GDPR Compliance & Data Protection
Brand: Implixo Pvt Ltd
Website: implixo.com
Contact for privacy matters: sales@implixo.com
Last updated: 1 November 2026
1. Introduction
This page explains how Implixo Pvt Ltd (“Implixo”, “we”, “us”, “our”) collects, uses, stores, and protects personal data — and the rights you have over your data.
Implixo is a mobile app and software development company based in Noida, India. We serve clients globally, including in the European Union (EU) and European Economic Area (EEA), the United States (USA), and Africa. Because we advertise online and contact people who submit enquiries, we comply with the data protection laws that apply in each of those regions, including:
- EU/EEA: the General Data Protection Regulation (GDPR)
- USA: the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other applicable US state privacy laws
- Africa: the Protection of Personal Information Act (POPIA) of South Africa, the Data Protection Act of Kenya, and the Nigeria Data Protection Act (NDPA), along with other applicable African data protection laws
Where a regional law gives you stronger rights than this page describes, that law applies.
This page is written in plain language. It is a statement of our data practices, not a legal contract. If any part of it conflicts with applicable law, the law prevails.
2. Who We Are
Data Controller: Implixo Pvt Ltd
Location: Noida, India
Registered office address: G Block, Sector 63, Noida, Uttar Pradesh 201309
Privacy contact: sales@implixo.com
For GDPR purposes, Implixo is the “data controller” — we decide why and how your personal data is used. Where we use third-party tools (for example, advertising platforms), those providers act as independent controllers or processors as described in Section 8.
EU Representative: [To be appointed before publishing — GDPR requires companies outside the EU that target EU residents to appoint an EU-based representative. Their name and contact details will be listed here once appointed.]
Data Protection Officer (DPO): [To be added if appointed, or state “No DPO is currently required; privacy queries go to sales@implixo.com.”]
3. What Personal Data We Collect
3.1 Data you give us directly
When you fill in a form on our website, landing pages, or advertisements, or when you speak to us, we may collect:
- Name and business/company name
- Email address and phone number
- Country, city, or region
- The service you are interested in (for example, Android, iOS, Flutter, or AI app development)
- Project details, budget range, and timeline, if you provide them
- Any message you type into a form or share with us on a call
3.2 Data collected automatically
When you visit our website or click our advertisements, we and our advertising partners may automatically collect:
- IP address and approximate location (city/country level)
- Device, browser, and operating system information
- Pages visited, time spent, and actions taken on our site
- Advertising identifiers, such as Google Click ID (gclid) and Meta Click ID (fbclid)
- Referrer information (for example, which ad or search result brought you to us)
3.3 Call-related data
Because we call people back after they submit a lead, we also process:
- The phone number you provided
- Call date, time, duration, and outcome (for example, answered, no answer, meeting booked)
- Notes our team records about your requirements after the call
Call recording: We do not record calls unless we tell you at the start of the call and you agree.
3.4 What we do NOT collect
We do not collect sensitive personal data (such as health data, biometric data, religious beliefs, or political opinions) through our advertisements or lead forms, and we do not knowingly collect data from children (see Section 13).
4. How and Why We Use Your Data
We use your data only for the purposes below. The “lawful basis” column shows the GDPR justification; similar principles apply under US and African laws (generally, your consent or our legitimate business interest, balanced against your rights).
| Purpose | Lawful basis (GDPR) |
|---|---|
| Responding to your enquiry and calling you back after you submit a lead form | Consent (you submitted the form) and performance of pre-contractual steps |
| Preparing a proposal, quote, or consultation for the services you asked about | Pre-contractual steps and legitimate interest |
| Running, measuring, and improving our advertising campaigns (Google Ads, Meta Ads) | Consent (cookies/tracking) and legitimate interest |
| Sending marketing messages you asked for (for example, follow-ups about your enquiry) | Consent, which you can withdraw at any time |
| Improving our website, services, and customer experience | Legitimate interest |
| Preventing fraud, spam, and abuse of our forms and systems | Legitimate interest and legal obligation |
| Meeting legal, tax, and accounting obligations | Legal obligation |
We do not use your data for any purpose incompatible with the above, and we do not sell your personal data to anyone.
