processing is unlawful
Right to Data Portability:
  • Request your data in a structured, portable format
  • Transfer data to another service provider
  • Response timeframe: 30 days
Right to Object:
  • Opt-out of marketing communications anytime
  • Object to processing based on legitimate interests
  • Object to automated decision-making/profiling
Rights Related to Automated Decision-Making:
  • Transparency about automated decisions
  • Right to human review of automated decisions
  • Opt-out of certain automated processing
Right to Lodge a Complaint:
  • File a complaint with your local data protection authority
  • No retaliation for exercising privacy rights
8.2 Rights Under CCPA (California Residents)
Right to Know:
  • What personal information is collected and used
  • Categories and purposes of processing
Right to Delete:
  • Request deletion of collected personal information
  • Exception: Information required for legitimate business purposes
Right to Opt-Out:
  • Opt-out of sale or sharing of personal information
  • Opt-out of targeted advertising and profiling
Right to Correction:
  • Correct inaccurate personal information
Right to Non-Discrimination:
  • No discriminatory treatment for exercising privacy rights
  • No denial of goods/services or price increases for privacy requests
8.3 Rights Under Other Regulations
We comply with privacy laws in all jurisdictions where we operate, including:
  • Australian Privacy Principles (APPs)
  • Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
  • Data Protection Acts - Other jurisdictions
8.4 How to Exercise Your Rights
To exercise any privacy right:
  1. Submit a Request:
  • Phone: +61 (03)
  1. Verification:
  • We may request identification verification
  • We may ask clarifying questions
  • We respond within 30-45 days
  1. No Cost:
  • First three requests per year are free
  • Subsequent requests may incur administrative fees
9. DATA SECURITY
9.1 Security Measures
Kaanha Tech implements comprehensive security practices:
Technical Controls:
  • AES-256 encryption for data at rest
  • TLS/SSL encryption for data in transit
  • Secure password hashing (bcrypt/Argon2)
  • Multi-factor authentication (MFA)
  • Firewalls and intrusion detection systems
  • Regular security updates and patching
  • Penetration testing and vulnerability assessments
Administrative Controls:
  • Limited access to personal data (need-to-know basis)
  • Employee privacy and security training
  • Background checks for staff
  • Confidentiality agreements
  • Access logs and audit trails
Physical Controls:
  • Secure data centers with restricted access
  • Surveillance and monitoring
  • Environmental controls (fire suppression, climate control)
  • Secure disposal procedures
9.2 Data Breach Notification
In the event of a data breach:
  • We notify affected individuals within 72 hours (GDPR requirement)
  • We provide details about the breach and remediation steps
  • We notify relevant authorities and regulators
  • We cooperate with law enforcement investigations
10. INTERNATIONAL DATA TRANSFERS
10.1 Cross-Border Transfers
Kaanha Tech operates globally and may transfer your data internationally to:
  • Service providers in different jurisdictions
  • Team members and offices in multiple countries
  • Cloud servers in different regions
10.2 Adequacy Decisions & Safeguards
When transferring data outside the EEA/EU:
  • We rely on adequacy decisions (if applicable)
  • We use Standard Contractual Clauses (SCCs)
  • We implement Binding Corporate Rules (BCRs)
  • We obtain appropriate legal mechanisms and protections
10.3 Recipient Countries
We ensure that recipient countries or entities maintain adequate data protection standards equivalent to GDPR, CCPA, or applicable laws.
11. COOKIES & TRACKING TECHNOLOGIES
11.1 Cookie Types
Essential Cookies:
  • Necessary for website functionality
  • Session management and login
  • Security and fraud prevention
  • Cannot be disabled
Preference Cookies:
  • Remember your preferences and settings
  • Language and display preferences
  • Customization choices
Analytics Cookies:
  • Track website usage and behavior
  • Measure campaign effectiveness
  • Understand user journey
  • Powered by Google Analytics
Marketing Cookies:
  • Enable targeted advertising
  • Retargeting across platforms
  • Social media integration
  • Third-party advertising networks
11.2 Cookie Consent
  • We obtain explicit consent for non-essential cookies
  • You can manage cookie preferences anytime
  • Cookie consent banner on first visit
  • Cookie preference center for granular control
11.3 Disabling Cookies
You can disable cookies through:
  • Browser settings
  • Do Not Track (DNT) signals
  • Cookie management tools
  • Opting out at our preference center
12. THIRD-PARTY LINKS & INTEGRATIONS
12.1 External Links
Our website may contain links to third-party websites. We are NOT responsible for:
  • Their privacy practices
  • Data collected by third parties
  • Content and policies
Please review their privacy policies before providing personal information.
12.2 Third-Party Tools & Integrations
We use third-party services including:
Note: Each third party has their own privacy policy. We recommend reviewing them.
13. CHILDREN'S PRIVACY
Kaanha Tech services are intended for business professionals and are NOT directed to children under 13 years old.
