---

Last Updated: December 14, 2025

This Privacy Policy describes how ochre.digital (“we,” “us,” or “our”), a technology services company specializing in Odoo ERP, AI, and SaaS solutions for clients primarily in India and the Middle East & Africa (MEA), collects, uses, protects, and discloses information gathered during prospecting, client conversion, software implementation, and maintenance services.

1. Scope and Compliance

We are committed to protecting the privacy and security of the personal data entrusted to us. While we operate primarily in India and MEA, this policy is written with consideration for internationally recognized standards, including the principles of the European Union’s General Data Protection Regulation (GDPR) and relevant national laws in India and MEA.

2. Information We Collect

We collect information based on your relationship with ochre.digital:

A. Information Collected During Prospecting & Marketing (Leads)

This data is collected from public sources, business events, networking, and direct inquiries:

• Contact Data: Name, job title, company name, email address, phone number, and professional social media profiles (e.g., LinkedIn).
• Engagement Data: Records of communications, meeting notes, and marketing preference history.
• Website Usage Data (via Cookies): IP address, browser type, pages visited, and time spent on our website. (See Section 6).

B. Information Collected During Client Services (Implementation & Maintenance)

As a service provider, we receive data necessary to fulfill our contracts. This may include:

• Client Personnel Data: Names, titles, contact information, and necessary access credentials for the client’s internal system users (required for Odoo implementation/support).
• Project Data: Information shared in project management tools, technical specifications, and system logs.
• Client System Data (Processing): During implementation and maintenance, we may have access to the client’s sensitive business data (e.g., accounting, inventory, HR data). We act strictly as a Data Processor for this data, operating solely on the client’s instructions.

We use the collected information for the following purposes:

Category	Purpose	Legal Basis (GDPR/Principle)
Prospecting & Conversion	To contact you regarding our services, tailor our pitches, and schedule meetings.	Legitimate Interest (Business Development)
Service Implementation	To deliver the Odoo/SaaS implementation, configure the software, and provide training.	Performance of Contract
Billing & Administration	To process payments, manage contracts, and handle legal compliance.	Legal Obligation & Performance of Contract
Maintenance & Support	To diagnose and resolve technical issues within the global software solutions.	Performance of Contract
Website Optimization	To analyze website performance, track campaign effectiveness, and improve user experience.	Consent (for non-essential cookies) & Legitimate Interest

4. Data Sharing and Disclosure

We only share personal data when necessary to run our business or fulfill legal obligations:

• Subcontractors & Partners: We may share necessary contact or project data with trusted third-party Odoo, AI, or SaaS vendors/subcontractors assisting in service delivery, provided they adhere to equivalent data protection standards.
• Legal Requirements: We will disclose information when required to do so by law, court order, or governmental request in India, MEA, or any relevant jurisdiction.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. International Data Transfers (Global Software Services)

Given our focus on global software and clients in India and MEA, data may be transferred, stored, and processed in different geographical locations.

• By utilizing our services, you acknowledge that your information may be transferred across international borders.
• We ensure that any international transfer of data is protected by implementing Standard Contractual Clauses (SCCs) or equivalent legal mechanisms to safeguard your data.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to track activity on our website and hold certain information.

• Essential Cookies: Required for the website to function (e.g., security, user login).
• Analytical/Performance Cookies: Used to analyze traffic and user behavior (e.g., Google Analytics).
• Marketing Cookies: Used to track your interest and deliver targeted marketing material.

You have the right to accept or decline non-essential cookies via the banner displayed on our website.

7. Data Security

We implement robust technical and organizational measures designed to secure your personal data from accidental loss and unauthorized access, use, alteration, and disclosure. Measures include:

• Role-based access controls for client systems.
• Encryption of sensitive data transmission.
• Regular security audits and staff training.

8. Your Data Protection Rights

Depending on your location and the applicable laws (such as GDPR or regional MEA/Indian regulations), you may have the following rights:

• The Right to Access: Request a copy of the personal data we hold about you.
• The Right to Rectification: Request correction of any inaccurate or incomplete data.
• The Right to Erasure (“Right to be Forgotten”): Request that we delete your personal data under certain conditions.
• The Right to Restrict Processing: Limit the way we use your personal data.
• The Right to Object to Processing: Object to our processing of your personal data for direct marketing.
• The Right to Data Portability: Request transfer of your data to another organization.

To exercise any of these rights, please contact us using the details in Section 9.

9. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

ochre.digital

• Email: hi@ochre.digital
• Address: Noida, Uttar Pradesh, India. PIN: 201310