Privacy Policy

Effective Date: 1 May 2026  |  Last Updated: 6 May 2026

This Privacy Policy describes how AVELIX PRIVATE LIMITED ("Avelix", "we", "us") collects, uses, stores, and discloses your personal information when you visit avelix.io or engage with our services.

This policy is published in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023.

1. Information we collect

We may collect:

  • Identifiers: name, email address, phone number, company name, designation
  • Communications: messages you send via contact forms or email
  • Usage data: IP address, browser type, pages visited, time spent (via cookies and analytics)
  • Business data: GSTIN, PAN, address (only if you engage us for paid services)

We do not knowingly collect personal data from children under 18.

2. Why we collect it (purposes)

  • To respond to enquiries and engagement requests
  • To provide and improve our consulting and advisory services
  • To send invoices and tax documents (where you've engaged us)
  • To send service-related communications
  • To comply with applicable laws (Companies Act, IT Act, GST, FEMA)
  • To analyse website traffic and improve user experience

3. Legal basis (DPDP Act 2023)

We process your personal data on the basis of:

  • Your consent (e.g., when you submit a contact form)
  • The need to perform a contract (e.g., when you engage Avelix)
  • Compliance with a legal obligation (e.g., GST records)
  • Our legitimate interests (e.g., website analytics)

4. How we share information

We do not sell or rent your personal data. We may share it with:

  • Service providers (e.g., email hosting, cloud storage) under confidentiality obligations
  • Legal authorities when required by law (court order, tax authority, etc.)
  • Banks and payment processors to process payments

We never share your data with marketing companies or unaffiliated third parties.

5. International transfers

Your data may be processed outside India if we use cloud-hosted services. We ensure equivalent protection through contractual safeguards.

6. Retention

  • Contact-form data: 3 years from last interaction
  • Engagement / contract data: 8 years from last interaction (per Companies Act and Income Tax Act)
  • Cookies and analytics: per cookie type (see Cookie Policy)

7. Your rights

Under the DPDP Act 2023, you have the right to:

  • Access the personal data we hold about you
  • Correct or update inaccurate data
  • Erase your personal data (subject to legal retention requirements)
  • Withdraw consent at any time
  • Nominate another person to exercise these rights on your behalf
  • Lodge a grievance with our Grievance Officer (see Grievance Redressal page)

To exercise any of these rights, email hello@avelix.io with the subject "Data Rights Request" and we will respond within 30 days.

8. Security

We use reasonable administrative, technical and physical safeguards (HTTPS, access controls, encrypted storage) to protect your data. No method is 100% secure; we cannot guarantee absolute security.

9. Cookies

See our Cookie Policy for details.

10. Changes to this policy

We may update this policy from time to time. The effective date at the top will reflect the latest revision. Material changes will be notified via the website.

11. Contact

For privacy questions, contact our Grievance Officer (see Grievance Redressal) or email hello@avelix.io.