Privacy Policy

Last updated: 11 March 2026

Gamyam Info Tech LLP ("Gamyam," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard information when you visit our website at gamyam.com, interact with our contact or careers forms, or choose your cookie preferences on the site.

Gamyam is an engineering services company that provides dedicated engineers and delivery teams. We are not a software-as-a-service (SaaS) provider and do not operate user accounts or subscription platforms for end users.

1. Information We Collect

Information you provide directly:

• Contact form submissions: Name, work email address, company name (if provided), and the message you submit. These submissions are processed through Formspree, a third-party form handling service.
• Careers form submissions: Name, email address, role applied for, years of experience, LinkedIn profile URL, primary skills, and current location. These submissions are also processed through Formspree.

Information collected automatically:

• Analytics data: If you accept analytics cookies, we use Google Analytics 4 (GA4) to collect usage data such as pages visited, time spent on the site, referring URLs, browser type, device type, and approximate geographic region. See our Cookie Policy for specific cookie names and durations.
• Cookie preference data: We store your cookie consent choice in your browser's localStorage so the site can remember whether you accepted or declined analytics cookies.

Information collected via LinkedIn URLs:

• Your LinkedIn profile URL, submitted via our careers form, may be used to view publicly available information on your profile (such as work history, skills, and endorsements) to evaluate your application. We do not scrape, store, or further process your LinkedIn data beyond what is necessary for hiring evaluation.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries submitted through our contact form.
• To evaluate candidates who apply through our careers form.
• To understand how visitors use our website so we can improve its content and performance.
• To maintain the security and functionality of our website.
• To manage cookie preferences and respect your analytics consent choices.

We do not use your information for automated decision-making or profiling.

3. Data Sharing

We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:

• Formspree: Contact and careers form submissions are processed through Formspree, which acts as a data processor on our behalf. We have verified that Formspree maintains appropriate data protection practices. Formspree's privacy policy governs how it handles data submitted through its platform.
• Google Analytics: If you accept analytics cookies, pseudonymised usage data is shared with Google Analytics to help us understand website traffic patterns. Google acts as a data processor for this purpose. Pseudonymised means that a randomly generated identifier (not your name or email) is used to distinguish visitors, but this data is not fully anonymised.
• Vercel: Our website is hosted on Vercel, which may process server logs, IP addresses, and request metadata as part of its hosting infrastructure. Vercel acts as a data processor for this purpose.
• Legal requirements: We may disclose information if required to do so by law or in response to valid legal process.

4. International Data Transfers

Gamyam is based in India. When you submit information through our forms, your data is processed by Formspree, which operates servers in the United States. Similarly, if you accept analytics cookies, usage data is processed by Google Analytics, which may transfer data to servers located in the United States or other countries.

Where your data is transferred outside your country of residence, we rely on the following safeguards:

• Our service providers' data processing agreements, which incorporate Standard Contractual Clauses (SCCs) as adopted by the European Commission where applicable.
• The data protection commitments of our service providers (Formspree, Google, Vercel) under their respective data processing agreements and privacy policies.
• Contractual obligations requiring our processors to protect your data to a standard consistent with applicable privacy laws.

5. Cookies and Tracking

Our website uses cookies and browser storage to support analytics and preference management. For a detailed explanation of each cookie, its purpose, provider, and duration, please see our Cookie Policy.

Key points:

• Analytics cookies (Google Analytics) are loaded only if you explicitly accept them through our cookie consent banner.
• You can change or withdraw your cookie consent at any time by clicking "Cookie Settings" in the website footer.
• No tracking cookies are loaded before you make a consent choice.

6. Data Security

We take reasonable technical and organizational measures to protect the information we collect from unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Form submissions are transmitted securely via HTTPS and processed through Formspree's infrastructure. We limit access to personal information to personnel who need it to carry out their responsibilities.

7. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal information (such as under the GDPR), we rely on one or more of the following:

• Consent: When you submit a form (by checking the consent box) or accept analytics cookies.
• Legitimate interests: To operate, secure, and improve our website and respond to business inquiries.
• Contractual necessity: Where processing is needed to evaluate or support a potential or active business relationship.
• Legal obligations: Where we must retain or disclose information under applicable law.

