GDPR Notice

1. About this notice

The Fast Bill is operated from India and is primarily intended for businesses operating in India. This notice provides the additional information required by the EU General Data Protection Regulation ("EU GDPR") and the UK GDPR for individuals located in the European Economic Area ("EEA") and the United Kingdom ("UK").

2. Who is responsible for your data

The data controller for personal data of our account holders is Leelija Web Solutions Private Limited, the operator of The Fast Bill, with its registered office at Taki Road, Bamunmura, Barasat, Kolkata - 700125, West Bengal, India.

For the personal data you upload about your own customers and suppliers, you are the controller and Fast Bill acts as your processor, processing that data only on your instructions to provide the Service.

3. Personal data we process

We process the categories of personal data described in our Privacy Policy, including:

• Account and identity data (name, email, phone, password).
• Business and tax data (business name, address, GSTIN, PAN).
• Content you create, and records about your own customers that you upload.
• Payment and subscription data (handled by a payment gateway once enabled).
• Device, usage, and cookie data.

Please see our Privacy Policy at thefastbill.com/privacy for full details of what we collect and why.

4. Legal bases for processing

Where the GDPR applies, we rely on the following legal bases under Article 6:

• Performance of a contract — to create and operate your account and provide the Service you signed up for.
• Legitimate interests — to secure, maintain, and improve the Service, and to understand how it is used (balanced against your rights and interests).
• Consent — for optional activities such as marketing communications and non-essential cookies; you can withdraw consent at any time.
• Legal obligation — to comply with laws that apply to us, including record-keeping requirements.

5. Processing on your behalf

When we act as a processor for the personal data you upload, we process it only on your documented instructions and in accordance with our Privacy Policy and these protections. We apply appropriate confidentiality and security measures, engage sub-processors only under written terms, and assist you, so far as reasonable, with your own obligations as a controller. A data processing agreement is available on request.

6. International data transfers

We are established in India, so personal data we collect is transferred to and stored in India. India is not currently the subject of an EU or UK adequacy decision. Where we receive personal data of individuals in the EEA or UK, we rely on appropriate safeguards for the transfer, such as the European Commission's Standard Contractual Clauses (and, for UK transfers, the UK International Data Transfer Addendum). You can request a copy of the safeguards we use by contacting us.

7. Your rights under the GDPR

If the GDPR applies to you, you have the right to:

• Access — obtain confirmation of, and a copy of, the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted where there is no overriding reason to keep it.
• Restriction — limit how we process your data in certain circumstances.
• Portability — receive certain data in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting prior processing.
• Automated decisions — not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
• Complain — lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).

8. Exercising your rights

To exercise any of these rights, email us at info@leelija.com. We will respond within one month, as required by the GDPR, though we may extend this where a request is complex and will tell you if so. We may need to verify your identity before acting. Exercising your rights is free unless a request is manifestly unfounded or excessive.

9. EU / UK representative

EU / UK representative Article 27 of the GDPR requires a representative in the EEA or UK only where a business offers its services to, or monitors, individuals located there. The Fast Bill is intended for businesses operating in India, and we do not offer the Service to, or monitor the behaviour of, individuals in the EEA or UK. We have therefore not appointed a representative. If this changes, we will appoint one and update this notice.

10. Data retention

We keep personal data only for as long as needed for the purposes described in our Privacy Policy, or as required by law, after which we delete or anonymise it. See the Data retention section of our Privacy Policy for details.

11. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular backups, as described in our Privacy Policy. In the event of a personal data breach that is likely to result in a risk to individuals, we will notify the relevant supervisory authority and affected individuals where the GDPR requires.

12. Changes to this notice

We may update this notice from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after an update means you accept the revised notice.

13. Contact us

For any data protection questions, or to exercise your rights, please contact us:

This notice supplements our Privacy Policy (thefastbill.com/privacy), which contains the full details of how we handle personal data.