Privacy

Privacy and cookie policy

Last updated 19 October 2026. This policy covers the Zarokaa marketing website only. The Zarokaa platform is covered by its own terms and data processing agreement with each customer.

Who is responsible

Enovate IT Outsourcing Pvt Ltd operates Zarokaa and this website, and is the data controller (data fiduciary under India’s Digital Personal Data Protection Act, 2023) for what you send us. Address: Office #429, Amanora Chambers, Hadapsar, Pune, Maharashtra 411028, India. For any privacy question, request or complaint, write to our grievance contact at zarokaa@enovate-it.com.

Cookies and analytics

We use Google Analytics to count visits and see which pages are useful, and only if you agree. On your first visit a banner asks you to accept or decline. Until you accept, no analytics script is loaded, no request is sent to Google and no cookie is set. If your browser sends a Global Privacy Control signal we treat it as a decline and do not ask.

• If you accept: Google Analytics sets the cookies _ga and _ga_<id>, which keep a random identifier for 13 months so repeat visits can be told apart. It records pages viewed, how you arrived (for example a search engine or a link), your approximate location derived from your IP address (Google does not store the IP address itself), and your device and browser type.
• No advertising: Google signals, ad personalisation and ad storage are switched off. We do not link analytics with advertising or with the details you send through the contact form.
• Your choice is remembered in your browser’s local storage (zk-consent-v1), which is needed to respect it and is not used for anything else.
• Changing your mind: use “Cookie settings” at the bottom of any page. Declining after accepting stops analytics and removes its cookies.

Google acts as our processor for this data under its data processing terms, and the data may be processed in the United States. Otherwise this website uses no advertising, social media or other third-party scripts, and its fonts and images are served from our own servers.

What we collect

• Contact form: your name, work email, optional phone number, company, country, your answers to the multiple-choice questions and your message.
• Technical data: your IP address is held in memory for up to one hour to limit repeated submissions, and is not written to any database or log. Our web server keeps standard access logs (IP address, time, page requested, browser) for a limited period for security and troubleshooting.

We do not ask for, and ask you not to send, sensitive information such as health or financial details.

Why we use it, and on what basis

• To answer your request and follow up on it. Basis: your consent, given with the checkbox on the form, and steps you asked us to take before a possible contract (GDPR Art. 6(1)(a) and (b); DPDP Act s. 6).
• To measure visits with Google Analytics, only with your consent (GDPR Art. 6(1)(a); DPDP Act s. 6), which you can withdraw at any time.
• To keep the form free of spam and abuse. Basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f); DPDP Act s. 7 legitimate uses).

We do not use your details for advertising, we do not sell them, and we do not share them for cross-context behavioural advertising as those terms are used in the California Consumer Privacy Act and similar US state laws.

Automated rating of requests

An automated assistant reads the form contents and gives the request a score for how closely it matches what Zarokaa does, so that genuine business requests reach the sales team first. It sees only what you typed into the form. Every request is still recorded and read by a person; the score only affects the order and speed of our reply and has no legal or similarly significant effect on you. You can ask for a person to review how your request was handled.

Who receives it

Only our own team and the service providers who process it for us under contract:

• Atlassian (Jira), where each request is recorded as a ticket.
• Our AI model provider, for the automated rating above.
• Google (Google Chat), where a short notice of high-priority requests is posted to our sales team.
• Google (Google Analytics), for visit statistics, only if you accept analytics cookies.

Some of these providers process data outside India and outside the European Economic Area, including in the United States. Where GDPR applies, those transfers rely on the European Commission’s standard contractual clauses or an adequacy decision. We will disclose details to authorities only where the law requires it.

How long we keep it

We keep an enquiry for as long as we are in conversation with you. If no business relationship follows, we delete it within 24 months of our last contact, or sooner when you ask. If you become a customer, it moves into our customer records under the customer agreement.

Your rights

Wherever you are, you can ask us to:

• tell you what we hold about you and give you a copy;
• correct or complete it;
• delete it, or withdraw your consent, with effect from then on;
• restrict or object to how we use it, including the automated rating;
• send it to you, or to someone else, in a common format.

Under India’s DPDP Act you may also nominate someone to exercise these rights for you. Residents of California and other US states with privacy laws have the right to know, delete, correct and opt out of sale or sharing; as we do not sell or share personal information, there is nothing to opt out of, and we honour Global Privacy Control signals in any case. We will not treat you differently for using any of these rights.

Write to zarokaa@enovate-it.com. We reply within 30 days and may ask you to confirm your identity first. If you are not satisfied, you can complain to your local data protection authority, or in India to the Data Protection Board of India.

Security

The site is served only over HTTPS. The form is protected by a proof-of-work check that runs in your browser and loads nothing from third parties, and access to enquiries is limited to the people who handle them.

Children

This website is for businesses and is not directed at anyone under 18. We do not knowingly collect information from children.

Changes

When we change this policy we update the date at the top of this page. Significant changes will be shown on this page before they take effect.