Privacy Policy

We collect only what we need to provide our services. We don't sell your data and we don't spam. We store it securely, and you can ask to see, correct or delete it at any time. This policy follows the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, and explains the extra rights you have if you are in the EU, the UK or certain US states.

1. Who we are

Amionyx (“we”, “us” or “our”) is a digital marketing agency and software company based in Indore, Madhya Pradesh, India. Our website is amionyx.com. We act as a Data Fiduciary under the DPDP Act, 2023 for personal data collected through our website and our work with clients.

This policy explains what personal data we collect, why, how we use it, who we share it with, how we protect it and what your rights are.

2. Personal data we collect

Context	Data collected	Purpose	Legal basis (DPDP)
Contact and enquiry forms (Contact, Start a project, Hire talent)	Name, email, phone, company, project details and any files you attach	To reply to your enquiry and provide our services	Consent / legitimate use
Book a call	Name, WhatsApp number, email, chosen date and time, your time zone, requirement, any files you attach	To arrange and prepare for the call	Consent
Job applications (Careers)	Name, email, phone, experience, portfolio link, CV file, cover note	To assess your application and contact you about it	Consent
Website use	IP address, browser and device type, pages visited, referring URL	To understand how the site is used and improve it	Legitimate use
Client work	Business name, billing details, project communications, access you give us	To deliver the contracted services	Contract

3. How we use your data

To reply to enquiries, proposals and service requests
To deliver the services you have contracted us for
To send project updates, invoices and messages related to your engagement
To assess job applications and contact candidates
To improve our website and services
To meet our legal obligations and protect our rights and the rights of others

We don’t use your data for automated profiling or unsolicited marketing, and we never sell it.

4. Legal basis for processing (DPDP Act, 2023)

Consent: when you submit a form on our website, you consent to us using the information to respond to you. You can withdraw consent at any time by emailing us.
Legitimate use: processing needed to provide services you asked for, meet a contract or comply with the law.
Legal obligation: where Indian law requires us to keep records, for example for GST.

We don’t sell, rent or trade personal data. We may share it with:

Service providers such as email, form handling, cloud hosting and payment providers, only as far as needed to run our services and under confidentiality obligations
Talent placed with you: if you hire talent through us, limited contact details may be shared with them for onboarding
Authorities, where a court order, government authority or Indian law requires it
Professional advisers such as lawyers, accountants and auditors, under professional confidentiality

6. Third-party services we use

Microsoft 365: what you submit through our website forms is emailed to our inbox, which is hosted by Microsoft 365. See Microsoft’s privacy statement.
Google Analytics 4 (only with your consent): helps us understand how visitors use the site. It sets analytics cookies and collects the device and usage details described above. See Google’s privacy policy.
Meta Pixel (only with your consent): measures the performance of our advertising and lets us show relevant ads to people who have visited our site. It records page views and device details and sets advertising cookies. See Meta’s privacy policy; you can control how Meta uses this data in your Facebook ad preferences.
Cloudflare: hosts the website and processes your IP address to deliver pages and block abuse. Files you attach to a form (CVs, briefs, documents, images) are stored in a private Cloudflare R2 storage bucket. Only our team can open them, through links that expire; CVs are deleted after 12 months and other files after 90 days.
WhatsApp: if you give us a WhatsApp number or message us there, we may contact you through WhatsApp (Meta). See WhatsApp’s privacy policy.

Our fonts are hosted on our own site, so loading a page doesn’t send your details to a font provider.

7. Cookies

We use essential cookies only, unless you agree to more. Google Analytics and the Meta Pixel load only if you accept analytics or advertising cookies in the pop-up on your first visit, and you can change your choice any time from Cookie settings at the bottom of every page. The Cookie Policy lists each cookie, what it does and how long it lasts.

8. How long we keep data

Enquiries and call requests: up to 12 months from submission or our last conversation
Files attached to enquiries and call requests: 90 days, then deleted automatically
CVs sent with job applications: 12 months, then deleted automatically
Job applications: up to 12 months from the date of application
Client and project data: for the engagement plus 5 years, as Indian law requires for legal and accounting records
Website usage data: anonymised and kept for up to 12 months

After that, data is securely deleted or anonymised.

9. Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction, including:

HTTPS encryption for all data in transit
Access limited to the people who need it
Regular reviews of our systems and practices
Confidentiality obligations for everyone on our team who handles personal data

10. Your rights under the DPDP Act, 2023

As a Data Principal, you have the right to:

Access a summary of the personal data we hold about you and how it’s processed
Correction and erasure of inaccurate data, or data that’s no longer needed, subject to legal retention obligations
Grievance redressal through our grievance officer, who will respond within 30 days
Nominate someone to exercise your rights on your behalf in the event of death or incapacity
Withdraw consent at any time, without affecting processing that happened before

To use any of these rights, email hello@amionyx.com. We’ll respond within 30 days.

11. If you are in the EU, the UK or the US

EU and UK (GDPR and UK GDPR). Our legal bases are your consent (forms), our legitimate interests (running and improving the site, replying to business enquiries) and contract (client work). You also have the right to object to processing based on legitimate interests, to restrict processing, and to receive your data in a portable format. You can complain to your local data protection authority, for example the ICO in the UK, though we’d appreciate the chance to resolve it first.

United States. We don’t sell personal information or share it for cross-context behavioural advertising in exchange for money. The Meta Pixel is used to measure and show our own ads; you can opt out through your browser’s tracking protection or your Facebook ad preferences. Residents of California and other states with privacy laws can ask to know, correct or delete their personal information by emailing us; we won’t treat you differently for doing so.

12. Children’s privacy

Our services are not directed at anyone under 18, and we don’t knowingly collect their personal data. If we learn that we have, we’ll delete it promptly. Under the DPDP Act, processing a child’s data requires verifiable parental consent.

13. Transfers outside India

Your data may be processed or stored on servers outside India, for example by Microsoft (email), Cloudflare (hosting and file storage), Google and Meta. When that happens, we make sure appropriate safeguards are in place, in line with Indian law and the DPDP Act, 2023.

14. Grievance officer

Under the Information Technology Act, 2000 and the DPDP Act, 2023, you can contact our grievance officer at:

Grievance Officer, Amionyx, 201, D15, Shree Ji Valley, Indore, Madhya Pradesh, India Email: hello@amionyx.com (subject line “Grievance”) Response time: within 30 days of receiving your grievance

15. Changes to this policy

We may update this policy to reflect changes in our practices, technology or the law. When we make a material change, we’ll update the date at the top of this page. Continuing to use our services after a change means you accept the revised policy.

16. Contact us

For questions or requests about this policy or your personal data, email hello@amionyx.com. Our Terms of Service, Cookie Policy and Data Usage & AI Policy set out the rest; all our policies are listed on the Legal page.