PRIVACY POLICY

Last Updated: 13 October 2026

Anvis Digital Pvt. Ltd. (“Anvis Digital”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of individuals who visit or interact with our website, https://anvisdigital.com/ (the “Website”).

This Privacy Policy explains how we collect, process, use, store, protect and disclose personal data obtained through the Website.

This Privacy Policy is intended to be read in accordance with applicable Indian data protection and privacy laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), to the extent applicable and in force.

Under the DPDP framework, Anvis Digital acts as the Data Fiduciary in relation to personal data processed through this Website, and individuals whose personal data is processed are referred to as Data Principals.

1. About Anvis Digital

Legal Entity: Anvis Digital Pvt. Ltd.

Website: https://anvisdigital.com/

Email: info@anvisdigital.com

Phone: +91 022 4033 3333

Office Address:

#315 Parvati Industrial Estate,
New Sun Mill Compound, Lower Parel West,
Mumbai, Maharashtra – 400013, India.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through:

• Our Website;
• Contact and enquiry forms;
• Communications initiated through the Website;
• Website analytics and measurement technologies;
• Cookies and similar technologies; and
• Other interactions with the Website.

This Privacy Policy does not automatically apply to third-party websites, applications or services that may be linked from our Website.

3. Personal Data We Collect

We follow the principle of collecting personal data that is reasonably necessary for the purposes for which it is processed.

3.1 Information You Provide

When you submit an enquiry through our Website, we may collect:

• Name;
• Email address;
• Mobile/telephone number;
• Query or message; and
• Any other information that you voluntarily include in your enquiry.

We request that you do not provide sensitive, confidential or unnecessary personal information through the Website contact form.

3.2 Information Collected Through Website Technologies

When you visit our Website, certain technical and usage information may be processed through analytics, tag-management and similar technologies.

Depending on our configuration, this may include:

• Pages visited;
• Date and time of visits;
• Browser type;
• Device information;
• Approximate geographic information;
• Referral/source information;
• Website interaction information;
• Session and engagement information; and
• Technical information required for Website security and performance.

We do not intentionally configure our analytics systems to collect personal information such as your name, personal email address or mobile number submitted through our contact forms.

4. Purposes for Processing Personal Data

We may process personal data for the following purposes:

4.1 Responding to Enquiries

Information submitted through our contact forms may be used to:

• Respond to your enquiry;
• Contact you regarding your request;
• Understand your requirements;
• Provide information about our services;
• Prepare or discuss proposals where requested; and
• Follow up regarding an enquiry where reasonably necessary.

4.2 Website Operation and Security

We may process technical information to:

• Operate and maintain the Website;
• Maintain Website security;
• Detect and prevent misuse;
• Diagnose technical problems;
• Improve Website performance; and
• Protect our systems and users.

4.3 Analytics and Improvement

We use website analytics to understand:

• How visitors use our Website;
• Which pages are viewed;
• Website engagement;
• Website performance;
• Traffic sources; and
• General trends in Website usage.

This helps us improve our Website, content, services and user experience.

4.4 Legal and Regulatory Requirements

We may process or disclose personal data where necessary to:

• Comply with applicable law;
• Respond to lawful requests;
• Establish, exercise or defend legal rights;
• Prevent fraud or unlawful activity; or
• Protect the security, rights or property of Anvis Digital or others.

5. Lawful Basis and Consent

Where processing requires consent under applicable law, we will obtain consent through an appropriate mechanism.

Where consent is relied upon:

• Consent will be requested through a clear and understandable notice;
• The purpose of processing will be communicated;
• Consent will not be bundled with unrelated purposes where separate consent is appropriate;
• You may withdraw consent where applicable; and
• Withdrawal of consent will be made through a reasonably accessible mechanism.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

The DPDP Act provides Data Principals with rights relating to consent, including the ability to withdraw consent with ease comparable to giving consent.

6. Contact Form and Enquiry Data

When you submit information through our contact form, the information is processed for the purpose of responding to your enquiry and providing relevant information or services.

The information may be accessed by authorised personnel of Anvis Digital and authorised service providers supporting our Website or business operations.

We do not sell your contact-form information.

We do not use contact-form information for unrelated purposes without an appropriate lawful basis.

