Privacy Policy

Last updated: 30 July 2026

1. Who we are

Anviam Solutions ("Anviam", "we", "us") is a software development company with its principal delivery centre at Quark Atrium, A-45, Industrial Area Phase VIII-B, Mohali, Punjab 160071, India, and further offices in Bucktown, Pennsylvania, United States and at 8 Curzon Street, Saltney, Chester CH4 8BP, United Kingdom.

This policy covers personal information we handle as a data controller: enquiries through this website, recruitment applications, and our own marketing communications. Where we process personal data on behalf of a client as part of a development or managed-services engagement, we act as a data processor under that client's instructions and the terms of the relevant data processing agreement, and the client's own privacy notice governs that processing.

For any privacy question or request, contact contact@anviam.com.

2. Information we collect

2.1 Information you give us

• Enquiry and consultation forms: name, email address, telephone number, company name and the content of your message.
• Recruitment applications: name, contact details, curriculum vitae, employment and education history, and any additional information you choose to submit.
• Email and telephone correspondence: the content of communications you send us and records of calls where you have been informed of recording.

2.2 Information collected automatically

• Technical data: IP address, browser type and version, device type, operating system and screen size.
• Usage data: pages visited, time on page, referring URL and navigation paths, collected through analytics.
• Cookies and similar technologies: see section 7.

2.3 Information we do not seek

We do not ask for special category data (such as health, religious or biometric information) through this website, and we ask that you do not include it in enquiry forms. We do not knowingly collect information from children under 16.

3. How we use your information

• To respond to your enquiry, arrange a consultation and provide the written summary that follows it.
• To prepare proposals, scopes and estimates, and to administer a contract once agreed.
• To assess recruitment applications and manage the hiring process.
• To send marketing communications where you have consented or where we have a legitimate interest and you have not objected.
• To operate, secure and improve this website, including diagnosing faults and understanding which content is useful.
• To comply with legal, accounting and regulatory obligations.

We do not sell personal information, and we do not use enquiry or recruitment data to train machine learning models.

4. Legal bases for processing

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Contract: to take steps at your request before entering a contract, and to perform a contract once in place.
• Legitimate interests: to respond to business enquiries, to secure and improve our website, and to send relevant business-to-business marketing, balanced against your rights.
• Consent: for non-essential cookies and for marketing where consent is required. You may withdraw consent at any time.
• Legal obligation: to meet tax, accounting and other statutory requirements.

5. Sharing your information

We share personal information only where necessary, and under contract:

• Service providers: hosting, email delivery, analytics, customer relationship management and recruitment tooling, acting as processors on our instructions.
• Professional advisers: legal, accounting and audit advisers where required.
• Authorities: where disclosure is required by law or to protect our legal rights.
• Corporate transactions: in connection with a merger, acquisition or asset transfer, subject to equivalent protections.

We do not share your information with third parties for their own marketing purposes.

6. International transfers

We operate in India, the United States and the United Kingdom, so information may be transferred between these locations. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards, ordinarily the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, together with additional technical and organisational measures where required. Details of the safeguards applying to a specific transfer are available on request.

7. Cookies and analytics

This website uses a small number of cookies and similar technologies:

• Strictly necessary: required for the site to function and to protect forms against automated abuse. These cannot be disabled.
• Analytics: used to understand aggregate usage so we can improve content and performance.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent forms from working. This site also loads fonts, icon and animation libraries from third-party content delivery networks, which necessarily receive your IP address in order to serve those files.

8. How long we keep information

• Enquiries that do not proceed: up to 24 months from last contact.
• Client contract and project records: for the duration of the engagement and up to 7 years afterwards, to meet contractual, tax and audit requirements.
• Recruitment applications: up to 12 months from the decision, unless you ask us to keep them longer for future roles.
• Marketing contact records: until you unsubscribe or object, and for a short period afterwards to honour that suppression.
• Analytics data: in aggregated or pseudonymised form, in line with the retention settings of the analytics platform.

9. Security

Anviam maintains an information security management system certified to ISO/IEC 27001:2013, and our delivery process is appraised at CMMI Level 3. Controls include role-based access on a least-privilege basis, multi-factor authentication on administrative accounts, encryption of data in transit and at rest, endpoint encryption and management, background screening of personnel, mandatory security awareness training, documented incident response, and periodic internal and external audit. No system can be guaranteed absolutely secure, and we will notify you and any relevant regulator of a personal data breach where the law requires it.

10. Your rights

Subject to the law applying to you, you may have the right to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete information where there is no continuing lawful reason to retain it.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Request restriction of processing in certain circumstances.
• Request portability of information you provided to us, in a machine-readable format.
• Withdraw consent where processing relies on consent.

To exercise any of these, email contact@anviam.com. We will respond within one month, and will tell you if we need longer or need to verify your identity first. If you are in the UK you may complain to the Information Commissioner's Office; if you are in the EEA, to your local supervisory authority. We would ask you to raise the matter with us first so we can try to resolve it.

11. Data processed on behalf of clients

When we build or operate systems for a client, we may process personal data belonging to that client's users, employees or patients. In those engagements the client is the controller and Anviam is the processor. We act only on documented instructions, restrict access to named personnel, apply the security controls described in section 9, do not use the data for any purpose of our own including model training, engage sub-processors only with the client's agreement, and return or delete the data at the end of the engagement. Where the engagement involves protected health information under HIPAA, we enter a business associate agreement before any access is granted.

12. Third-party links

This website links to third-party sites, including our profiles on social platforms and review directories, and to our blog. Those sites have their own privacy practices and we are not responsible for them. Please review their notices before providing personal information.

13. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The date at the top shows when it was last revised. Material changes will be highlighted on this page, and where the change affects processing based on consent we will seek fresh consent.

14. Contact us

For any question, request or complaint about privacy: