1. About this policy
This Privacy Policy explains how ABI Analytics Private Limited (“ABI Analytics”, “we”, “us”) collects, uses, shares and protects personal data when you visit www.abianalytics.com, request information from us, or engage us for research, advisory or agentic AI services. It applies to visitors and clients worldwide, and it is written to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, India’s Digital Personal Data Protection Act 2023 (DPDP Act), the California Privacy Rights Act (CPRA), and equivalent privacy laws in other jurisdictions.
2. Who we are (Data Controller)
The data controller responsible for processing your personal data is:
ABI Analytics Private Limited
B2-502B, Boomerang Building, Chandivali Farm Road
Mumbai 400072, India
Email: info@abianalytics.com
Phone: +91 90040 89006
3. What personal data we collect
We collect the following categories of personal data:
(a) Data you provide directly – when you submit a contact, enquiry, talk-to-us or coverage-request form, we collect: first name, last name, work email, phone number, firm and role, research area or topic, and any free-text notes you include. When you apply for a role on our Careers page, we additionally collect the information in your CV and cover note.
(b) Data we collect automatically – when you visit the website we record limited technical information through Google Analytics 4 with Consent Mode v2: page URLs visited, referring URL, country (derived from your anonymised IP address), device type, browser, and aggregate session duration. We do not write analytics cookies until you explicitly consent via our cookie banner; before consent, only cookieless, anonymised pings are sent.
(c) Data from third parties – we do not buy or rent personal data. We may verify business contact details against publicly available professional sources (e.g., a company website or LinkedIn profile) before responding to enquiries.
4. How we use your data and our lawful bases
We process personal data for the following purposes, each with an identified lawful basis:
- Responding to enquiries and scoping engagements – performance of a contract or pre-contractual steps at your request (GDPR Article 6(1)(b); DPDP s.7(a)).
- Delivering research, advisory and agentic AI services to clients – performance of our engagement contract with the client (GDPR Article 6(1)(b)).
- Measuring website performance and improving our content – legitimate interest in understanding aggregate site usage, subject to your consent for non-essential cookies (GDPR Article 6(1)(a) for cookies + 6(1)(f) for the underlying interest; DPDP s.7(g)).
- Sending occasional client-update communications – only to existing clients on a soft-opt-in basis, and only where lawfully permitted in your jurisdiction. You can opt out at any time by replying to any update or emailing info@abianalytics.com.
- Compliance with legal, regulatory and tax obligations – necessary for compliance with a legal obligation (GDPR Article 6(1)(c); DPDP s.7(c)).
- Recruitment – consent and pre-contractual steps when you apply for a role.
5. Cookies and analytics
We use a small number of cookies, all categorised and described in our Cookie Policy. We do not use advertising cookies, do not run third-party ad networks, and do not sell or share your personal data for cross-context behavioural advertising.
Our analytics setup uses Google Consent Mode v2: until you accept analytics cookies, Google Analytics sends only anonymised, cookieless pings. If you click Reject all in our cookie banner, no analytics cookies are written at all. You can change your choice at any time by clearing your browser’s site data and revisiting the page.
6. Who we share data with
We share personal data only with the following categories of processors, each contractually bound to protect it:
- Google LLC (Google Analytics 4 + Firebase Hosting) – web analytics and static hosting infrastructure, located in the United States and other Google data centres.
- Web3Forms (S.H. Reza Tech LLC) – processes contact form submissions, located in the United States.
- Microsoft Corporation (Microsoft 365) – corporate email and document storage, located in the European Union and other Microsoft regions.
- Professional advisers and regulators – where legally compelled, we may share data with tax authorities, courts or our auditors and legal advisers.
We do not sell personal data, do not share personal data for targeted advertising, and do not transfer personal data to entities outside this list without your prior knowledge.
7. International data transfers
Because some of our processors (Google, Microsoft, Web3Forms) operate globally, personal data may be transferred outside India, the EEA or the UK. Where this happens, transfers are governed by the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent safeguards under Section 16 of the DPDP Act. You can request a copy of the relevant safeguards by emailing info@abianalytics.com.
8. Data retention
We retain personal data only for as long as needed to fulfil the purpose for which it was collected:
- Contact / enquiry form submissions: up to 24 months from last interaction, then deleted or anonymised.
- Client engagement records: 7 years after engagement closure, to comply with Indian Companies Act 2013, Income Tax Act 1961 and GDPR statutory limitation periods.
- Recruitment applications: 12 months from application close, unless you ask us to delete sooner or to keep on file longer.
- Analytics data: aggregated and pseudonymous; Google Analytics retention is configured at 14 months at the user level.
9. Your rights
Depending on where you are located, you have rights with respect to your personal data, including:
- Right of access – you can ask us what personal data we hold about you and request a copy.
- Right to rectification – you can ask us to correct inaccurate or incomplete data.
- Right to erasure / deletion – you can ask us to delete your data, subject to overriding legal retention obligations.
- Right to object or restrict processing – you can ask us to stop or limit certain uses of your data.
- Right to data portability – you can ask us to send your data to you or to another controller in a structured, machine-readable format.
- Right to withdraw consent – where we rely on consent, you can withdraw it at any time without affecting prior processing.
- Right to lodge a complaint – with a supervisory authority (e.g., your national Data Protection Authority in the EU, the ICO in the UK, the Data Protection Board of India under the DPDP Act, or the California Privacy Protection Agency).
To exercise any of these rights, email info@abianalytics.com. We respond within 30 days; in complex cases we may extend by a further 60 days and will tell you if so.
10. Children’s data
Our services are intended for institutional and professional use only. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact info@abianalytics.com and we will delete it promptly.
11. Data security
We use industry-standard organisational and technical safeguards: TLS 1.2+ for data in transit, encryption at rest in our cloud providers, access controls based on least privilege, multi-factor authentication on administrative systems, and regular security reviews. No method of transmission over the internet is 100% secure; while we strive to protect your data, we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted here with a new “Last updated” date. Material changes will be communicated via a banner on the website for at least 30 days.
13. Contact us
Questions, requests or complaints about this policy or your personal data – email info@abianalytics.com or write to ABI Analytics Private Limited, B2-502B, Boomerang Building, Chandivali Farm Road, Mumbai 400072, India.