5. Advertising and Lead Calls — How It Works
Because this is the main way we collect data, here is the process in full:
- You see our advertisement on Google, Meta (Facebook/Instagram), LinkedIn, or another platform.
- You submit a lead form — either on our website/landing page or directly on the advertising platform (for example, a Meta Lead Ad or Google Lead Form). By submitting, you are asking us to contact you.
- We call you on the phone number you provided, normally during business hours, to discuss your requirements and, if relevant, book a free consultation.
- You are under no obligation. You can decline, ask us not to call again, or ask us to delete your details at any time (see Section 11).
- If you do not respond, we may try a limited number of follow-ups and then stop. We do not call numbers harvested from elsewhere, and we do not buy lead lists.
Marketing calls and messages: We only call or message numbers that were submitted to us through our own forms, or provided by you directly. For US residents, by submitting a form you consent to being contacted at the number provided, including by phone call, even if the number is on a Do Not Call list — you may revoke that consent at any time by telling us during a call or by emailing sales@implixo.com. For EU/EEA residents, marketing contact is based on your consent, which you may withdraw at any time with effect for the future.
Opting out: Reply “STOP” to any SMS/WhatsApp message from us, tell our caller you do not wish to be contacted again, or email sales@implixo.com with the subject “Do not contact”. We will suppress your details from future marketing within a reasonable time.
6. Cookies and Tracking Technologies
Our website and landing pages use cookies and similar technologies for:
- Essential functions — security, load balancing, and remembering form inputs
- Analytics — understanding how visitors use our site (for example, Google Analytics)
- Advertising — measuring ad performance and showing relevant ads (for example, Google Ads conversion tracking, Meta Pixel, LinkedIn Insight Tag)
On your first visit, a cookie banner lets you accept or reject non-essential cookies. Essential cookies cannot be disabled because the site would not work without them. You can also control cookies in your browser settings, and you can opt out of personalised advertising here:
- Google Ads Settings: https://adssettings.google.com
- Meta (Facebook/Instagram) Ad Preferences: https://www.facebook.com/adpreferences
- Your Online Choices (EU): https://www.youronlinechoices.com
Rejecting advertising cookies does not stop you from using our website, and it does not stop us from contacting you about a lead you submitted — it only limits tracking-based advertising.
7. Who We Share Your Data With
We share personal data only with the parties below, and only as needed for the purposes in Section 4:
- Advertising platforms — Google and Meta (and LinkedIn, where used), which receive the data you submit through their lead forms and the tracking data described in Section 6. Their own privacy policies apply to their processing.
- Service providers (processors) — companies that help us operate, such as website hosting, CRM and email tools, analytics providers, and telephony providers. They process data only on our instructions and under contract.
- Professional advisers and authorities — accountants, auditors, lawyers, or regulators, where required by law or to protect our legal rights.
- Business transfers — if Implixo is acquired or merged, your data may transfer to the new owner, who will be bound by this page or a comparable policy, and you will be informed.
We do not sell personal data, and we do not share it with data brokers.
8. International Data Transfers
Implixo is based in India, so your data may be transferred to and processed in India, and in the countries where our service providers operate (including the USA and EU member states).
For transfers out of the EU/EEA, we rely on one of the GDPR-approved safeguards:
- An adequacy decision by the European Commission for the destination country, where one exists, or
- Standard Contractual Clauses (SCCs) approved by the European Commission, together with appropriate technical and organisational safeguards
For transfers out of South Africa, Kenya, and Nigeria, we apply the equivalent transfer safeguards required by POPIA, the Kenya Data Protection Act, and the NDPA respectively. You may request a copy of the safeguards we use by emailing sales@implixo.com.
9. How Long We Keep Your Data
We keep personal data only as long as needed for the purpose it was collected for, then delete or anonymise it. Our standard retention periods are:
| Data | Retention period |
|---|---|
| Lead/enquiries that do not become clients | 24 months from your last contact with us, then deleted |
| Client project and contract records | Duration of the contract, plus the period required by Indian tax and accounting law |
| Call logs and call outcome notes | 12 months |
| Marketing consent records and suppression lists | Until you withdraw consent; suppression entries are kept indefinitely to honour opt-outs |
| Website analytics data | As configured in our analytics tools (standard retention) |
| Cookie data | As set by each cookie; see our cookie banner for details |
[Confirm these periods match your actual practice before publishing. If your CRM or contracts require different periods, update this table.]
