Legal

Privacy Policy

How Achivix collects, uses, shares and protects personal data, and the rights you have under Indian, EU, UK and US privacy laws.

Achivix (“Achivix”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal data that we process through our website, services, research activities, and business relationships.

This Privacy Policy explains what information we collect, how we collect and use it, when we share it, how we protect it, and the rights available to individuals under applicable data protection laws, including India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable rules, regulations and notifications issued under it, the EU/UK General Data Protection Regulation where applicable, and applicable US privacy laws.

Achivix provides B2B data research, prospect research, lead list building, CRM data enrichment and cleansing, executive search research, event attendee research, and related services. Because our services involve professional and business contact information, we take particular care to distinguish professional information from information that identifies an individual.

1. Who We Are

Achivix is a B2B data and research company based in India.

Registered address: 69, Mayur Vihar Phase III, Kondli, New Delhi, Delhi 110096, India

For privacy questions, requests or grievances, contact the Privacy & Grievance Contact, Achivix:

Email: privacy@achivix.com

For general business enquiries:

Email: contact@achivix.com

2. Information We Collect

Depending on how you interact with Achivix, we may process the following categories of information.

Information you provide directly

When you contact us, request a quotation, submit an enquiry, subscribe to communications, or engage our services, we may collect:

  • Name
  • Company name
  • Job title or designation
  • Business email address
  • Business telephone or mobile number
  • Company website
  • Services requested
  • Project requirements
  • Information contained in your enquiry
  • Communication history
  • Information required to establish or manage a business relationship

We do not intentionally request sensitive personal information through our standard website enquiry forms.

Information collected automatically

When you visit our website, certain technical information may be collected automatically, depending on your cookie and privacy settings. This may include:

  • IP address
  • Browser and device information
  • Operating system
  • Website pages visited
  • Referring website
  • Approximate location derived from technical information
  • Website interaction information
  • Cookie and similar technology information

Our hosting provider keeps standard server logs (IP address, date and time, page requested and browser type) to run and protect the website. When you submit a form, the email we receive also includes your IP address and the page you used, so we can prevent spam and abuse. To stop automated abuse, the form service keeps a coded (hashed) version of your IP address for 10 minutes.

Our fonts are hosted on our own server, and pages do not load fonts, videos, maps, social media widgets or other content from third parties, so simply visiting a page does not send your personal data to other companies. Links to social networks and AI assistants are ordinary links: information goes to those services only if you click them.

Non-essential analytics or marketing technologies are subject to the applicable consent requirements and our Cookie Policy.

3. Professional and B2B Information

Achivix provides B2B research and data services. In carrying out these services, we may process professional information relating to individuals acting in a business or professional capacity.

This may include:

  • Name
  • Professional job title
  • Seniority
  • Department or function
  • Company name
  • Company website
  • Business email address
  • Business telephone or direct number
  • Professional profile URL
  • Business location
  • Company information
  • Professional or career information relevant to a research assignment

Where professional information identifies or can reasonably identify an individual, it may constitute personal data under applicable privacy law.

We therefore do not treat the fact that information is “business” or “publicly available” as meaning that privacy obligations automatically do not apply.

4. Sources of B2B Information

Depending on the service, information may be obtained from:

  • Information supplied directly by our clients
  • Company websites
  • Publicly accessible professional profiles
  • Public business directories
  • Public company filings and business sources
  • Events and publicly available event information
  • Legitimate third-party data sources
  • Research conducted by Achivix researchers
  • Information provided by business contacts
  • Other lawful and appropriate professional sources

We use reasonable processes to assess sources, verify information, maintain data quality, and respond to correction and suppression requests.

Where third-party data sources are used, Achivix evaluates their relevance and suitability for the intended business purpose and, where appropriate, contractual, privacy and compliance considerations.

Where reasonably practicable, our research processes maintain information about the source or verification method used for business contact information.

5. Why We Use Personal Data

We process information only for defined business purposes, including:

Website and enquiries

  • Responding to enquiries
  • Understanding your requirements
  • Preparing proposals and quotations
  • Communicating with you about a requested service
  • Managing a business relationship

Service delivery

  • Conducting B2B research
  • Building prospect lists
  • Enriching and cleansing CRM data
  • Verifying business contact information
  • Conducting executive search research
  • Conducting event attendee research
  • Performing other research requested by a client

Website and security

  • Operating and maintaining our website
  • Preventing fraud, abuse and unauthorised access
  • Protecting our systems
  • Diagnosing technical problems

Communications and marketing

Where permitted by applicable law, we may send relevant business communications, service information, updates or marketing communications.

