• Visit or use our website (www.zorixon.com)
• Engage with our services, whether as a client, partner, or end-customer of our clients
• Communicate with us via email, chat, phone, or other channels
• Apply for employment or engage with us for recruitment purposes

We process personal data in accordance with applicable laws, including the Indian IT Act & Digital Personal Data Protection Act (DPDP), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), where applicable.

By using our website or services, you agree to the practices described in this Privacy Policy.

• Data collected automatically when you use our website
• Data processed on behalf of our clients (acting as a Data Processor)
• Data obtained from third parties (partners, vendors, job portals)
• Data we collect directly from you

• Full name, email address, phone number, physical address
• Government-issued IDs (if required by law or contract)
• Client account details, customer ID, or service reference numbers
• Payment or billing details (credit/debit card numbers, bank account info, tax details)
• Employment data (resume, qualifications, previous employment, references, background checks)

• Health data (if supporting healthcare clients)
• Financial information (for fintech-related services)
• Call recordings, chat transcripts, or support history (for quality assurance)

• Browser type, device type, operating system
• IP address, geolocation (approximate)
• Website usage statistics (time spent, pages viewed, referring websites)
• Aggregated and anonymized analytics

• Directly from you: When you contact us, sign up for services, apply for jobs, or submit forms.
• Automatically: Through cookies, analytics tools, and tracking technologies when you use our website.
• From clients: When our clients share customer data with us to provide support services.
• Third parties: Recruitment platforms, business partners, service providers.

• Service Delivery – to provide customer support, handle tickets, resolve queries, and deliver contracted services.
• Communication – responding to inquiries, sending updates, service notifications, and promotional materials (only with consent).
• Business Operations – invoicing, billing, accounting, and internal record-keeping.
• Website Improvement – analyzing trends, monitoring site performance, and enhancing user experience.
• Security & Compliance – fraud detection, risk assessment, system monitoring, legal obligations.
• Recruitment & Employment – processing applications, verifying credentials, and HR records.
• Research & Development – improving our services and developing new solutions.

• Consent – When you voluntarily provide data (e.g., forms, cookies).
• Contractual Necessity – To deliver services under a client agreement.
• Legal Obligation – To comply with tax, regulatory, or statutory requirements.
• Legitimate Interests – For security, analytics, fraud prevention, and improving services.

• We retain personal data only as long as necessary for the purposes outlined in this policy.
• Retention periods may vary depending on contractual, regulatory, or legal requirements.
• After the retention period, data is securely deleted, anonymized, or archived.

• Encryption for data at rest and in transit.
• Secure firewalls, access controls, and monitoring tools.
• Restricted access to personal data (only authorized staff on a need-to-know basis).
• Regular security audits, penetration testing, and compliance checks.
• Employee confidentiality agreements and mandatory data protection training.

• With Clients: For service delivery and reporting.
• With Service Providers: Cloud hosting, analytics, communication tools (under strict data protection agreements).
• With Regulators / Legal Authorities: If required by law, court order, or regulatory compliance.
• Business Transactions: During mergers, acquisitions, or restructuring (with prior notice).

We never sell your personal data to third parties.

• We use cookies, web beacons, and similar technologies for website functionality, analytics, and personalization.
• Types of cookies: essential, functional, performance, marketing.
• You can manage or disable cookies in your browser settings, though some features may not work properly.

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Request portability (receive a copy in machine-readable format)
• Withdraw consent at any time
• Opt-out of marketing communications

To exercise these rights, contact us at info@zorixon.com

• Our services are not directed at children under 18.
• We do not knowingly collect data from minors.
• If we discover that such data has been collected, we will delete it immediately.

• We will promptly investigate and take corrective measures.
• Affected individuals and regulatory authorities will be notified as required by law.