Legal
Privacy & Cookie Policy
Last updated: July 7, 2026
Who we are
Himalyan AI (“we”, “us”) operates himalyan.ai. For the purposes of the Digital Personal Data Protection Act, 2023 (India) we are the Data Fiduciary, and for the EU/UK GDPR we are the Data Controller for personal data collected through this website. Questions or requests: info@himalyan.ai.
What we collect and why
We only collect data you actively provide through a form, plus limited analytics if you consent to cookies.
- Contact & enquiry forms — your name, email, area of interest, and message, so we can respond to you. Legal basis: your consent / to take steps at your request.
- Newsletter & content downloads — your email (and, for some resources, company and role), to send what you requested and occasional updates. Legal basis: your consent, given via the checkbox on the form.
- Analytics — anonymised usage data (pages viewed, approximate region, device type) via Google Analytics 4, collected only after you accept cookies. IP addresses are anonymised. We never send your name or email to Google Analytics.
Cookies
When you first visit, analytics cookies are disabled by default. We use Google’s Consent Mode: nothing that stores an analytics cookie runs until you choose “Accept” on the cookie banner. If you “Decline”, no analytics cookies are set.
- Strictly necessary — a single local record of your cookie choice so we don’t ask again. No tracking.
- Analytics (optional) — Google Analytics 4 (_ga cookies) to measure site usage. Set only with your consent.
You can change your mind any time by clearing this site’s storage in your browser, which brings the banner back.
Who processes your data
We keep the stack lean. Your data is handled by:
- Google Workspace (Sheets / Apps Script) — stores form submissions.
- Amazon Web Services (SES, region ap-south-1, Mumbai) — sends us email notifications of your submission.
- Google Analytics — analytics, only with consent.
These providers may process data outside India (e.g. Google servers). We rely on their standard contractual protections for such transfers. We do not sell your data or use it for third-party advertising.
How long we keep it
We retain form submissions for as long as needed to respond and maintain our business relationship, and up to 24 months after our last interaction, unless you ask us to delete it sooner. Analytics data follows Google Analytics’ standard retention.
Your rights
Under the DPDP Act and GDPR you can request access to, correction of, or deletion of your personal data, withdraw consent, or unsubscribe at any time (every marketing email has an unsubscribe link). To exercise any of these, email info@himalyan.ai and we’ll respond within the timelines the law requires.
Changes
We’ll update this page if our practices change and revise the date above. Material changes will be reflected here before they take effect.