Privacy Policy
Last updated
We collect only what we need to provide our services. We don't sell your data and we don't spam. We store it securely, and you can ask to see, correct or delete it at any time. This policy follows the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
1. Who we are
Amionyx (“we”, “us” or “our”) is a digital marketing agency and software company based in Indore, Madhya Pradesh, India. Our website is amionyx.com. We act as a Data Fiduciary under the DPDP Act, 2023 for personal data collected through our website and our work with clients.
This policy explains what personal data we collect, why, how we use it, who we share it with, how we protect it and what your rights are.
2. Personal data we collect
| Context | Data collected | Purpose | Legal basis (DPDP) |
|---|---|---|---|
| Contact and enquiry forms (Contact, Start a project, Hire talent) | Name, email, phone, company, project details | To reply to your enquiry and provide our services | Consent / legitimate use |
| Job applications (Careers) | Name, email, phone, experience, portfolio and CV links, cover note | To assess your application and contact you about it | Consent |
| Website use | IP address, browser and device type, pages visited, referring URL | To understand how the site is used and improve it | Legitimate use |
| Client work | Business name, billing details, project communications, access you give us | To deliver the contracted services | Contract |
3. How we use your data
- To reply to enquiries, proposals and service requests
- To deliver the services you have contracted us for
- To send project updates, invoices and messages related to your engagement
- To assess job applications and contact candidates
- To improve our website and services
- To meet our legal obligations and protect our rights and the rights of others
We don’t use your data for automated profiling or unsolicited marketing, and we never sell it.
4. Legal basis for processing (DPDP Act, 2023)
- Consent: when you submit a form on our website, you consent to us using the information to respond to you. You can withdraw consent at any time by emailing us.
- Legitimate use: processing needed to provide services you asked for, meet a contract or comply with the law.
- Legal obligation: where Indian law requires us to keep records, for example for GST.
5. Sharing and third parties
We don’t sell, rent or trade personal data. We may share it with:
- Service providers such as email, form handling, cloud hosting and payment providers, only as far as needed to run our services and under confidentiality obligations
- Talent placed with you: if you hire talent through us, limited contact details may be shared with them for onboarding
- Authorities, where a court order, government authority or Indian law requires it
- Professional advisers such as lawyers, accountants and auditors, under professional confidentiality
6. Third-party services we use
- Microsoft 365: what you submit through our website forms is emailed to our inbox, which is hosted by Microsoft 365. See Microsoft’s privacy statement.
- Google Analytics 4: helps us understand how visitors use the site. It sets analytics cookies and collects the device and usage details described above. See Google’s privacy policy.
- Meta Pixel: measures the performance of our advertising and lets us show relevant ads to people who have visited our site. It records page views and device details and sets advertising cookies. See Meta’s privacy policy; you can control how Meta uses this data in your Facebook ad preferences.
- Hosting: the website is served from a content delivery network, which processes your IP address to deliver pages.
Our fonts are hosted on our own site, so loading a page doesn’t send your details to a font provider.
7. Cookies
- Essential: needed for the site to work. They can’t be switched off.
- Analytics: set by Google Analytics to tell us how visitors use the site.
- Advertising: set by the Meta Pixel to measure our advertising and show relevant ads.
You can block or delete cookies in your browser settings, or use your browser’s tracking protection. Some parts of the site may not work as well if you do.
8. How long we keep data
- Enquiries: up to 12 months from submission or our last conversation
- Job applications: up to 12 months from the date of application
- Client and project data: for the engagement plus 5 years, as Indian law requires for legal and accounting records
- Website usage data: anonymised and kept for up to 12 months
After that, data is securely deleted or anonymised.
9. Security
We use appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction, including:
- HTTPS encryption for all data in transit
- Access limited to the people who need it
- Regular reviews of our systems and practices
- Confidentiality obligations for everyone on our team who handles personal data
10. Your rights under the DPDP Act, 2023
As a Data Principal, you have the right to:
- Access a summary of the personal data we hold about you and how it’s processed
- Correction and erasure of inaccurate data, or data that’s no longer needed, subject to legal retention obligations
- Grievance redressal through our grievance officer, who will respond within 30 days
- Nominate someone to exercise your rights on your behalf in the event of death or incapacity
- Withdraw consent at any time, without affecting processing that happened before
To use any of these rights, email hello@amionyx.com. We’ll respond within 30 days.
11. Children’s privacy
Our services are not directed at anyone under 18, and we don’t knowingly collect their personal data. If we learn that we have, we’ll delete it promptly. Under the DPDP Act, processing a child’s data requires verifiable parental consent.
12. Transfers outside India
Your data may be processed or stored on servers outside India, for example by our email, form or hosting providers. When that happens, we make sure appropriate safeguards are in place, in line with Indian law and the DPDP Act, 2023.
13. Grievance officer
Under the Information Technology Act, 2000 and the DPDP Act, 2023, you can contact our grievance officer at:
Amionyx, Indore, Madhya Pradesh, India Email: hello@amionyx.com Response time: within 30 days of receiving your grievance
14. Changes to this policy
We may update this policy to reflect changes in our practices, technology or the law. When we make a material change, we’ll update the date at the top of this page. Continuing to use our services after a change means you accept the revised policy.
15. Contact us
For questions or requests about this policy or your personal data, email hello@amionyx.com. Our Terms of Service set out the rest of the legal framework for using our services.