Where consent is required, we will obtain consent separately and provide a way to withdraw it.

The applicable legal basis or lawful ground depends on the activity, the relationship with the individual or client, and the law that applies.

Where GDPR or UK GDPR applies, we may rely on:

  • Consent
  • Performance of a contract
  • Steps taken before entering into a contract
  • Legitimate interests, where permitted and where those interests are not overridden by applicable individual rights
  • Compliance with a legal obligation

Where the DPDP Act applies, Achivix processes personal data in accordance with the requirements and lawful grounds applicable to the relevant processing activity, including obtaining consent where required and processing for other purposes permitted by applicable law.

We do not rely on a generic statement that continued website use constitutes consent to all processing.

When you submit an enquiry through an Achivix form, we use the information you provide to respond to your request, understand your requirements, and provide the requested service or information.

Where separate consent is required for marketing communications, marketing consent will be requested separately.

You should not be required to agree to unrelated marketing communications merely to submit a service enquiry.

8. Publicly Available Professional Information

Achivix may research publicly accessible professional information for B2B research and business purposes.

Public availability does not mean that Achivix ignores applicable privacy requirements.

Our processes are designed to:

  • Use legitimate and appropriate sources
  • Limit collection to information relevant to the research purpose
  • Avoid intentionally collecting sensitive personal information unless specifically authorised and lawful
  • Verify information where appropriate
  • Maintain data quality
  • Respect correction and suppression requests
  • Avoid retaining information longer than reasonably necessary for the applicable purpose
  • Apply appropriate security controls

Individuals may contact privacy@achivix.com to request correction, suppression, deletion or other applicable privacy action, subject to the rights, exemptions and requirements of the law applicable to the relevant processing.

9. AI-Assisted Processing

Achivix may use automation and AI-assisted technologies to support:

  • Research
  • Data classification
  • Prospect identification
  • Data enrichment
  • Data verification
  • Quality control
  • Information organisation
  • Research analysis

AI-assisted processing does not mean that information produced by an automated system is treated as accurate without appropriate review.

AI-assisted tools may support research and analysis, but they are not treated as the sole source of truth for material data decisions where human verification is reasonably practicable.

Where appropriate, Achivix uses human researchers to review, verify or quality-check research outputs.

Where a third-party technology provider processes personal data on behalf of Achivix, we seek to apply appropriate contractual, security and privacy safeguards.

10. Sharing of Information

We may share personal information where necessary for legitimate business purposes and in accordance with applicable law.

Recipients may include:

  • Our authorised employees and researchers
  • Service providers and technology providers
  • Hosting and infrastructure providers, including Namecheap, which hosts this website and delivers website form submissions to us
  • Email and productivity providers, including Microsoft 365, which hosts our business email
  • CRM and business software providers
  • Analytics providers where applicable
  • AI, automation or research technology providers where their services are used for an applicable business or research purpose
  • Professional advisers
  • Clients, where required for the agreed service
  • Government authorities or regulators where legally required

We do not disclose client-provided data to an AI or technology provider merely because such technology is available; any processing is based on the applicable service, contractual requirements and privacy/security considerations.

We do not authorise service providers to use personal information for purposes unrelated to the services they provide to us unless permitted by law.

11. Client Data

When a client provides data to Achivix for cleansing, enrichment, research, verification or other processing, the client may determine the purposes and means of processing.

Depending on the engagement, Achivix may act as a data processor/service provider on behalf of the client.

The applicable responsibilities are documented through the relevant agreement, statement of work, data processing agreement, or other contractual arrangement.

Achivix will process client-provided data according to applicable contractual instructions and law.

12. Achivix's Own Business Data

Where Achivix determines the purposes and means of processing information for its own business activities, Achivix may act as the relevant data fiduciary/controller or equivalent under applicable law.

This may include information relating to:

  • Website visitors
  • Prospective customers
  • Existing customers
  • Business contacts
  • Suppliers
  • Partners
  • Professional contacts

13. Data Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, or protect our legitimate business interests.

Retention periods may vary depending on:

  • Type of information
  • Purpose of processing
  • Client requirements
  • Contractual obligations
  • Legal requirements
  • Security and dispute considerations
  • Whether the individual has requested suppression or deletion

We maintain internal retention and deletion procedures for applicable categories of information. Where we process information on behalf of a client, retention may also be determined by the client’s documented instructions, contractual requirements and applicable law.