8. Data Retention

• Contact form data: Retained for up to 6 months from the date of submission to respond to and follow up on your inquiry, and then deleted unless a business relationship is established. If a business relationship is established, retention is governed by the applicable engagement agreement.
• Careers form data: Retained for up to 6 months from the date of submission for hiring evaluation purposes. If you are not selected, your data is deleted after this period unless you request earlier deletion.
• Analytics data: Retained for 14 months in accordance with our Google Analytics configuration, after which it is automatically deleted.
• Cookie consent preference: Stored in your browser's localStorage for up to 365 days, after which you will be prompted to re-confirm your preference. You can also change your preference at any time via Cookie Settings in the footer.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct any inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to any legal obligations we may have to retain it.
• Restriction: Request that we restrict the processing of your personal information in certain circumstances (for example, while we verify the accuracy of your data or assess an objection).
• Objection: Object to the processing of your personal information in certain circumstances.
• Portability: Request your data in a structured, commonly used, machine-readable format.
• Withdraw consent: Withdraw consent at any time where processing is based on consent (this does not affect the lawfulness of processing before withdrawal).

To exercise any of these rights, please contact us at legal@gamyam.com. We will respond to your request within one calendar month (or within the period required by applicable law, if different). If we need additional time, we will notify you of the extension and the reasons for the delay.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to correct: You may request that we correct inaccurate personal information we hold about you.
• Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

Categories of personal information collected: Identifiers (name, email address), professional information (company, role, skills, experience, LinkedIn URL), and internet activity information (via Google Analytics, if consented).

To submit a CCPA/CPRA request, email us at legal@gamyam.com with the subject line "CCPA Request." We will confirm receipt within ten (10) business days and provide a substantive response within forty-five (45) days of receiving your verifiable request, as required by applicable law.

11. India Digital Personal Data Protection Act, 2023 (DPDPA)

As an entity based in India, Gamyam complies with the Digital Personal Data Protection Act, 2023 ("DPDPA") and its applicable rules. Under the DPDPA:

• Gamyam acts as a Data Fiduciary when collecting and processing your personal data through this website.
• We collect and process your personal data only for lawful purposes and with valid consent, as described in this Privacy Policy.
• You have the right to access, correct, and request erasure of your personal data, as well as the right to nominate another individual to exercise your rights on your behalf.
• You may withdraw your consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Cross-border transfers of personal data are conducted in accordance with Section 16 of the DPDPA and any restrictions notified by the Central Government.

Until the DPDPA rules are fully notified, we also comply with the applicable provisions of the Information Technology Act, 2000 (Section 43A) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

12. Children's Privacy

Our website and services are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from children. If you are under 18, please do not submit any information through our forms. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at legal@gamyam.com.

13. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within seventy-two (72) hours of becoming aware of the breach, where required by applicable law (including GDPR Article 33 and DPDPA Section 8).
• Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
• Document the breach, its effects, and the remedial actions taken.

14. European Union and United Kingdom

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), the following additional information applies:

• Gamyam does not currently maintain a physical establishment in the EEA or the UK. Given the limited and occasional nature of the personal data we process from EEA and UK visitors (website contact inquiries and analytics data only), and considering that such processing is unlikely to result in a risk to data subjects' rights and freedoms, we have determined that the appointment of a representative under GDPR Article 27 or UK GDPR Article 27 is not currently required. We will reassess this position as our operations evolve and appoint a representative if circumstances change.
• You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.
• The legal bases for our processing are described in Section 7 above.

15. Third-Party Links

Our website may contain links to third-party websites or services, including LinkedIn and Instagram. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

17. Grievance Officer and Contact

In accordance with the DPDPA and the Information Technology Act, 2000, the details of our Grievance Officer are as follows:

• Gamyam Info Tech LLP
• Grievance Officer: V M V N Saiteja, Gamyam Info Tech LLP
• Head Office: Hyderabad, Telangana, India
• Registered Office: Razole, East Godavari, Andhra Pradesh 533242, India
• Email: legal@gamyam.com
• Website: gamyam.com

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your information, please contact us at the address above. We will acknowledge your request promptly and respond within one calendar month (or within the period required by applicable law, if different).