Legal
Privacy Policy
Last updated: 13 April 2026 · DPDP Act 2023 compliant
Summary: We collect only what we need to provide our services. We do not sell your data. We do not spam. We store your data securely. You have the right to access, correct, and delete your data. This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 of India.
1. Who We Are
Amionyx (“we,” “us,” or “our”) is a digital agency operating in India. Our website is amionyx.com. We act as a Data Fiduciary under the DPDP Act, 2023 with respect to personal data collected through our website and service interactions.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, with whom we share it, how we protect it, and what your rights are.
2. Personal Data We Collect
We collect personal data in the following contexts:
| Context | Data Collected | Purpose | Legal Basis (DPDP) |
|---|---|---|---|
| Contact & Enquiry Forms (Hire Talent, Start a Project) | Full name, email address, phone number, project description, uploaded documents | To respond to your enquiry and provide service | Consent / Legitimate Purpose |
| Job Applications (Careers) | Full name, email, phone, experience, portfolio URL, cover note, resume/CV | To evaluate your application and contact you regarding employment | Consent |
| Website Usage | IP address, browser type, pages visited, referring URL | To understand how the site is used and improve performance | Legitimate Purpose |
| Service Delivery (Clients) | Business name, billing details, project communications, login credentials | To deliver the contracted services | Contract Performance |
3. How We Use Your Data
- To respond to your enquiries, proposals, and service requests
- To deliver the services you have contracted us for
- To send project updates, invoices, and communications directly related to your engagement
- To evaluate job applications and contact candidates
- To improve our website and service quality
- To comply with applicable laws and legal obligations
- To protect our rights and the rights of others
We do not use your data for automated profiling, unsolicited marketing, or sale to third parties.
4. Legal Basis for Processing (DPDP Act, 2023)
- Consent: When you submit a form on our website, you consent to us using your data to respond to your request. You may withdraw consent at any time by contacting us.
- Legitimate Purpose: Processing that is necessary for us to provide services you have requested, fulfil contractual obligations, or comply with legal requirements.
- Legal Obligation: Where we are required to process data to comply with Indian law (e.g., GST record-keeping, regulatory requirements).
5. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We may share data with:
- Service providers: Email delivery platforms, cloud storage, payment processors — only to the extent necessary to operate our services and under confidentiality obligations
- Talent placed with you: If you hire talent through us, limited contact information may be shared with the placed talent for onboarding purposes
- Legal authorities: Where required by a court order, government authority, or applicable Indian law
- Professional advisors: Lawyers, accountants, and auditors under professional confidentiality obligations
6. Third-Party Services We Use
- Our Email System (send.php): We use a self-hosted PHP script on our own server to process and forward form submissions to our email. Your form data stays on our server and is never shared with third-party form services.
- Google Fonts: We load fonts from Google’s CDN, which may collect your IP address. See Google’s Privacy Policy.
- We do not use Google Analytics, Facebook Pixel, or other advertising trackers on our website.
7. Cookies
Our website uses only essential functional cookies necessary for basic operation (such as session management). We do not use advertising cookies, tracking cookies, or third-party analytics cookies. You can disable cookies in your browser settings; however, this may affect the functionality of our website.
8. Data Retention
- Enquiry / contact form data: Retained for up to 12 months from the date of submission or last communication
- Job applications: Retained for up to 12 months from the date of application
- Client and project data: Retained for the duration of the engagement plus 5 years for legal and accounting purposes, as required under Indian law
- Website usage data: Anonymised and retained for up to 12 months
After the applicable retention period, data is securely deleted or anonymised.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include:
- HTTPS encryption for all data in transit
- Access controls limiting data access to authorized personnel only
- Regular security reviews of our systems and practices
- Confidentiality obligations for all team members handling personal data
10. Your Rights Under the DPDP Act, 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access: You may request a summary of the personal data we hold about you and how it is being processed.
- Right to Correction and Erasure: You may request that we correct inaccurate data or erase data that is no longer necessary, subject to legal retention obligations.
- Right to Grievance Redressal: You may raise a grievance with our Data Protection Officer. We will respond within 30 days.
- Right to Nominate: You may nominate a person to exercise your rights on your behalf in the event of your death or incapacity.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
11. Children’s Privacy
Our services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a minor, we will delete it promptly. Under the DPDP Act, 2023, processing of children’s data requires verifiable parental consent.
12. Cross-Border Data Transfers
Your data may be processed or stored on servers located outside India (for example, through our email or cloud service providers). Where we transfer data internationally, we ensure that the recipient country or organization provides an adequate level of data protection or that we have implemented appropriate safeguards in accordance with applicable Indian law and the DPDP Act, 2023.
13. Grievance Officer
In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023, the details of our Grievance Officer are:
Grievance & Data Protection Contact
Amionyx
Email: [email protected]
Response time: Within 30 days of receipt of grievance
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the revised policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
- Email: [email protected]
- Website: amionyx.com
Also see our Terms & Conditions for the full legal framework governing your use of our services.