Onata (“Onata,” “we,” “us,” or “our”) respects the privacy of people who visit our website, contact us, request information, or interact with us in a business context. This Privacy Policy explains what personal information we collect, why we use it, when we disclose it, how long we retain it, and the choices and rights available to you.
This policy applies to onata.com and related business interactions with Onata. It does not govern personal information that Onata processes on behalf of customers when delivering contracted cloud, managed operations, data, security, or AI services. That customer data is handled under the applicable customer agreement, data processing agreement, and the customer’s instructions.
Contents
This Privacy Policy applies when you visit onata.com, submit a contact or inquiry form, request a meeting or assessment, subscribe to communications, correspond with us, attend an event where Onata collects business contact information, or otherwise interact with Onata in a business context.
The policy is intended to describe Onata’s own processing of personal information. If you interact with an Onata customer and your information is processed by Onata on that customer’s behalf, the customer generally determines the purposes and means of that processing. In that situation, you should direct privacy requests to the relevant customer unless we tell you otherwise.
The information we collect depends on how you interact with us. We seek to collect only information that is relevant to the purpose for which it is needed.
|
Category |
Examples |
Typical source |
Why we may use it |
|
Contact and identifiers |
Name, business email, telephone number, organization, country or region. |
You |
Respond to requests, communicate, maintain business records. |
|
Professional information |
Job title, function, company, industry, business interests, project or workload context. |
You or business sources |
Understand needs, tailor discussions, manage relationships. |
|
Communications and inquiry data |
Messages, form submissions, meeting requests, correspondence, notes, feedback. |
You |
Respond, follow up, provide requested information, improve services. |
|
Device and usage data |
IP address, browser, device type, operating system, referring page, pages viewed, timestamps, interactions. |
Automatically |
Operate, secure, troubleshoot, measure, and improve the website. |
|
Approximate location |
Country, state, or city level location inferred from IP address. |
Automatically |
Security, analytics, localization, and legal compliance. |
|
Cookie and preference data |
Cookie identifiers, consent choices, communication preferences, opt out signals. |
Automatically or you |
Remember choices, measure use, honor privacy preferences. |
|
Security and diagnostic data |
Access logs, error records, suspicious activity signals, network and application events. |
Automatically |
Protect systems, investigate incidents, prevent abuse. |
|
Business source information |
Professional contact details or company information from referrals, partners, events, public professional sources, or business data providers. |
Third parties or public sources |
Business development, relationship management, verification, and outreach where permitted. |
Onata does not ask you to submit sensitive personal information through general website forms. Please do not send Social Security numbers, government identifiers, account passwords, payment card numbers, health information, precise geolocation, biometric data, or other highly sensitive information unless Onata specifically requests it for a legitimate and secure purpose.
Onata (“Onata,” “we,” “us,” or “our”) respects the privacy of people who visit our website, contact us, request information, or interact with us in a business context. This Privacy Policy explains what personal information we collect, why we use it, when we disclose it, how long we retain it, and the choices and rights available to you.
We may use personal information for the following purposes:
Some privacy laws require us to identify a legal basis for processing. Where those laws apply, Onata relies on one or more of the following bases depending on the activity:
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before the withdrawal.
Onata may use cookies and similar technologies to operate the website, remember preferences, understand website performance, protect against abuse, and, where enabled, measure or support communications and marketing. The technologies actually used may change as the website evolves.
|
Type |
Purpose |
Choice |
|
Strictly necessary |
Enable core website functions, security, network management, consent storage, and form operation. |
Generally cannot be disabled through our preference tools. |
|
Analytics and performance |
Help us understand site use, traffic patterns, performance, and content effectiveness. |
Used according to applicable consent and opt out requirements. |
|
Preference |
Remember settings or choices that improve your experience. |
May be controlled through available cookie settings. |
|
Advertising or measurement |
If enabled, may measure campaigns or support interest based advertising. |
Subject to consent and opt out rights where required. |
Where required, we provide a cookie or privacy preference mechanism before nonessential technologies are activated. You can also use browser settings to manage cookies. Blocking some technologies may affect website functionality.
Where applicable law requires recognition of a legally valid universal opt out preference signal, such as Global Privacy Control (GPC), Onata will treat a supported signal as a request to opt out of the processing covered by that signal for the browser or device from which it is sent.
We may send business and marketing communications when permitted by law. You can unsubscribe from marketing email by using the unsubscribe mechanism in the message or by contacting us. We may retain a limited suppression record so that we can respect your opt out. Transactional, security, or service related communications may still be sent when necessary.
We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this policy:
We expect service providers that process personal information for Onata to use it only for authorized purposes and to protect it in accordance with applicable contractual and legal requirements.
Onata does not sell personal information for monetary consideration. Certain privacy laws use broader definitions of “sale,” “sharing,” or “targeted advertising” that can include some advertising, analytics, or data transfer practices even when no money changes hands.