14. Data Security

Achivix applies reasonable technical and organisational measures appropriate to the nature of the information and the risks involved.

These measures may include:

  • Access controls
  • Role-based access
  • Confidentiality obligations
  • Authentication controls
  • Secure systems and services
  • Data handling procedures
  • Monitoring and logging where appropriate
  • Backup and recovery measures
  • Researcher confidentiality requirements
  • Vendor and processor controls

No internet-based system can be guaranteed to be completely secure. We continuously review our security practices as our services and technology evolve.

15. International Data Transfers

Achivix is based in India and works with customers, suppliers and business contacts internationally.

Where personal information is transferred across borders, we apply safeguards required by applicable law.

Where GDPR or UK GDPR applies, we may use appropriate transfer mechanisms, including standard contractual clauses or other legally recognised safeguards where required.

Our website hosting and business email providers may store data on servers outside India, including in the United States and the European Union. Where the DPDP Act applies, we transfer personal data outside India only as permitted by the Act and any restrictions notified by the Government of India.

16. Your Privacy Rights

Depending on the applicable law and circumstances, you may have rights relating to your personal information, including:

  • Requesting information about processing
  • Requesting access to personal information
  • Requesting correction of inaccurate information
  • Requesting deletion or erasure where applicable
  • Withdrawing consent where processing is based on consent
  • Objecting to certain processing
  • Restricting certain processing where applicable
  • Requesting data portability where applicable
  • Requesting suppression from future business communications
  • Submitting a privacy or grievance request
  • Nominating another person to exercise applicable rights on your behalf, where permitted under applicable law, including where applicable under the DPDP Act

Rights vary depending on the law that applies to the particular processing activity.

If you live in California or another US state with a similar privacy law, you can opt out of the sale or sharing of your personal information on our Do Not Sell or Share page.

17. How to Submit a Privacy Request

Send your request to:

privacy@achivix.com

Please include:

  • Your name
  • Company, if relevant
  • The nature of your request
  • Relevant information that helps us identify the record or interaction

If you prefer not to email, you can use our online privacy request form.

We may request reasonable information to verify the identity of the person making the request.

We will respond within the timeframe required by applicable law: for requests under GDPR or UK GDPR, within one month (extendable in limited cases); for grievances under the DPDP Act, as soon as possible and no later than 90 days.

If you are in India and are not satisfied with how we handled your grievance, you may complain to the Data Protection Board of India after using our grievance process. If you are in the EU or UK, you may complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

18. Marketing Communications

You may unsubscribe from marketing communications by using the unsubscribe mechanism included in the communication or by contacting:

privacy@achivix.com

We may retain limited suppression information where necessary to ensure that we do not send future communications to someone who has opted out.

19. Children's Data

Achivix's website and B2B services are intended for business and professional audiences.

We do not knowingly collect personal information from children (under the DPDP Act, anyone under 18). Our forms are intended for adults acting in a business capacity.

If you believe a child has provided personal information to us, contact privacy@achivix.com.

20. Data Breach Management

Achivix maintains internal procedures for identifying, containing, investigating and responding to personal data incidents.

Where applicable law requires notification of a personal data breach to affected individuals, clients, regulators or other authorities, Achivix will make the required notification within the applicable timeframe.

21. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of third-party websites.

We recommend reviewing the privacy policy of any third-party website you visit.

22. Cookies

Achivix uses cookies and similar technologies for website functionality, security, analytics and, where applicable, marketing.

Non-essential cookies are managed through our cookie-consent mechanism where applicable.

For more information, please see our Cookie Policy.

23. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, legal requirements or privacy practices change.

The latest version will be published on this page with the updated date.

24. Contact

For privacy questions, requests or complaints:

Privacy & Grievance Contact, Achivix
Email: privacy@achivix.com
Address: 69, Mayur Vihar Phase III, Kondli, New Delhi, Delhi 110096, India

For general enquiries:

Email: contact@achivix.com

Website: https://www.achivix.com

Questions about your data?

Talk to our privacy team

Email us and we will respond to any privacy request within the timeframe the law requires.

Privacy questions

Have a question about your data? Ask our privacy contact.

Email privacy@achivix.com any time for access, correction, deletion, opt-out, or other requests about your personal information.