1. Overview
Anvaya Consulting respects your privacy. This policy explains what personal information we collect through our website, how we use it, and the rights available to you under the General Data Protection Regulation (GDPR) and California privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
Last updated: June 24, 2026.
2. What information we collect
We collect personal information only when you choose to contact us through the website's contact form. This currently includes:
- Identifiers such as your name and email address
- Your company or organization name, if you provide it
- The content of your message or inquiry
The contact form uses a mailto: link, which opens your email client. The website itself does not store submissions on our servers. Information is transmitted through your own email provider and ours.
We do not use account systems, user logins, marketing databases, or advertising pixels on this site.
3. How we use your information
We use the information you provide solely to:
- Respond to your inquiry
- Schedule or follow up on a consultation
- Keep a record of our business correspondence
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Cookies and similar technologies
We do not set first-party analytics, advertising, or functional cookies on this site. We also do not currently use web beacons, pixels, or similar trackers.
The site loads display fonts from Google Fonts. When a page loads, your browser may connect to Google Fonts servers, and Google may log standard connection data such as your IP address. We do not control that data. If you prefer, you can use browser settings or extensions to block third-party font requests.
If we add cookies or analytics in the future, we will update this policy and, where required by law, obtain consent before placing non-essential cookies.
5. Legal basis for processing (GDPR)
For visitors in the European Economic Area, United Kingdom, and other regions where GDPR applies, we process personal information on the following legal bases:
- Consent: when you voluntarily submit information through the contact form.
- Legitimate interests: to respond to your inquiry and manage our business relationship, balanced against your privacy rights.
- Legal obligation: where we are required to retain records by applicable law.
6. Your privacy rights
GDPR rights
Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal information; to receive a portable copy; to object to processing; and to lodge a complaint with your local data protection supervisory authority.
California privacy rights
California residents may have the right to know what categories of personal information we collect, to request deletion or correction of their personal information, to opt out of the sale or sharing of personal information, and to receive equal service if they exercise these rights.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
Categories of personal information collected in the last 12 months: Identifiers (such as name and email) and commercial information (the content of your inquiry). We collect these directly from you.
7. How long we keep your information
We retain personal information only as long as necessary to respond to your inquiry and maintain our business records. Because the contact form uses email, retention depends on our email and records-management practices. If you ask us to delete your information, we will do so unless we are legally required to keep it.
8. International data transfers
Anvaya Consulting has offices in the United States, the United Kingdom, and India. If you contact us from outside those regions, your information may be processed or stored in any of these locations. We take steps to protect your information in accordance with this policy and applicable law.
9. Security
We use reasonable organizational and technical measures to protect the personal information in our control. No method of transmission over the internet or email is completely secure, however, and we cannot guarantee absolute security.
10. Children's privacy
Our website is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have inadvertently received information from a child, please contact us so we can delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
12. Contact us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
