Loading page...
Loading page...
Last updated:
This policy explains what information the Mozenthra website collects, how the current website code uses it, who may receive it, and how you can make a privacy request. It applies when you visit mozenthra.com, use its cookie controls, or submit the project enquiry form.
The business names supplied for this policy are Mozenthra Limited and Mozenthra Private Limited, with offices in Austin, USA; Noida, India; and London, UK. The relevant Mozenthra entity acts as the data controller under UK law and, when the relevant provisions apply, as the Data Fiduciary under India's DPDP framework for the processing it determines. The specific entity responsible for a particular enquiry depends on the customer relationship and is marked for confirmation below.
For privacy requests, contact info@mozenthra.com. The site also publishes sales@mozenthra.com for sales enquiries. We have not confirmed a dedicated privacy contact, a formally appointed Data Protection Officer, or the India grievance officer; see the publication TODOs at the end of this policy.
mozenthra_consent cookie stores "accepted" or "rejected" for one year, unless you clear it sooner. The site uses browser session storage for form attribution as described above. The admin session cookie is limited to the admin area, is HTTP-only and SameSite=Strict, expires after eight hours, and is marked Secure in production.| Purpose | Information used | Basis where required |
|---|---|---|
| Respond to a requested consultation, assess the project brief, and prepare a quote. | Contact fields, service and budget selections, message, page and campaign details. | Taking steps at your request before a possible contract; the form also requires consent to process the details and share them with the sales CRM. |
| Save and manage enquiries, prevent duplicate submissions, and maintain the sales workflow. | Enquiry record, timestamps, status, and CRM delivery state. | Steps requested before a contract and, where applicable, our legitimate interests in managing enquiries and keeping the service reliable. |
| Prevent abuse and protect the website and admin area. | Keyed rate-limit digests, request counts, timestamps, and limited security logs. | Legitimate interests in protecting the website and its users, subject to applicable law. |
| Measure site visits and interactions. | Consent-gated page-view and selected interaction events. | Your optional cookie/analytics consent. Analytics does not load after you reject non-essential cookies. |
| Meet legal duties or establish, exercise, or defend legal claims. | Only records relevant to the applicable duty or claim. | Legal obligation or legitimate interests, as applicable. |
The current application has no automatic retention or deletion schedule for enquiry records. Records remain in the PostgreSQL database until an administrator or database operator deletes them. The admin dashboard can change enquiry status and export records, but does not provide a delete control. CRM webhook event keys are linked to an enquiry and are removed by the database if that enquiry is deleted. We have not confirmed the separate retention settings used by Resend, SignSpace, Google Analytics, or the production hosting and database providers. Those periods must be confirmed and a documented enquiry-retention schedule established before publication.
Necessary site functions do not depend on analytics consent. In production, the Google tag is configured only when a measurement ID is provided. The tag is not downloaded until you select Accept. Before that, Consent Mode values default to denied. Accept updates analytics and advertising-related Consent Mode values to granted; the code currently has no separate advertising campaign tag. Reject non-essential leaves those values denied and does not load the Google Analytics script.
You can change your choice at any time using Cookie settings in the footer, or select Reject non-essential in the banner. This updates the choice cookie and stops future consent-gated analytics events. Withdrawing consent does not affect processing that already occurred. You can also clear the cookie in your browser. The first-party choice cookie is not marked HttpOnly because the banner reads and writes it in the browser; it is marked Secure when the site is served over HTTPS and uses SameSite=Lax.
The application does not maintain a mailing-list subscription. It sends an internal notification for a project enquiry; that notification does not subscribe you to marketing email. If Mozenthra sends commercial email in the future, it will identify the sender and provide required opt-out controls under applicable rules, including the US CAN-SPAM Act.
