Privacy Policy

QZON Technology & Data Consultancy Last Updated: August 17, 2026

1. Introduction & Controller Identification

QZON ("we," "us," or "our") is a technology and data consultancy incorporated and operating in India. We are the data controller for all personal data processed through our website at qzon.world and in the course of delivering our services.

This policy tells you plainly what data we collect, why, how long we keep it, and what rights you have — wherever you are in the world.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us, request a proposal, or engage our services, we collect:

• Full name

• Email address

• Phone number

• Project details and budget constraints

We do not collect sensitive personal information (e.g., racial or ethnic origin, health data, religious beliefs, or biometric data), and we do not collect personal data from third-party sources.

2.2 Information Collected Automatically

When you visit our website, our servers and analytics tools automatically collect certain technical data that does not directly identify you:

• IP address and approximate location (country/city, derived from IP — not precise GPS)

• Browser type, version, and language settings

• Device type, operating system, and configuration

• Pages visited, timestamps, referring URLs, and session duration

• Crash reports and performance diagnostics (log data)

This technical data is used solely to maintain site security, diagnose issues, and understand aggregate usage patterns.

3. Legal Basis & How We Use Data

We only process personal data when we have a valid legal basis to do so. The table below maps each purpose to its lawful ground under the GDPR, UK GDPR, and equivalent frameworks.

On legitimate interests: We apply a balancing test before relying on this basis. Where our interests would override your fundamental rights, we rely on consent instead.

Withdrawing consent: You may withdraw consent at any time by emailing qzonhq@gmail.com. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Automated decision-making: We do not make decisions about you through solely automated means that produce legal or similarly significant effects. If this ever changes, we will notify you, explain the key factors, and provide a clear route to request human review.

4. Cookies & Web Analytics

We use cookies and similar tracking technologies (pixels, web beacons) for two purposes: keeping the site functional and understanding how visitors use it.

Google Analytics tracks aggregate visitor behaviour (page views, session duration, traffic sources). You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-Out Browser Add-On.

You can control or remove cookies through your browser settings at any time. Note that disabling certain cookies may affect site functionality.

Do Not Track (DNT): No uniform technical standard for DNT signals currently exists, so we do not respond to DNT browser signals at this time. If an enforceable standard is adopted, we will update this policy accordingly.

Global Privacy Control (GPC): We honour GPC signals. If your browser or extension transmits a GPC opt-out signal, we will automatically treat this as a valid request to opt out of any sale or sharing of your personal data for targeted advertising purposes under applicable US state privacy laws (including the CCPA). No further action is required from you.

5. Data Sharing & Third-Party Processors

We share personal data only with trusted service providers who process data strictly on our behalf, under written contracts that prohibit any unauthorised use or onward disclosure.

We do not sell personal data. We do not share personal data for cross-context behavioural advertising. We have not sold or shared any personal data to third parties for a business or commercial purpose in the preceding 12 months.

Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of our business, personal data may be transferred as part of that transaction. We will notify you via our website or by email before your data becomes subject to a materially different privacy policy.

Legal disclosures: We may disclose personal data if required by law, court order, or to protect the rights and safety of QZON, our users, or the public.

6. International Data Transfers

Our primary infrastructure is located in India and the United States. If you are located in the EEA, UK, or Switzerland, your data may be transferred to and processed in countries that do not have data protection laws equivalent to your own.

Where such transfers occur, we use the European Commission's Standard Contractual Clauses (SCCs) as the appropriate safeguard. These SCCs contractually require all recipients to process EEA/UK-originating data in accordance with European data protection standards. Copies of our SCCs are available on request at qzonhq@gmail.com.

We apply equivalent safeguards to all third-party processors who receive data originating from protected jurisdictions.

7. Data Retention

We retain personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law (e.g., tax, accounting, or regulatory obligations).

As a general guide:

• Client and project data — retained for the duration of the engagement plus any applicable statutory limitation period (typically up to 7 years under Indian law).

• Prospect and enquiry data — retained for a reasonable period to follow up, and deleted if no commercial relationship develops (generally up to 2 years).

• Website analytics data — retained in aggregated or anonymised form per Google Analytics' default retention settings.

