Privacy policy

This policy explains what personal information Protocolzone collects through this website, why we collect it, who processes it on our behalf, how long we keep it, and the rights you can exercise. We serve clients globally, so it is written to meet the standards of the EU and UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), the Australian Privacy Principles, and India's Digital Personal Data Protection Act 2023.

Who we are

Protocolzone Private Limited (“Protocolzone”, “we”, “us”) is the data controller for information collected through this website. We are based in Ahmedabad, India; our postal address is in the Contact section below. We have no office or legal entity in Australia or the EU — where a supervisory authority or local representative is referenced below, it is the authority in your own country that you may approach.

The information we collect

When you simply browse. Our host, Cloudflare, processes limited technical data — your IP address, the request, and your browser and operating system type — to serve the site, keep it secure and defend against attacks. We also use Cloudflare Web Analytics, which is cookieless: it produces aggregate counts (page views, referrers, countries) and does not set advertising cookies, does not fingerprint you, and does not track you across other sites. Because of that, this site does not need — and does not show — a cookie-consent banner.

When you contact us or apply for a job. If you use a form on this site, we collect only what you submit:

• Business / contact enquiries — your name, email address, optionally your company, and your message. These go to kmodi@protocolzone.com.
• Job applications — your name, email, phone, the role you are applying for, your message, and any CV or attachment you choose to upload. These go to hr@protocolzone.com.

Each form is protected by Cloudflare Turnstile, a privacy-preserving bot check that confirms a human is submitting the form. It processes a one-time token and your IP for that purpose and does not track you across sites. Providing information through a form is voluntary; if you do not wish to submit it here, you can email the addresses above directly.

How we use your information, and our lawful basis

• To answer you — respond to a business enquiry or process a job application. Lawful basis: our legitimate interest in responding to you and, for applications, taking steps at your request towards possible employment.
• To run and secure the site — deliver pages, prevent abuse and fraud, and keep the service available. Lawful basis: legitimate interest in the security and integrity of our website.
• To understand usage in aggregate — via cookieless analytics that identify no individual. Lawful basis: legitimate interest in improving the site.
• To meet legal obligations — where we must retain or disclose information to comply with the law or respond to a lawful request. Lawful basis: legal obligation.

We do not sell or share your personal information for advertising, we do not use it for automated decision-making that produces legal effects, and we do not send marketing email unless you have asked us to.

Cookies, analytics and local storage

This site does not use advertising or cross-site tracking cookies. It stores one value in your browser's local storage — your light/dark theme preference (pz-theme) — which is strictly functional, stays on your device, and is never sent to us. Analytics are cookieless (above). Cloudflare Turnstile may set a short-lived token strictly to run the bot check on a form. None of this requires consent under the ePrivacy Directive, which is why there is no cookie banner.

Who we share it with

We do not sell your personal information. We share it only with the service providers (sub-processors) that operate this website on our behalf, each bound by contract to protect it and use it only on our instructions:

• Cloudflare, Inc. — website hosting and delivery, the Turnstile bot check, and cookieless Web Analytics.
• Resend (Plusdocs, Inc.) — delivery of the email a form generates to our inbox. Your submission is transmitted to our address via this provider.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, property or safety of Protocolzone, our clients or others.

International transfers

We operate from India and our providers operate globally, so your information may be processed in India, the United States, the EU and other countries. Where information moves out of the EU, UK or Australia, we rely on recognised safeguards for that transfer — such as the European Commission's Standard Contractual Clauses and equivalent mechanisms — and on providers that offer them.

How long we keep it

• Business enquiries — kept for as long as needed to handle your enquiry and any resulting relationship, then deleted or archived per our retention practice.
• Job applications — kept for up to 12 months to consider you for the role and closely related roles, then deleted, unless you are engaged or you ask us to keep them longer.
• Security and server logs — kept only for the short period needed to operate and protect the site.

Your rights

Subject to your local law, you may have the right to:

• Access — ask what personal information we hold about you and how we process it.
• Rectification — ask us to correct information that is inaccurate or incomplete.
• Erasure — ask us to delete your information in certain circumstances.
• Restriction — ask us to pause processing in certain circumstances.
• Objection — object to processing based on our legitimate interests.
• Portability — receive information you gave us in a structured, machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time.
• Complain — lodge a complaint with your data protection authority.

If you are in California, you have the right to know, delete and correct your personal information, and to opt out of its sale or sharing — we do not sell or share it — and we will not discriminate against you for exercising these rights.

If you are in Australia, you may request access to and correction of your personal information under the Australian Privacy Principles, and may complain to the Office of the Australian Information Commissioner (OAIC).

If you are in the EU or UK, you may complain to your local data protection authority. To exercise any right, contact us using the details below; we will respond within the time your law requires, and at no charge unless the request is manifestly unfounded or excessive.

Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit (HTTPS), a bot check on forms, and access controls on the inboxes that receive submissions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect what you send.

Children

This is a business website not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Links to other sites

Our website and our products link to other sites, including our own product sites and social media, whose privacy practices differ from ours. We do not control those sites and are not responsible for their practices; please read their notices.

Changes to this policy

We may update this policy as our practices or the law change. When we do, we will revise the effective date at the top of this page. Material changes will be made prominent. Please review it periodically.

Contact

To exercise any right, or for any question about this policy or how we handle your information, write to us at kmodi@protocolzone.com or at the address below.

Protocolzone Private Limited
B/1105, Titanium Heights
Near Vodafone House, Corporate Road
Makarba, Ahmedabad – 380015
Gujarat, India

Other ways to reach us are listed on the contact page.