13.1 Children Under 13
We do NOT knowingly collect information from children under 13. If we discover such data:
  • We delete it immediately
  • We notify parents/guardians
  • We comply with COPPA (Children's Online Privacy Protection Act)
13.2 Children 13-18
For individuals 13-18 years old:
  • Parental consent may be required
  • Limited data collection for service delivery
  • Enhanced privacy protections
  • Right to request data deletion
14. CALIFORNIA & AUSTRALIA SPECIFIC PROVISIONS
14.1 California Residents (CCPA/CPRA)
Consumer Notices:
  • We provide this notice before or at collection
  • Privacy rights clearly disclosed
  • Contact information for privacy inquiries
  • Non-retaliation for exercising rights
Information Sales Disclosure:
  • We disclose if/when we sell personal information
  • We provide opt-out mechanisms
  • We honor opt-out signals
Sensitive Personal Information:
  • Enhanced protections for sensitive data
  • Limited use purposes
  • Special consent requirements
14.2 Australian Residents (APPs)
Notifiable Data Breaches:
  • We notify about data breaches affecting you
  • Information about nature, response, and contact details
Australian Privacy Principles Compliance:
  • Open and transparent management of personal information
  • Collection limitation and purpose specification
  • Data quality, accuracy, and correction rights
  • Information use and disclosure restrictions
  • Data security and retention obligations
  • Access and amendment rights
  • Unique identifiers and anonymity options
  • Transborder data flows
  • Sensitive information handling
  • Openness about APPs management
15. SPECIAL CONSIDERATIONS
15.1 B2B Data
For business-to-business contacts:
  • We may use business contact information for marketing
  • Company information from public sources
  • Professional titles and business email addresses
15.2 Employee & Contractor Data
If you are an employee or contractor:
  • We process your data for employment purposes
  • Separate employment privacy notices apply
  • Your employer's privacy policies may apply
15.3 Client Project Data
During projects:
  • We access your data solely for project delivery
  • We maintain confidentiality and security
  • Data is not used for other purposes without consent
  • Confidentiality survives project completion
16. MARKETING & OPT-OUT
16.1 Marketing Communications
We may send you:
  • Newsletters about AI trends and industry insights
  • Promotional offers and updates
  • Webinar and event invitations
  • Case studies and best practices
  • Product announcements
16.2 Opting Out
Unsubscribe Options:
  • Click "Unsubscribe" link in any email
  • Use email preferences center
  • Contact us directly
  • Reply to email with "UNSUBSCRIBE"
Processing Timeframe:
  • Requests processed within 10 business days
  • You'll be removed from all marketing lists
  • We maintain suppression lists to prevent re-contact
16.3 Transactional Messages
Even if unsubscribed, we may send:
  • Service-related notifications
  • Account/billing information
  • Important security updates
  • Legal notices and policy changes
17. POLICY UPDATES & MODIFICATIONS
17.1 Changes to Privacy Policy
Kaanha Tech may update this Privacy Policy:
  • To reflect legal changes
  • To improve transparency
  • To add new services
  • To enhance privacy protections
17.2 Notification of Changes
For Major Changes:
  • We notify you via email
  • We provide prominent notice on our website
  • We require new consent (if applicable)
  • Change effective date: 30 days after notice
For Minor Changes:
  • We update the "Last Updated" date
  • Changes effective immediately
18. DATA PROTECTION IMPACT ASSESSMENT
18.1 High-Risk Processing
For processing likely to result in high risk:
  • We conduct Data Protection Impact Assessments (DPIAs)
  • We consult with data protection authorities (if required)
  • We implement additional safeguards
  • We document risk mitigation measures
19. CONTACT & PRIVACY INQUIRIES
19.1 Privacy Officer
Kaanha Tech Privacy Officer:
  • Phone: 45 639 021 944
  • Mailing Address: [Your Address]
19.2 Data Subject Requests
To exercise privacy rights or submit inquiries:
  1. Phone: 45 639 021 944
  1. Mail: Kaanha Tech Privacy Department, [Address]
Response Timeframe: 30-45 days (may be extended for complex requests)
19.3 Complaints & Escalation
If you're not satisfied with our response:
  • EU/EEA: File complaint with your local data protection authority
  • California: File complaint with California Attorney General
  • Australia: Contact the Office of the Australian Information Commissioner (OAIC)
20. RELATIONSHIP TO OTHER POLICIES
This Privacy Policy works with:
  • Disclaimer: Our service limitations and liability
  • Terms of Service: General terms of using our services
  • AI Ethics Statement: Responsible AI principles
  • Data Processing Agreement: B2B data handling terms
In case of conflict, this Privacy Policy governs data privacy matters.
21. DEFINITIONS
Personal Data: Any information relating to an identified or identifiable natural person
Processing: Any operation performed on data (collection, storage, use, deletion)
Data Subject: The individual to whom personal data relates
Data Controller: Entity determining how/why personal data is processed
Data Processor: Entity processing personal data on behalf of controller
Consent: Freely given, specific, informed, and unambiguous indication of agreement
Data Breach: Breach of security leading to accidental or unlawful destruction, loss, or access of personal data
22. ACKNOWLEDGMENT & ACCEPTANCE
By using Kaanha Tech's services or website, you acknowledge:
  • You have read this Privacy Policy
  • You understand our data practices
  • You consent to data processing as described
  • You understand your privacy rights
  • You agree to this policy's terms
If you do not agree, please do not use our services.
© 2025 White Lions Group Pty Ltd. All Rights Reserved.
Kaanha Tech - Transform Challenges into Wisdom
Last Updated: November 2025
Effective Date: November 2025
APPENDIX A: ADDITIONAL RESOURCES
For questions or concerns about this Privacy Policy, please contact our Privacy Officer immediately.
Stay Updated
Subscribe to newsletter for AI insights, project updates, and industry trends delivered monthly.
Kaanha Tech
© 2025 White Lions Group Pty Ltd. All Rights Reserved.
Kaanha Tech - Future-Ready & Empowering Your Business with AI Innovation