When data is no longer required, we securely delete or irreversibly anonymise it. Where immediate deletion is not technically feasible (e.g., backup archives), we isolate the data from active processing until deletion is possible.

8. Your Global Privacy Rights

Regardless of where you are located, you can contact us at any time at qzonhq@gmail.com to exercise any of the rights below. We will respond within 30 days and will not discriminate against you for exercising these rights.

EU / UK / Switzerland (GDPR & UK GDPR)

You have the right to:

• Access — request a copy of the personal data we hold about you

• Rectification — correct inaccurate or incomplete data

• Erasure — request deletion of your data ("right to be forgotten")

• Restriction — ask us to pause processing in certain circumstances

• Portability — receive your data in a structured, machine-readable format

• Objection — object to processing based on legitimate interests or for direct marketing

• Human review — request human review of any automated decision with significant effects on you

Supervisory Authority Complaints:

• EEA residents: Contact your national data protection authority.

• UK residents: Contact the Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint | Helpline: 0303 123 1113 | Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

• Switzerland residents: Contact the Federal Data Protection and Information Commissioner (FDPIC).

We will acknowledge complaints within 30 calendar days of receipt and keep you informed throughout the process.

California & US State Residents (CCPA / CPRA and State Laws)

If you reside in California, Colorado, Connecticut, Virginia, Texas, Oregon, or another US state with a comprehensive privacy law, you have the right to:

• Know whether and how we are processing your personal data

• Access your personal data and obtain a copy

• Correct inaccuracies in your personal data

• Delete your personal data

• Opt out of the sale or sharing of personal data for targeted advertising

• Non-discrimination for exercising any of these rights

• Limit use of sensitive personal data (where applicable under California law)

What we collect (past 12 months): Identifiers (Category A) and California Customer Records information (Category B) as defined under California law. We have not collected, sold, or disclosed for a business purpose any other CCPA categories.

California "Shine the Light" (Civil Code § 1798.83): California residents may request, once per year and free of charge, information about personal data disclosed to third parties for direct marketing purposes. Submit requests to qzonhq@gmail.com.

Authorised Agents: You may designate an authorised agent to submit requests on your behalf by providing written, signed permission. We may verify your identity and the agent's authorisation before processing the request.

Appeals: If we decline your request, you may appeal by emailing qzonhq@gmail.com. We will provide a written explanation. If your appeal is denied, you may submit a complaint to your state attorney general.

India Residents (Digital Personal Data Protection Act, 2023)

Under the DPDP Act, you have the right to:

• Access a summary of your personal data and how it has been processed

• Correction and erasure of inaccurate, incomplete, or no-longer-necessary data

• Grievance redressal — raise concerns with us directly, with a right to approach the Data Protection Board of India if unresolved

Submit requests to qzonhq@gmail.com. We will respond within the timeframes prescribed by applicable law.

9. Security Standards

We implement administrative and technical safeguards proportionate to the nature of the data we hold, including:

• Encryption of data in transit (TLS/HTTPS)

• Access controls limiting data access to authorised personnel on a need-to-know basis

• Regular review of security procedures and third-party processor compliance

No method of electronic transmission or storage is 100% secure. While we take reasonable and appropriate steps to protect your data, we cannot guarantee absolute security. You access our services at your own risk and should do so only from secure environments.

10. Children's Privacy

Our services are directed exclusively to adults. We do not knowingly collect personal data from anyone under the age of 18 (or the minimum age required by applicable law in your jurisdiction, whichever is higher), nor do we market to minors.

If you believe we have inadvertently collected data from a minor, please contact us immediately at qzonhq@gmail.com. We will promptly delete that data from our records.

By using our services, you confirm that you are at least 18 years of age, or that you are a parent or legal guardian consenting on behalf of a minor.

11. Policy Updates & Contact

We review and update this policy periodically to reflect changes in law, our practices, or our services. The "Last Updated" date at the top of this document reflects the most recent revision.

For material changes, we will provide at least 14 days' advance notice via a prominent notice on our website or by direct email. Continued use of our services after that date constitutes acceptance of the revised policy.

To exercise your rights, raise a concern, or ask any question about this policy:

📧 qzonhq@gmail.com
🌐 qzon.world/contact

QZON | India

This policy applies to all personal data processed through qzon.world and QZON's consulting services.