Privacy Policy

This website (onzura.com) is operated by ONZURA ("ONZURA", "we", "us" or "our"), a website development and digital growth studio based in India.

If you have any questions about this policy or how your information is handled, you can reach us by email at info@onzura.com or on WhatsApp at +91 8827926291.

ONZURA is in the process of formalising its registered business details and a dedicated contact for privacy requests. Until then, please use the email above, which is monitored during business hours.

This policy applies to the public ONZURA website and the enquiry channels on it (the project brief form and the quick contact links). It does not cover third-party services we link to, such as WhatsApp, which have their own privacy policies.

When you send a project brief or enquiry through the site, we collect the details you choose to provide:

• Your name
• Your business name (optional)
• Your email address
• Your phone / WhatsApp number
• The type of project you're interested in
• Your timeline (optional)
• Any project details you write in the message

The project brief form also opens WhatsApp with these details pre-filled, so you can send them to us there. When you do, that message is handled by WhatsApp (owned by Meta) under its own terms and privacy policy.

You don't have to give us this information, but we need your name and a way to reach you (email and phone) to respond to an enquiry.

When you submit an enquiry, our servers also record a small amount of technical information alongside it, to help us respond, keep records and protect the form from abuse:

• Your IP address
• Your browser's user-agent string (device/browser type)
• The date and time of the submission
• The page you submitted from

If you arrive at the site through one of our marketing or ad campaign links (a link carrying campaign parameters such as utm_source or a Facebook click identifier, fbclid), we store those campaign details in a first-party cookie so we can understand which campaign an enquiry came from. See our Cookie Policy for the full detail.

The public website does not currently run general web analytics (such as Google Analytics) or a client-side advertising pixel. If that changes, this policy and the Cookie Policy will be updated first.

We use a single first-party cookie for marketing attribution (set only when you arrive via a campaign link), plus a browser storage key that controls a one-time WhatsApp prompt. We don't use third-party advertising or analytics cookies on the public site. Our Cookie Policy explains each one and how to control them.

We use the information above to:

• Respond to your enquiry and discuss your project
• Send you an acknowledgement email and, internally, a notification to our team
• Keep a record of the enquiry in our customer relationship management (CRM) system so nothing is missed
• Understand which marketing campaigns bring enquiries, so we can improve them
• Protect our forms from spam and abuse (for example, rate-limiting by IP)

We do not sell your personal information, and we do not use it for automated decisions that produce legal or similarly significant effects about you.

Where we run advertising with Meta (Facebook/Instagram), we may use Meta's Conversions API to measure which ads lead to enquiries. This is a server-to-server integration driven by our CRM — not a tracking pixel in your browser.

What is shared, and how

When this measurement is active, we may send Meta a limited set of information about a lead event — for example a hashed (SHA-256) version of your email address and phone number, and the campaign click identifier (fbclid) if one was captured. Hashing turns a value into a fixed code; Meta uses it to match events to accounts. Hashing reduces exposure but is not the same as anonymisation — a matching service can still link a hash back to a person, so we treat hashed identifiers as personal information.

This Meta integration is off by default and only operates when ONZURA has explicitly configured and enabled it. Whether it is currently active is a business/configuration decision recorded internally; if it is enabled, the processing described here applies.

We share personal information only with service providers who help us run the website and respond to you, and only as needed:

• Our website and database hosting provider (which stores the enquiry and CRM records)
• Our email service provider, which delivers the notification and acknowledgement emails over SMTP
• Meta, for advertising measurement via the Conversions API, where that is enabled (hashed identifiers as described above)
• WhatsApp (Meta), when you choose to message us there

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety and property of ONZURA, our clients or others. We are not naming specific vendors here until they are confirmed; where the law requires it, we will identify our processors on request.

We keep enquiry and CRM records for as long as we need them to respond to you, to manage an active or prospective project, and to keep reasonable business and tax records afterwards. The marketing attribution cookie expires 90 days after your campaign visit.

If you'd like us to delete an enquiry you sent, email us and we'll do so, subject to any records we're required to keep by law.

We take reasonable technical and organisational measures to protect personal information — including transport encryption (HTTPS), access controls on our CRM, rate-limiting and spam protection on our forms, and hashing of identifiers sent for advertising measurement.

No method of transmission or storage is completely secure, so while we work to protect your information, we can't guarantee absolute security.

You can:

• Choose not to submit an enquiry, or contact us by phone/WhatsApp instead
• Ask us for a copy of the enquiry information we hold about you
• Ask us to correct or update it
• Ask us to delete it, subject to records we must keep by law
• Manage or clear the attribution cookie through your browser settings (see the Cookie Policy)

India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 set out additional rights (such as access, correction, erasure, grievance redressal and nomination) and obligations. The Rules were notified in November 2025, and their principal provisions are scheduled to come into force in stages — with the core duties and individual rights expected to apply from 2027. We are aligning our practices with that framework; until the relevant provisions are in force, the Information Technology Act, 2000 and its rules continue to apply. To exercise any request, email us at the address above.

ONZURA is based in India and serves clients in India and abroad. Some of our service providers (for example, email, hosting or Meta) may process information on servers located outside India. Where that happens, we take reasonable steps to ensure your information continues to be handled in line with this policy and applicable law.

Our website and services are intended for businesses and adults. We don't knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we'll delete it.

We may update this policy as our website, services or legal obligations change. When we do, we'll revise the "last updated" date at the top. For significant changes, we'll make the update clear on this page.