10. How We Protect Your Data
We apply reasonable technical and organisational measures, including:
- Access limited to staff who need the data to do their jobs
- Password-protected systems and encrypted connections (HTTPS) for data in transit
- Regular review of who has access to lead and client data
- Contracts with processors requiring confidentiality and security
No system is completely secure. If you believe your data has been compromised in connection with Implixo, contact sales@implixo.com immediately so we can investigate.
11. Your Rights
11.1 If you are in the EU/EEA (GDPR)
You have the right to:
- Access — receive a copy of your personal data
- Rectification — correct inaccurate or incomplete data
- Erasure (“right to be forgotten”) — have your data deleted where there is no longer a lawful reason to keep it
- Restriction — limit how we process your data while a dispute is resolved
- Portability — receive your data in a portable format and transfer it elsewhere
- Object — object to processing based on legitimate interest, and to direct marketing at any time, free of charge
- Withdraw consent — where processing is based on consent, withdraw it at any time (this does not affect processing already done)
- Not be subject to solely automated decisions — we do not make decisions about you by purely automated means with legal or similarly significant effect
You also have the right to complain to your local data protection authority (for example, your country’s supervisory authority). A list of EU authorities is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
11.2 If you are in the USA
Under the CCPA/CPRA (California) and similar state laws, you have the right to:
- Know what personal data we collect about you, why, and who we share it with
- Delete your personal data, subject to legal exceptions
- Correct inaccurate personal data
- Opt out of the sale or sharing of your personal data — Implixo does not sell or share personal data as those laws define it, so there is nothing to opt out of, but you may still submit a request and we will confirm this
- Limit the use of sensitive personal information — we do not collect sensitive personal information through our ads or lead forms
- Non-discrimination — we will not treat you differently for exercising your rights
We do not knowingly collect or sell the personal data of anyone under 16. To exercise any US privacy right, email sales@implixo.com with the subject “US Privacy Request”. We will verify your identity before responding, and we respond within the timeframes required by law.
11.3 If you are in Africa
Under POPIA (South Africa), the Kenya Data Protection Act, and the NDPA (Nigeria), you have comparable rights, including the right to:
- Be informed about what data we collect and why
- Access and correct your personal data
- Object to processing, including direct marketing, at any time
- Request deletion of your data where there is no lawful reason to keep it
- Lodge a complaint with your regulator — for example, the Information Regulator (South Africa), the Office of the Data Protection Commissioner (Kenya), or the Nigeria Data Protection Commission
11.4 How to exercise your rights (all regions)
Email sales@implixo.com with the subject “Data Protection Request”, stating your name, the contact details you used with us, and the right you wish to exercise. We will respond within one month (or sooner where your local law requires it). If your request is complex or you make repeated requests, that period may be extended by up to two further months, and we will tell you why.
To protect your data, we may need to verify your identity before acting — for example, by confirming details only you would know, or by calling the number you provided.
12. Third-Party Links and Platforms
Our website and advertisements may link to third-party websites, app stores, or social media platforms. Their privacy practices are governed by their own policies, not this page. If you submit a lead form on Google, Meta, or LinkedIn, that platform is also a controller of your data — please review its privacy policy as well.
13. Children’s Privacy
Our services are business services and are not directed at children. We do not knowingly collect personal data from anyone under 16 (or under 13 in the USA). If you believe a child has provided us with personal data, contact sales@implixo.com and we will delete it promptly.
14. Changes to This Page
We may update this page from time to time, for example when we change our advertising tools, enter a new region, or when the law changes. Material changes will be highlighted by updating the “Last updated” date at the top of this page. We encourage you to review this page periodically.
15. Contact Us
For any question about this page, your personal data, or our data practices — including requests to stop calls, access or delete your data, or to receive a copy of our transfer safeguards — contact:
Implixo Pvt Ltd
Email: sales@implixo.com
Website: implixo.com
If you are in the EU/EEA and we do not resolve your concern, you may complain to your local supervisory authority. If you are in South Africa, Kenya, or Nigeria, you may complain to your national data protection regulator listed in Section 11.3.