Have any questions? +44 7404 77 00 11Mail us hello@amphin.com
LoginFollow usigfbinxyttt

What personal data we collect through this website, why we use it, who we share it with, where it is stored and the rights you have wherever you live.

Version 1.0 draft · last updated 2026-10-24

This page is a draft pending legal review and may change before it takes effect.

Who we are

  • This website (amphin.agency) is run by Amphin LTD (company no. 15393448, Registered in England & Wales) and Amphin (Registered as an MSME in India) ("Amphin", "we", "us"). Amphin LTD is the controller for visitors and clients outside India; Amphin (India) is the data fiduciary for visitors and clients in India.
  • Privacy contact: support@amphin.com, or write to us at Office 19, 241E High St N, London E12 6SJ, United Kingdom. In India, you can also write to our Grievance Officer at C3 V Square IT Hub, Kakkanad West, Kochi, Kerala 682030, India.

What we collect

  • Enquiry and quote forms: your name, email, phone number, company, the service you are interested in, budget, region and your message.
  • Job applications: your contact details, CV, portfolio links, the role you applied for and anything else you choose to send.
  • Amphin Connect (creators and partners): your social media handles, audience information, rates and the brands or campaigns you are interested in.
  • Newsletter: your email address and region.
  • Phone calls, WhatsApp messages and emails you send us: the content of the conversation and your contact details.
  • Website usage: the pages you visit, the region site you use, the type of device and the website that referred you. We count visits with a daily-changing anonymous code made from your IP address and browser. We do not store your IP address and cannot use the code to identify you.

Why we use it and our legal basis

  • To reply to enquiries, prepare proposals and deliver services: taking steps at your request before a contract, performing a contract, or our legitimate interest in running our business.
  • To assess job applications: our legitimate interest in recruiting, and steps before an employment contract.
  • To send the newsletter: your consent, which you can withdraw at any time with the unsubscribe link or by emailing us.
  • To measure how the website is used and keep it secure: our legitimate interest. Optional analytics tools (see the Cookie Policy) only run with your consent.
  • To meet legal obligations such as tax, accounting and responding to lawful requests.
  • In India, we process your data on the basis of your consent, given when you submit a form, or for the legitimate uses permitted by the Digital Personal Data Protection Act, 2023.
  • We do not make decisions about you using only automated processing, and we do not sell your personal data.

Who we share it with

  • Service providers that run our systems for us, under contract and only on our instructions: Vercel (website hosting), Supabase (database for our AMOS business system, hosted in Mumbai, India), Cloudflare (DNS, security checks on forms and file storage), Google (email and, if enabled, analytics and web fonts) and Microsoft (Clarity analytics, only if enabled and only with your consent).
  • If you contact us on WhatsApp, Meta processes that conversation under its own terms and privacy policy.
  • Videos embedded from YouTube or Instagram are delivered by Google or Meta when you choose to play them.
  • Professional advisers, auditors, insurers and authorities where the law requires it, or to protect our rights.
  • A buyer or successor if our business is reorganised or sold, under the same protections.

International transfers

  • Amphin works across the UK, India and the UAE, and our providers operate in several countries, including the United States. Your data may therefore be processed outside the country where you live.
  • When data leaves the UK or the European Economic Area, we use recognised safeguards such as the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses, or rely on adequacy decisions where they exist.

How long we keep it

  • Enquiries and proposals that do not lead to work: up to 3 years after our last contact.
  • Client records: for the length of the engagement and up to 7 years afterwards for tax and legal purposes.
  • Job applications: up to 12 months after the role is filled, unless you agree to us keeping them longer.
  • Newsletter: until you unsubscribe.
  • Anonymous visit counts: up to 25 months.

How we protect it

  • Data is encrypted in transit (HTTPS) and access to our business system is limited to staff who need it, with role-based permissions and logged access. Sensitive employee and payroll fields are encrypted at rest.
  • If a breach is likely to put your rights at risk, we will notify you and the relevant regulator as the law requires.

Your rights

  • UK and EU: you can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interests or to direct marketing. Where we rely on consent, you can withdraw it at any time.
  • India: you can ask for a summary of your data and how it is processed, correction, completion, updating and erasure, nominate another person to act for you, and raise a grievance with our Grievance Officer.
  • United States: we do not sell or share personal information for cross-context behavioural advertising. Residents of states with privacy laws can ask to know, correct or delete their information, and we will not treat you differently for doing so.
  • UAE and Canada: you can ask for access to and correction of your data, and withdraw consent, as provided by local law.
  • To use any of these rights, email support@amphin.com. We may need to confirm your identity. We reply within one month (or sooner where local law requires).

Complaints

  • Please contact us first at support@amphin.com so we can try to put things right.
  • UK: you can complain to the Information Commissioner's Office (ico.org.uk). EU: to the data protection authority where you live or work. India: once it is operating for your complaint, to the Data Protection Board of India, after first raising it with our Grievance Officer.

Children

This website and our services are for businesses and adults. We do not knowingly collect data from anyone under 18. If you think a child has sent us their details, contact us and we will delete them.

Changes

We will update this page when our practices change and show the date of the latest version at the top.