Draft — pending review by qualified legal counsel before this platform processes real client/payment data. Last updated 2026-07-13.
Privacy Policy
Avalon Incorporation ("Avalon," "we," "us") is a B2B digital-services agency, founded in 2007, headquartered at 202 East Lake Drive, Goldsboro, NC, USA, operating across the USA, Bangladesh, India, and the UK. Avalon Incorporation is a sister concern of Avalon Global Solutions LLC (USA), alongside Avalon Hosting Services Ltd. and Avalon Tech Bangladesh. This policy explains what personal data we collect through this platform, why, and your rights over it.
What we collect and why (lawful basis)
| Data | Purpose | Lawful basis |
|---|---|---|
| Account details, order/service requirements, payment records | Delivering the service you ordered, billing, support | Contract |
| Login events, IP address, device/user-agent | Fraud prevention, account security, abuse detection | Legitimate interest |
| Analytics cookies (GTM/GA4/Clarity), affiliate-referral cookie | Understanding site usage; affiliate attribution | Consent |
Your rights
Under UK/EU GDPR you can request access, rectification, erasure, portability, restriction, or object to processing of your personal data. Requests are handled by our team and confirmed or fulfilled within one month (extendable to three months for complex requests, per GDPR Article 12(3)). Contact us using the details on our contact page to submit a request.
Who we share data with
See our Sub-processors page for the current, always-current list of third parties your data may flow to.
Data retention
Account and order records are retained for as long as your account is active plus a reasonable period for tax/accounting requirements. Platform activity logs are retained for up to 18 months before automatic archival. Password-reset and invitation tokens are short-lived and deleted or invalidated after use or expiry.
Security incidents
In the event of a data breach affecting your personal data, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware, in line with GDPR Article 33.
Cookies
See our Cookie Policy for full detail on the categories of cookies we use and how to manage your preferences.