Mozenthra has offices in the USA, India and UK, and its CRM, email, analytics, hosting and database providers may process information in other countries. The live service regions and staff access arrangements have not been established by this code repository. Where UK data is transferred to a separate organisation outside the UK, we will use a transfer mechanism permitted by UK GDPR, such as an applicable adequacy regulation or appropriate safeguards, and make required transfer assessments. We will apply any other transfer rules that govern the relevant person and data. The transfer map, provider locations and safeguards are TODOs below; do not assume that a specific provider region has been confirmed.
Under the UK GDPR andData Protection Act 2018, you may have rights to access your information, correct it, request erasure, restrict processing, receive certain information in a portable format, object to processing based on legitimate interests, and withdraw consent where processing relies on consent. These rights have conditions and exceptions. You may complain to the Information Commissioner's Office (ICO). Website storage and access are also subject to thePrivacy and Electronic Communications Regulations (PECR), including its rules for cookies and similar technologies.
If the California Consumer Privacy Act (CCPA), as amended by the CPRA, or another state privacy law applies to you and Mozenthra, you may have rights to know/access, correct, delete, and obtain a portable copy of personal information; opt out of sale, sharing for cross-context behavioural advertising, targeted advertising or certain profiling; and appeal a denied request where the law provides that right. Rights and exemptions vary by state and by the law's scope and thresholds. Texas residents may have access, correction, deletion, portability and opt-out rights under theTexas Data Privacy and Security Actwhen it applies.
Do not sell or share: We do not intentionally sell personal information for money or other value. The site does send consented analytics events to Google Analytics. We have not confirmed whether the current Google service configuration qualifies for an applicable service-provider exception or is treated as "sharing" under CCPA/CPRA. You can prevent this site's analytics transmission by selecting Reject non-essential or withdrawing consent in Cookie settings; you may also email a privacy request to info@mozenthra.com. Whether this setup requires a separate sale/share opt-out link or Global Privacy Control handling must be confirmed before publication.
The website is not directed to children under 13 and does not knowingly seek to collect their information. If you believe a child under 13 provided information, contact us so we can review and remove it where appropriate. The contact form does not enroll visitors in marketing; commercial email, if later sent, will be handled under the FTC'sCAN-SPAM guidance.
India's Digital Personal Data Protection Act, 2023and Digital Personal Data Protection Rules, 2025have phased commencement. As of 14 October 2026, the core provisions on notice, consent, Data Principal rights, grievance handling and much of the Rules are scheduled to commence on 13 May 2027 under thecommencement notification. When those provisions apply, Data Principals may have rights to access information about processing, correct or update personal data, request erasure, nominate another person, and raise a grievance. Consent may be withdrawn as easily as it was given, subject to legal requirements and consequences for the requested service.
Rule 14 of the 2025 Rules provides for a grievance process that responds within a reasonable period not exceeding 90 days once that Rule applies. The grievance officer's name and contact email are not confirmed. Until a dedicated address is published, you may contact info@mozenthra.com. TheInformation Technology Act, 2000and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011remain relevant to the extent they are in force and apply to the information involved; the DPDP Act's phased commencement affects when provisions replacing them take effect.
This business website is intended for organisations and adults seeking software services, not children. Under COPPA, it is not directed to children under 13; India's DPDP Act defines a child as a person under 18. Do not submit a child's personal information. If we learn that a child has sent us personal data, we will review the report and take appropriate steps under applicable law. We do not knowingly sell or use children's information for targeted advertising. See the FTC'sCOPPA guidance.
The application validates contact submissions, limits request size, uses a honeypot and rate limits, stores keyed digests instead of raw IPs for those limits, restricts admin access behind a password-protected signed session, and verifies CRM webhooks with an HMAC signature. Database TLS verifies the configured CA certificate when one is supplied. These are code-level controls, not a guarantee that every production system is secure; deployment access, backups, encryption at rest, incident response and provider controls depend on the live configuration and must be confirmed.
We may update this policy when the website, processing or applicable law changes. The date at the top shows the latest revision. For questions or requests, email info@mozenthra.comand include enough information for us to find the enquiry. We may ask for proportionate identity verification before disclosing or changing personal information.