Where we wish to use contact information for direct marketing or another purpose requiring separate consent, we will provide an appropriate mechanism where required.

7. Google Analytics 4

We use Google Analytics 4 (“GA4”) to measure and understand Website traffic and user interactions.

GA4 may process information relating to:

• Website visits;
• Sessions;
• Pages viewed;
• Device and browser information;
• Approximate location;
• Traffic sources;
• Engagement and interaction data; and
• Other analytics information generated from Website usage.

Google Analytics uses first-party cookies and other technologies for measurement. Google states that Analytics customers can configure data collection and that customers must not send personally identifiable information such as email addresses or personal mobile numbers to Google Analytics.

Accordingly, Anvis Digital does not intentionally send contact-form fields such as your name, email address, mobile number or message content to Google Analytics.

8. Google Tag Manager and Google Tag

We may use Google Tag Manager (“GTM”) and/or Google Tag to manage and deploy tags and measurement technologies on our Website.

Google Tag Manager primarily functions as a tag-management system. The information processed through individual tags depends on the tags and configurations deployed through the system.

Google states that Google Tag Manager may collect aggregated information relating to tag firing, system stability, performance and installation quality, and that GTM does not collect or retain visitor information from customers’ properties in the manner described in Google’s Tag Manager privacy documentation.

Our use of Google Tag Manager and Google Tag is intended to support Website measurement, functionality, security and other configured Website technologies.

Where applicable, our Google tags are configured to respect the consent choices communicated through our consent-management mechanism. Google’s Consent Mode allows tags to adjust their behaviour according to the user’s consent choices.

9. Google Search Console

We may use Google Search Console to monitor the Website’s presence and performance in Google Search.

Search Console may provide us with information such as:

• Search queries;
• Search impressions;
• Search clicks;
• Search position;
• Indexed pages;
• Search performance;
• Technical search issues; and
• Other Website search-related information.

Search Console is primarily used for Website administration, technical monitoring and search-performance analysis.

We do not use Google Search Console to collect the information submitted by you through our contact forms.

10. Cookies and Similar Technologies

Our Website may use cookies and similar technologies for purposes including:

• Essential Website functionality;
• Security;
• Analytics;
• Performance measurement; and
• Managing or supporting Website tags.

The specific cookies used may vary depending on the Website’s configuration and technologies deployed.

For detailed information about cookies used on the Website, please refer to our Cookie Policy.

Where required, non-essential cookies and similar technologies will be subject to the applicable consent mechanism.

11. Data Sharing and Disclosure

We may share personal data with authorised third parties where necessary for legitimate Website or business operations and where permitted by applicable law.

These third parties may include service providers supporting:

• Website hosting;
• Website development and maintenance;
• Analytics;
• Tag management;
• Email and communications;
• Website security;
• Infrastructure and technical services; and
• Other services necessary to operate the Website.

Where a third party processes personal data on our behalf, we will take reasonable steps to ensure that appropriate contractual, technical and organisational safeguards are in place as applicable.

We may also disclose personal data where required or permitted by law, including to governmental, regulatory, judicial or law-enforcement authorities.

12. Data Processors

Where we appoint a third party to process personal data on our behalf, such party may act as a Data Processor under applicable law.

We seek to ensure that Data Processors:

• Process personal data only for authorised purposes;
• Follow appropriate security measures;
• Maintain confidentiality;
• Do not use personal data for unauthorised purposes; and
• Assist us in meeting applicable data protection obligations where required.

13. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, accounting or business requirements.

Contact-form information may be retained for a period necessary to:

• Respond to and manage the enquiry;
• Maintain relevant business records;
• Follow up on an ongoing business enquiry;
• Resolve disputes; or
• Comply with legal obligations.

Where personal data is no longer required for the relevant purpose and there is no legal or legitimate requirement to retain it, we will take reasonable steps to delete or anonymise it.

Analytics information may be retained according to the data-retention settings configured within our Google Analytics property. Google provides controls for configuring retention of user-level and event-level data.

14. Security Safeguards

We implement reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access;
• Unauthorised disclosure;
• Accidental or unlawful destruction;
• Loss;
• Alteration;
• Misuse; and
• Other unauthorised processing.

