The short version: this website sets no cookies, runs no tracking or advertising, and has no forms. We only receive personal data when you choose to contact us, and we use it to reply to you and to work with you.
Who we are
This policy is issued by Ozmark AI & Tech Solutions, a One Person Company incorporated in India under the Companies Act, 2013 (“Ozmark”, “we”, “us”). For personal data covered by this policy, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the controller under the EU General Data Protection Regulation.
- Company
- Ozmark AI & Tech Solutions
(One Person Company) - hi@ozmark.io
- Phone and WhatsApp
- +91 93903 23440
- Grievance Officer
- Zoha F, hi@ozmark.io
What this policy covers
This policy covers the website at ozmark.io and any enquiry you send us by email, WhatsApp or phone.
It does not cover our gym access control product (join.ozmark.io andapp.ozmark.io). That product has its own privacy notice, shown before anyone signs up. When we process a gym member’s data on behalf of a gym, the gym is the Data Fiduciary and we act as its Data Processor.
What we collect
When you visit the website
- No cookies, no local storage, no tracking. The site does not set cookies or store anything on your device. It has no advertising, no tracking pixels, no chat widgets and no social media plug-ins.
- Hosting. The site is served by Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time of the request.
- Visitor counts. We use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. We see totals such as page views, the website that referred you, country and device type, never who you are.
When you contact us
- What you choose to send us: usually your name, email address or phone number, your business name, and your message.
- If you message us on WhatsApp, WhatsApp (Meta) also processes your messages under its own privacy policy. If you email us, your email provider and ours process the email.
- Please don’t send passwords, bank or card details, Aadhaar numbers or health information. We never ask for them through this website or in an enquiry.
Why we use it, and on what basis
- To answer your enquiry and send you a quote: on the basis of your consent, which you give by contacting us.
- To provide services you agree to buy from us: under our contract with you.
- To keep records the law requires, such as accounts and tax records, and to respond to lawful requests: as a legitimate use permitted by section 7 of the DPDP Act.
- To keep the website secure and working: the technical data described above, handled by Cloudflare.
For people in the EU or Ireland, the GDPR legal bases are steps taken at your request before a contract and performance of a contract (Article 6(1)(b)), legal obligations (Article 6(1)(c)), and our legitimate interest in replying to business enquiries and keeping the site secure (Article 6(1)(f)).
We do not sell personal data, use it for advertising, or make automated decisions about you.
Who we share it with
- Service providers who help us run the business: Cloudflare (website hosting and analytics), our email provider, and WhatsApp when you use it. They may only use the data to provide their service to us.
- Professional advisers, such as accountants and lawyers, under a duty of confidentiality.
- Government, regulatory or law enforcement authorities when Indian law requires it.
- A buyer or successor of our business, if the business is transferred, under the same protections.
Where it is processed
We are based in India. Our service providers, Cloudflare in particular, may process data in other countries. We only transfer personal data outside India as the DPDP Act allows, and never to a country the Government of India has restricted. For EU and Irish personal data, transfers rely on safeguards the GDPR recognises, such as the European Commission’s standard contractual clauses used by our providers.
How long we keep it
- Enquiries that don’t lead to work: deleted within 24 months of our last contact with you.
- Client records: for as long as we work together, then for as long as Indian law requires us to keep accounts and records (up to eight years).
- Cloudflare’s technical logs: for Cloudflare’s own short retention periods.
You can ask us to delete your data sooner; see your rights below.
How we protect it
We follow reasonable security practices as required by section 43A of the Information Technology Act, 2000 and its rules. The website itself stores no personal data, every page is served over HTTPS only, and access to enquiries is limited to the people who need it. No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.
Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we hold about you and how we use it;
- have it corrected, completed or updated;
- have it erased, unless the law requires us to keep it;
- withdraw your consent at any time, as easily as you gave it (this doesn’t affect anything done before you withdrew it);
- have a grievance about our handling of your data resolved; and
- nominate someone to exercise these rights for you if you die or are unable to.
If you are in the EU or Ireland, you also have the GDPR rights to access, rectification, erasure, restriction, objection and data portability.
To use any of these rights, email hi@ozmark.io. We may need to check who you are before acting. We aim to respond within one month.
Complaints
Please contact our Grievance Officer first: Zoha F,hi@ozmark.io. We will acknowledge your complaint and try to resolve it within one month.
If you are not satisfied, you may complain to the Data Protection Board of India once its procedures apply. If you are in Ireland or the EU, you may complain to the Data Protection Commission in Ireland or your local data protection authority.
Children
This website is for businesses and is not aimed at anyone under 18. We do not knowingly collect personal data from children. If you think a child has sent us personal data, tell us and we will delete it.
Your responsibilities
As the DPDP Act asks, please give us accurate information, don’t impersonate anyone, and don’t send us another person’s personal data without their permission.
Changes to this policy
We may update this policy, for example when new rules under the DPDP Act come into force. The date at the top shows the latest version. If a change significantly affects how we use data you have already given us, we will tell you before it applies.
Laws this policy follows
The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions come into force; the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 while they apply; and, for people in the EU or Ireland, the General Data Protection Regulation.