Privacy Policy

1. What is the scope of this privacy policy?

Direct Answer: This privacy policy details how Zenlio collects, processes, and protects your personal data when you use our website. We operate in strict compliance with data privacy regulations, including the Digital Personal Data Protection Act, 2023, ensuring transparency and security.

Zenlio ("we," "our," or "us") operates the Zenlio website. We are committed to protecting your personal data and respecting your privacy in accordance with applicable laws, including the Digital Personal Data Protection (DPDP) Act, 2023 (India). This Privacy Policy describes how we collect, use, and store information when you interact with our website.

2. What personal information does Zenlio collect?

Direct Answer: Zenlio collects only the personal information you voluntarily submit through our contact and data-rights forms. This consists of your name, email address, optional phone number, text queries inside form message fields, and explicit consent metadata containing the timestamp and policy version.

We only collect personal information that you voluntarily provide to us when using our contact forms or data-rights forms:

• Contact Details: Your Name, Email Address, and Phone Number (optional).
• Message / Request Contents: Any text, queries, or information you provide in our form message fields.
• Consent Metadata: Explicit records of consent (including purpose, timestamp, and policy version) captured during form submission.

3. Why does Zenlio process your personal data?

Direct Answer: Zenlio processes your personal data strictly to respond to your service inquiries, compile website audits, and deliver services. We use Resend to securely route contact forms to our compliance mailbox, ensuring that data is never sold or shared for marketing.

In compliance with the DPDP Act 2023, we process your personal data strictly for specified, lawful purposes based on your explicit consent:

• Purpose: To respond to your service inquiries, coordinate consultations, and communicate about our offerings.
• Third-Party Processors: We use Resend (a secure, transactional email service) to route contact submissions and data rights requests directly to our compliance inbox (zenlio.agency@gmail.com). Personal data is processed on Resend's secure cloud servers (which may be located outside of India, such as in the United States).
• We do not sell, rent, share, or trade your personal data with third parties for marketing or analytical purposes.
• We do not store your form submissions in a persistent database; they exist solely as transactional emails in our inbox and Resend logs.

4. How long does Zenlio retain your personal data?

Direct Answer: Zenlio retains your personal data only as long as necessary to resolve your inquiry or fulfill our service obligations. Upon correspondence completion or when a deletion request is filed, we permanently erase all emails and contact logs within thirty days.

We retain your personal data only as long as necessary to fulfill the purpose for which it was collected (e.g., resolving your inquiry). Once the correspondence has ended or you request erasure, we will delete your emails and personal records within 30 days, unless required to retain it by other applicable laws.

5. Does Zenlio use tracking cookies?

Direct Answer: No, Zenlio does not use third-party tracking cookies, web beacons, or analytical scripts on this site. We only run a minimal local storage preference key to remember your cookie consent preferences, ensuring your privacy choices are respected automatically.

We do not employ any third-party advertising, analytics, or behavioral tracking scripts on our website.

We use a minimal local storage cookie configuration to store your consent choices under the key zenlio_cookie_consent. This is required solely to respect your consent preferences. Refer to our Cookie Policy for detailed descriptions.

6. How does Zenlio secure your personal data?

Direct Answer: Zenlio secures your personal data by encrypting all form transmissions with HTTPS protocol and protecting target mailboxes with multi-factor authentication. We restrict access to API keys and transactional email logs, preventing unauthorized access or disclosure.

We implement reasonable security safeguards to protect your personal data from unauthorized access, loss, or disclosure. All form transmissions are encrypted using standard HTTPS protocol. Access to our Resend API keys and target mailboxes is strictly restricted and protected by multi-factor authentication (MFA).

7. What are your statutory rights as a data principal?

Direct Answer: Under the India DPDP Act 2023, data principals have the right to access summaries of their personal data, request correction or erasure, withdraw consent, nominate others in case of incapacity, and file grievances with the Data Protection Board of India.

If you are an Indian citizen (Data Principal under the DPDP Act 2023), you have the following statutory rights regarding your personal data:

• Right to Access: Request a summary of the personal data we process about you and the processing activities we carry out.
• Right to Correction & Erasure: Request correction of inaccurate/outdated data, or the deletion/erasure of your personal data when it is no longer necessary for the purpose.
• Right to Withdraw Consent: Withdraw your consent at any time. Upon withdrawal, we will cease processing your personal data, subject to legal requirements.
• Right to Nomination: Nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
• Right to Grievance Redressal: Seek redressal for any complaints regarding the processing of your personal data by contacting us first. If your concern is not resolved, you have the right to file a complaint with the Data Protection Board of India (DPBI).

To exercise any of these rights, please submit a request through our dedicated Data Rights Request Portal.

8. How can you file a grievance or contact us?

Direct Answer: You can file a grievance or contact our compliance team directly by emailing zenlio.agency@gmail.com. We commit to acknowledging your request within forty-eight hours and fully resolving any data processing queries or complaints within thirty days.

If you have any questions, feedback, or complaints regarding the processing of your personal data, please contact us: