Legal & Privacy
Privacy Policy
How OndraTech handles business inquiries, website preferences, and data protection.
Last updated: October 2026
1. Overview & Scope
This Privacy Policy explains how Ondratech ("OndraTech", "we", "our", or "us") collects, uses, stores, and protects personal and business contact information when you visit https://ondratech.com or communicate with us regarding our technology services.
We design our website with data minimization in mind: we collect only the information reasonably necessary to respond to business inquiries, prevent automated abuse, and deliver contracted technology services.
2. Information We Collect
When you submit an inquiry through our contact form, you may voluntarily provide:
- Contact details such as your full name, email address, and company or organization name.
- Project context, desired service capability, estimated budget range, and any message content you choose to share.
- Technical security metadata (such as IP address, request timestamp, and anti-spam verification signals) processed strictly to protect our forms against automated abuse and denial-of-service traffic.
- Interface preference data stored locally in your browser (such as light or dark color theme selection) separately from optional tracking consent.
3. How We Use Information
We process collected information strictly to:
- Review and respond to project inquiries, technical questions, and consultation requests.
- Prepare statements of work, mutual non-disclosure agreements (NDAs), and service proposals requested by your organization.
- Maintain website security, rate-limit abusive automated submissions, and ensure reliable service availability.
- Comply with applicable legal, accounting, and contractual obligations.
4. Optional Analytics, Advertising & Attribution
Google Analytics 4, Meta Pixel, and LinkedIn Insight Tag are optional integrations. They load only when a genuine account ID is configured and you opt in to the relevant category. Reject optional tracking, allow analytics only, or accept all using Privacy preferences when integrations are enabled.
Analytics may measure page visits, calls to action, enquiry success, and website performance. Marketing tags may measure enquiry conversions and advertising audiences. Contact names, email addresses, and message contents are not included in our analytics events. Vendor tags may process device data, IP addresses, page URLs, and cookies after consent. These services may process information internationally under their own privacy policies.
With analytics consent, we keep the first landing-page path, referrer hostname, and UTM campaign values in session storage to include with an enquiry. Without analytics consent, landing-page and campaign context stays only in page memory during navigation and is included only when you submit an enquiry. It is lost on a full reload; no attribution cookie or storage entry is created. Do not put personal or confidential information in campaign URLs.
Your choice is stored locally. Privacy preferences lets you change it; withdrawing consent removes known first-party tracking cookies and reloads the page to stop optional scripts. Previously collected data and third-party cookies are controlled by the relevant provider. Contact us with deletion requests.
5. Data Sharing & Third-Party Processors
OndraTech does not sell, rent, or trade personal information to data brokers or advertising networks.
We use Cloudflare to host the website and Zoho CRM to receive and manage contact form submissions.
6. International Transfers & Retention
Because OndraTech serves international business clients, inquiry information may be accessed by our authorized staff across jurisdictions where we operate, subject to access controls and encryption in transit (HTTPS/TLS).
We retain business inquiry records only as long as necessary to address your request, maintain active client relationships, or satisfy applicable legal record-keeping requirements.
7. Security Practices
We apply technical and organizational safeguards including HTTPS/TLS encryption in transit, strict input validation, least-privilege access to business inboxes, and server-side rate limiting. Do not submit production passwords, private cryptographic keys, or regulated personal health/payment data through public web forms; request a secure channel or mutual NDA first.
8. Your Privacy Rights & Contact
Depending on your jurisdiction, you may request access to, correction of, or deletion of personal contact details you have submitted to OndraTech. To exercise these rights, use the contact form.
Questions regarding this policy? Use our contact form.
Contact OndraTech →