Privacy Policy
Learn how Ozone Limited protects, processes, and respects your personal and enterprise data across our software engineering engagements, AI pipelines, and digital platforms.
Jump to Section (13 clauses)
At Ozone Limited, data privacy and software security are central to our architectural principles. We adhere strictly to international data protection regulations, including the European Union General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), the UAE Personal Data Protection Law (PDPL), and applicable national privacy statutes. We never sell, rent, lease, or monetize your personal or client data under any circumstances.
Data Controller & Overview
This Privacy Policy applies to all personal information collected and processed by Ozone Limited (“Ozone”, “we”, “us”, or “our”) when you visit our primary domain at ozoneltd.com, engage our digital engineering teams, submit consultation requests, or utilize our customer portals.
Data Controller Designation: Ozone Limited operates as the independent Data Controller for personal data gathered directly via our website inquiries, job applications, and business development communications.
Data Processor Role: When delivering custom enterprise software, cloud infrastructure, or multi-tenant SaaS platforms to corporate clients, Ozone Limited acts as a Data Processor operating under a bilateral Data Processing Agreement (DPA). In such instances, the client remains the Data Controller.
Information We Collect
We gather information through three principal channels: information you provide voluntarily, technical telemetry gathered automatically, and project-specific technical assets:
- Full name, corporate email address, and phone numbers.
- Company name, job title, and project budget requirements.
- Project briefs, technical specifications, and API access credentials.
- Communication logs, contract feedback, and payment billing details.
- IP address (anonymized at capture) and general geo-location.
- Browser type, device architecture, and operating system.
- Pages visited, session duration, and referral URLs.
- Performance diagnostics, load times, and UI error events.
How We Use Your Data & Legal Bases
We process personal data only when an established legal basis under Article 6 of the General Data Protection Regulation (GDPR) or equivalent international legislation exists:
To review project requirements, prepare Statements of Work (SOWs), deliver software engineering milestones, deploy infrastructure, and conduct code handovers.
To protect our digital systems against cyber threats, improve website performance, optimize user navigation, and conduct anonymized business analytics.
To maintain financial tax records, prevent money laundering, comply with statutory audits, and honor legal requests from competent courts.
For elective marketing communications or specialized non-essential cookie telemetry, which you may withdraw at any time.
AI Workflows & Zero-Training Guarantees
Ozone Limited implements strict corporate AI governance. When we build or integrate artificial intelligence models (such as LLMs, vector search, or autonomous agents) into your projects:
- No Public Model Training: Client source code, database contents, intellectual property, and proprietary data are never submitted to train public foundational models (such as public OpenAI, Anthropic, or Google Gemini base training pools).
- Enterprise API Isolation: We exclusively configure enterprise-tier endpoints operating under strict zero-data-retention (ZDR) and customer-isolated encryption agreements.
- On-Premises & Private Cloud Options: For regulated sectors (Healthcare, Fintech, Defense), we architect fully self-hosted, private open-source LLMs (such as Llama 3 via Ollama or vLLM) isolated inside client VPCs with zero external network leakage.
Subprocessors & Third-Party Sharing
Ozone Limited engages verified cloud service providers and subprocessors to deliver reliable infrastructure. Each subprocessor undergoes rigorous technical security reviews and executes Data Processing Addendums (DPAs):
| Subprocessor | Purpose | Data Location | Security Standard |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Hosting & Computing Infrastructure | US / EU / UAE / APAC | ISO 27001, SOC 2 Type II |
| Hostinger International | Production Hosting & Editorial CMS Database | EU / USA | ISO 27001, GDPR Compliant |
| GitHub (Microsoft) | Private Source Code Repositories & CI/CD | USA / EU | SOC 1/2, FedRAMP, GDPR |
| Google LLC (GA4) | Aggregated Web Traffic Analytics | Global (IP Anonymized) | ISO 27001, Privacy Framework |
International Cross-Border Data Transfers
As an international engineering consultancy serving clients across North America, Europe, the Middle East, and Asia-Pacific, information may be transferred to and maintained on computing systems located outside your resident country.
Whenever we transfer personal information internationally, we enforce compliant transfer mechanisms, including the European Commission's Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTA), and equivalent statutory safeguards to ensure your information retains identical protection regardless of destination.
Data Retention & Automatic Deletion
We retain personal and client information only for the duration strictly necessary to fulfill the purposes for which it was collected:
- Inquiry & Consultation Data: Retained for 12 months following last communication, after which it is automatically permanently purged from our CRM.
- Project Code Repositories & Build Artifacts: Maintained for the duration of the engagement plus 90 days following final sign-off, or immediately handed over and deleted upon client request.
- Financial & Invoicing Records: Retained for 7 years to satisfy statutory tax, auditing, and corporate accounting laws.
Technical & Organizational Security Measures
We utilize defense-in-depth security architectures aligned with ISO/IEC 27001 and SOC 2 guidelines:
AES-256 bit encryption at rest for all stored databases and storage volumes; TLS 1.3 encryption in transit across all HTTP/API endpoints.
Strict Principle of Least Privilege (PoLP), mandatory hardware-key or authenticator Multi-Factor Authentication (MFA), and audit logging on all developer environments.
Your Global Data Protection Rights
Regardless of your physical location, Ozone Limited provides transparent data rights:
- Right of Access & Portability: Obtain confirmation of processing and request a machine-readable copy of your personal data.
- Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal records.
- Right to Erasure (“Right to Be Forgotten”): Request unconditional deletion of your personal data when no overriding legal ground persists.
- Right to Restrict or Object: Restrict processing or object to processing based on legitimate interests or direct communications.
- Right to Non-Discrimination: We never deny service, adjust pricing, or decrease software quality for exercising your privacy rights.
To exercise any of these statutory rights, submit a written notice to our privacy officer at connect@ozoneltd.net. We respond to verified requests within thirty (30) calendar days at zero cost.
Children's Privacy Protections
Our digital engineering services and websites are intended exclusively for commercial enterprises, working professionals, and individuals aged 18 or older. We do not intentionally collect personal data from minors under 16 years of age. If we learn of unintended collection, we will immediately execute permanent deletion.
Policy Modifications & Version History
We periodically update this Privacy Policy to reflect advancements in technology, emerging regulatory standards, or operational developments. All revisions take effect upon publication with a refreshed “Last Updated” date at the top of this document. Material changes will be accompanied by prominent notifications on our homepage.
Data Protection Officer (DPO) Contact
If you have any questions, regulatory inquiries, or privacy complaints regarding our data processing procedures, you may reach our compliance department directly:
Organization: Ozone Limited
Attention: Privacy Compliance & Data Protection Officer
Email: connect@ozoneltd.net
Phone: +92 301 953 1648
Physical Address: Office No 3 First Floor Islamabad Arcade, G-11 Markaz Islamabad
Have questions about our legal agreements?
Our legal counsel and compliance officers are readily available to assist with vendor security questionnaires, Data Processing Agreements (DPAs), and non-disclosure execution.