Depending on the nature of the processing, safeguards may include:

• Access controls;
• Authentication mechanisms;
• Secure transmission;
• System monitoring;
• Logging;
• Backup and recovery measures;
• Security updates;
• Access restrictions; and
• Appropriate contractual safeguards with service providers.

The DPDP Rules, 2025 prescribe security safeguards including measures relating to access controls, encryption/obfuscation/masking or tokenisation where appropriate, logging and monitoring, backups and contractual safeguards with Data Processors.

No electronic transmission or storage system can be guaranteed to be completely secure. However, we take reasonable steps appropriate to the nature of the personal data and processing involved.

15. Personal Data Breaches

In the event of a personal data breach, Anvis Digital will take reasonable and appropriate steps to:

• Assess and contain the breach;
• Investigate the incident;
• Take remedial measures;
• Notify relevant authorities where required; and
• Notify affected Data Principals where required by applicable law.

The DPDP Rules, 2025 prescribe specific requirements concerning notification of personal data breaches, including obligations relating to the Data Protection Board and affected Data Principals.

16. Your Rights as a Data Principal

Subject to applicable law and the relevant provisions in force, you may have rights including:

Right to Access Information

You may request information regarding the personal data being processed by us and information about the processing of such data, subject to applicable legal requirements.

Right to Correction and Updating

You may request correction, completion or updating of inaccurate or incomplete personal data.

Right to Erasure

You may request erasure of personal data where applicable, subject to legal and other permitted grounds for retention.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent.

Right to Grievance Redressal

You may raise a grievance regarding our processing of your personal data.

Right to Nominate

Where applicable under the DPDP framework, you may exercise the right to nominate another individual in accordance with the prescribed requirements.

17. How to Exercise Your Rights

To submit a privacy-related request, please contact:

Email: info@anvisdigital.com

Your request should provide sufficient information for us to understand and process your request.

We may take reasonable steps to verify your identity before processing a request to protect against unauthorised access to personal data.

We will process requests within the timelines and in accordance with the procedures prescribed under applicable law.

18. Grievance Redressal

If you have a concern or complaint regarding the processing of your personal data, you may contact us using the details below.

Grievance Contact: Anvis Digital Pvt. Ltd.

Email: info@anvisdigital.com

We will review and address grievances in accordance with applicable law and our internal grievance-handling procedures.

19. Children’s Personal Data

The Website is primarily intended for businesses, professionals and general audiences.

We do not knowingly seek to collect personal data from children through the Website for purposes that are prohibited under applicable law.

Where processing involves a child, we will comply with applicable requirements relating to children’s personal data, including applicable requirements concerning consent and restrictions on tracking, behavioural monitoring or targeted advertising.

20. International Processing

Some service providers used by the Website may process personal data through infrastructure located outside India.

Where personal data is transferred or processed outside India, Anvis Digital will take such measures as may be required under applicable Indian law and any applicable restrictions or requirements concerning cross-border transfers.

21. Third-Party Websites and Services

Our Website may contain links to third-party websites, platforms or services.

Third-party websites operate independently from Anvis Digital and may have their own privacy policies, cookie policies and terms.

We encourage you to review the privacy practices of any third-party website before providing personal data.

22. Data Principal Responsibilities

Under the DPDP framework, Data Principals also have certain responsibilities.

You are expected to:

• Provide authentic information when exercising rights;
• Not impersonate another person;
• Not suppress material information when providing information to us;
• Not register a false or misleading grievance; and
• Comply with applicable law when exercising your rights.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our Website;
• Changes in the personal data we process;
• Changes in technology;
• Changes in our service providers;
• Changes in applicable law; or
• Changes in our privacy practices.

The revised Privacy Policy will be published on this page with an updated “Last Updated” date.

24. Contact Us

If you have any questions regarding this Privacy Policy, our processing of personal data, or your rights as a Data Principal, please contact us:

Anvis Digital Pvt. Ltd.

Email: info@anvisdigital.com

Phone: +91 022 4033 3333

Address:

#315 Parvati Industrial Estate,
New Sun Mill Compound, Lower Parel West,
Mumbai, Maharashtra – 400013, India.