If Onata uses a technology or practice that is treated as a sale, sharing, or targeted advertising under applicable law, we will provide the notices and opt out methods required by that law. We do not knowingly sell or share personal information of individuals under 16 years of age.
Onata does not use website visitor personal information for profiling that produces legal or similarly significant effects unless we provide a separate notice and any choices required by applicable law.
As a cloud, modernization, managed operations, data, security, or AI services provider, Onata may process personal information for customers under a services agreement. In those circumstances, Onata generally acts on the customer’s documented instructions and processes the information for the purpose of delivering and supporting the contracted services.
This website Privacy Policy does not override the applicable customer contract, data processing agreement, security terms, or other service specific terms. If your information is contained in data controlled by an Onata customer, please contact that customer first to exercise privacy rights. We will support our customers with legally required requests in accordance with our contractual obligations.
Onata retains personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business and security records, and to satisfy legal, accounting, contractual, or compliance obligations.
|
Information type |
Retention approach |
|
Inquiries and business contacts |
Retained while discussions or the relationship remain active and for a reasonable period afterward for follow up, recordkeeping, dispute prevention, and legal obligations. |
|
Marketing preferences |
Retained while communications remain relevant. Opt out and suppression records may be retained longer to honor your choice. |
|
Website analytics and cookie data |
Retained according to the configured retention period of the relevant technology, applicable consent settings, and legal requirements. |
|
Security and diagnostic records |
Retained for periods reasonably necessary to detect, investigate, document, and prevent security events or abuse. |
|
Contracts and legal records |
Retained for the applicable statutory, contractual, tax, audit, or dispute resolution period. |
|
Privacy rights requests |
Retained as necessary to authenticate, fulfill, document, and demonstrate compliance with the request. |
When information is no longer required, we take reasonable steps to delete, deidentify, aggregate, or otherwise dispose of it in accordance with our retention practices and applicable law.
Onata uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, loss, or destruction. Safeguards are selected based on the nature of the information, the processing involved, and the risks presented.
No website, network, transmission method, or storage system can be guaranteed to be completely secure. If we become aware of a security incident involving personal information, we will investigate and take appropriate steps consistent with applicable law and our contractual obligations.
Onata and the service providers that support our business may process personal information in countries other than the country where it was collected. Those countries may have different privacy laws. Where a law requires safeguards for an international transfer, we use an appropriate legal mechanism or contractual protection applicable to the transfer. We do not claim participation in a government transfer framework unless Onata is formally certified or otherwise eligible to make that claim.
Depending on where you live and which privacy law applies to Onata, you may have some or all of the following rights:
To submit a privacy request, email privacy@onata.com or use the contact method provided on onata.com. Please describe the right you want to exercise and provide enough information for us to identify the relevant records. We may request additional information to verify your identity and protect your information from unauthorized disclosure.
Where permitted, an authorized agent may submit a request on your behalf. We may ask the agent to provide proof of authorization and may need to verify your identity directly. If we deny a request and applicable law gives you a right to appeal, you may reply to our decision or email privacy@onata.com with the subject “Privacy Appeal.”
Where legally required, Onata honors valid universal opt out preference signals such as GPC for the processing activities covered by the signal. Because such signals are generally browser or device specific, you may need to enable the signal separately on each browser or device you use.
You may also have the right to complain to a privacy or data protection regulator in the jurisdiction where you live or work.
Additional disclosures for certain privacy laws
For privacy laws that require category based disclosures, the categories of personal information Onata may collect are described in Section 2, the purposes are described in Sections 4 and 5, and the categories of recipients are described in Section 8. During the period covered by this policy, Onata does not offer financial incentives or differences in price or service in exchange for personal information through the website.
Onata does not seek to use sensitive personal information collected through the website for purposes that would require a separate right to limit use or disclosure. If that changes, we will update our notice and provide required controls.
Onata does not use personal information collected through the website to make decisions based solely on automated processing that produce legal or similarly significant effects about visitors. If Onata introduces a feature or process that uses automated decision making in a way that triggers additional notice, access, explanation, or opt out requirements, we will provide the required information before or at the time the processing applies.
Our website may contain links to or embedded content from third party websites, platforms, or services. Those third parties may collect information directly from you and operate under their own privacy practices. This Privacy Policy does not control third party websites or services. We encourage you to review the applicable privacy notice before providing personal information.
We may update this Privacy Policy to reflect changes in our website, services, technology, legal requirements, or privacy practices. When we make changes, we will revise the “Last updated” date above. If a change materially affects how we use personal information, we will provide additional notice when required by applicable law.
Questions about this Privacy Policy or Onata’s privacy practices can be directed to:
Website: https://onata.com
This Privacy Policy applies to Onata’s website and business contact activities. Separate notices or contractual privacy terms may apply to employees, job applicants, customers, products, or services where required.