Privacy Policy

This Privacy Policy explains how OzaviOS ("OzaviOS", "we", "us", or "our") collects, uses, shares, and protects personal data when you visit ozavios.com (the "Website"), request an AI Business Audit, contact us, or engage us to design and operate a custom AI Decision System (the "Services"). OzaviOS is part of Ozavion Limited. It also sets out your rights and how to exercise them.

1. Who we are and our role

For personal data about visitors to our Website and people who contact us or request an audit, OzaviOS is the data controller, and this policy governs that processing. We are part of Ozavion Limited, registered in England and Wales (company no. 16814450), registered office 86-90 Paul Street, London, EC2A 4NE, United Kingdom. Ozavion Limited is registered with the UK Information Commissioner's Office (ICO) under registration reference ZC055758.

When we build and operate a custom AI Decision System for a business client, we typically process the data held in that client's connected systems on the client's behalf and instructions. In that context the client is the controller and OzaviOS acts as a processor; that processing is governed by our written services agreement and data-processing terms with the client, not by this policy.

2. The data we collect

Information you give us

• Contact and enquiry details — your name, work email, telephone number, company name, role, and industry — when you request an AI Business Audit, use a contact form, or otherwise get in touch.
• The content of your enquiry, including the decision problems, systems, and data sources you describe to us.
• Account, project, and billing details if your organisation becomes a client.

Information we collect automatically

• Basic technical data needed to serve the Website securely, such as your IP address, browser and device type, and the pages you view, held in limited server logs.
• Analytics data, collected only where you have given consent on our cookie banner. See our Cookie Policy.

Information we process to deliver Services

To build a decision system we connect to the business data sources a client asks us to use — for example CRM records, advertising and analytics platforms, accounting tools, and spreadsheets. We process that data as the client's processor, under our agreement with them.

3. How and why we use your data

Where UK GDPR applies, we rely on the following lawful bases:

Where we rely on legitimate interests, we have weighed those interests against your rights and concluded that our use does not override them. You can object at any time using the contact details below.

4. Cookies and analytics

Only essential cookies run when you first arrive. Privacy-friendly analytics load only after you select "Accept" on our cookie banner, and you can decline or change your choice at any time. Full details, including the specific cookies we set, are in our Cookie Policy.

5. Sharing your data

We do not sell your personal data. We share it only where necessary, with:

• Service providers that help us run our business — for example hosting, email, and analytics providers — under contracts that require them to protect it;
• Professional advisers, such as accountants and lawyers, where reasonably required;
• Authorities or regulators where we are legally obliged to do so;
• A successor organisation in connection with a merger, acquisition, or reorganisation, subject to this policy.

6. International transfers

We aim to keep personal data within the UK and EEA. Where a provider processes data outside those areas, we put appropriate safeguards in place — such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses — so your data keeps an equivalent level of protection.

7. How long we keep it

We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires. Enquiry and contact records are kept for a reasonable period after our last contact; client and contract records for the life of the engagement and for as long afterwards as the law requires; and financial records for at least six years, as UK tax law requires.

8. Your rights

Under UK data protection law — the UK GDPR and the Data Protection Act 2018 — you have the right to be informed about how we use your data, to access a copy of it, to have inaccurate data corrected, to have your data erased in certain circumstances, to restrict or object to our processing, to data portability where it applies, and to withdraw consent at any time where we rely on it.

To exercise any of these rights, email us at info@ozavios.com. We will respond within one month, and there is normally no charge.

9. How we protect your data

We apply appropriate technical and organisational measures — including least-privilege access, encryption in transit, and audited logging — designed to protect personal data against unauthorised access, loss, or misuse, and we work only with reputable providers. No method of transmission or storage is completely secure, but we work to protect your data and to respond appropriately to any incident.

10. Children

Our Website and Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal data from children.

11. Complaints

If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows the latest version, and material changes will be communicated to clients directly where appropriate.

13. Contact us