Privacy Policy

01Who we are

OLN Labs is the operating name of OLOG N Solutions Technology LLP, a limited liability partnership organised under the laws of India. References to "we", "us", and "our" in this policy mean OLOG N Solutions Technology LLP.

• Registered office: Vaishali, Ghaziabad, Uttar Pradesh, India
• Operations: Bengaluru, India
• LLPIN: ACG-5470
• GSTIN: 09AAIFO9740R1Z8
• Email: hello@olognlabs.com

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, we act as the data controller for personal data collected through this website. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), we act as the data fiduciary.

02Information we collect

2.1 Information you give us directly

When you contact us by email, phone, WhatsApp, or by booking a call through our cal.com integration, we collect:

• Your name and any other identifiers you provide (e.g. company name, role)
• Email address and/or phone number
• The contents of your message or call inquiry
• For booked calls: scheduled time, time zone, and any information you provide in the booking flow

2.2 Information collected automatically

When you visit our website, we collect a limited set of analytics data through Umami, a privacy-friendly analytics service that does not use cookies and does not track individuals across sites. This includes:

• Page views and the URL of each page visited
• Approximate location (country/region only) derived from your IP address
• Browser type, operating system, and device type
• Referring website or source

We do not use this data to identify individual visitors, and we do not combine it with personal information you give us directly.

2.3 Information from third-party services

If you book a call through our embedded cal.com calendar, cal.com may collect additional information directly from your browser. That collection is governed by cal.com's own privacy policy.

2.4 Information we receive during an engagement

If we enter into a client engagement, we may receive additional information from you — including business documents, system credentials, datasets, and other materials necessary to deliver the services. The handling of this information is governed by the specific engagement agreement signed at that time.

03How we use information

We use the information we collect to:

• Respond to your inquiries and provide the information or services you request
• Schedule and conduct introductory calls and follow-up communications
• Send transactional emails (e.g. confirmations, scheduling updates)
• Improve the website, its content, and our services based on aggregate analytics
• Comply with applicable laws, regulations, court orders, and lawful requests from authorities
• Protect the rights, property, or safety of OLN Labs, our clients, or others

We do not sell your personal information. We do not use your information for behavioural advertising or share it with advertising networks.

04Legal bases for processing

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data-protection laws, we rely on the following legal bases for processing your personal data:

• Performance of a contract — to respond to an inquiry, schedule a meeting, or deliver services you have requested
• Legitimate interests — to operate, improve, and secure our website and services, and to communicate with prospective clients in a proportionate way
• Legal obligation — to comply with applicable laws and regulatory requirements
• Consent — where you have given us specific consent (e.g. to send marketing communications, which we currently do not send)

05Who we share information with

We share information only with the following categories of recipients, and only to the extent necessary:

5.1 Service providers (sub-processors)

We rely on a small number of carefully selected third-party services to operate this website and our business:

• Vercel (United States) — website hosting and delivery
• Cal.com (United States) — meeting scheduling for calls booked through our website
• Umami — privacy-friendly, cookieless website analytics
• Google Workspace — email and document collaboration

Each of these providers operates under its own privacy policy and, where required, is bound by contractual data-protection terms (Data Processing Agreements or equivalent).

5.2 Professional advisors

We may share information with our lawyers, accountants, auditors, and similar professional advisors where reasonably necessary for them to perform their work for us.

5.3 Legal and regulatory disclosures

We may disclose information if we are required to do so by law, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, the rights of our clients, or the safety of any person.

5.4 Business transfers

If OLN Labs is involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction. We will provide notice (where required) before personal information becomes subject to a different privacy policy.

06International data transfers

OLN Labs is based in India. Some of our service providers (notably Vercel and Cal.com) are based in the United States or other jurisdictions. As a result, your personal information may be transferred to, stored in, and processed in countries outside of your country of residence.

Where personal data is transferred outside the European Economic Area, the United Kingdom, or other jurisdictions with specific transfer requirements, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under applicable law.

07How long we keep information

We retain personal information only for as long as we need it for the purposes set out in this policy or as required by applicable law. In general:

• Inquiry and contact data: retained for up to 24 months from your last interaction, then deleted or anonymised, unless an engagement has commenced
• Booking and meeting data: retained for up to 24 months from the booked date
• Client engagement records: retained for the duration of the engagement and for up to 7 years thereafter to comply with Indian financial, tax, and contractual record-keeping requirements
• Aggregate analytics: retained on a rolling basis; individual data points (where any) are not retained beyond what Umami's default configuration provides
• Legal hold: we may retain information longer where required by law, regulation, or active legal proceedings

08Your rights

Depending on where you live, you may have the following rights with respect to your personal information:

8.1 Rights under the DPDP Act, 2023 (India)

• Right to access — request a summary of personal data we hold about you
• Right to correction and erasure — request that we correct or delete inaccurate or no-longer-necessary personal data
• Right to grievance redressal — raise a complaint with our Grievance Officer (see "How to contact us" below)
• Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity

8.2 Rights under the GDPR and UK GDPR

• Right of access — a copy of the personal data we process about you
• Right to rectification — correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — deletion of your personal data in certain circumstances
• Right to restrict processing — in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — to processing based on legitimate interests
• Right to withdraw consent — where processing is based on your consent
• Right to lodge a complaint — with your local data-protection authority

8.3 Rights under the CCPA/CPRA (California, USA)

• Right to know what personal information is collected, used, and disclosed
• Right to delete personal information collected from you
• Right to correct inaccurate personal information
• Right to non-discrimination for exercising your privacy rights
• Right to opt out of the "sale" or "sharing" of personal information (we do not sell or share personal information as those terms are defined under CCPA/CPRA)

8.4 How to exercise your rights

To exercise any of these rights, write to us at hello@olognlabs.com with the subject line "Data Rights Request". We will respond within the timeframes required by applicable law (typically 30 days under GDPR and as required under the DPDP Act). We may need to verify your identity before fulfilling certain requests.

09Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, secure development practices, and limited retention periods.

No method of transmission over the internet or method of electronic storage is, however, 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

10Cookies and similar technologies

Our own website does not set first-party tracking cookies. The embedded Cal.com booking calendar on the contact page may set its own functional cookies when you interact with it.

See our Cookie Policy for full details on cookies used and how to control them.

11Children's data

Our services are intended for businesses and adults aged 18 and over. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us and we will take steps to delete that information.

12Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (for example, through a notice on the website).

We encourage you to review this policy periodically. Your continued use of the website after changes are posted constitutes your acceptance of the updated policy.

13How to contact us

For any questions, concerns, or requests relating to this Privacy Policy or your personal information:

• Email: hello@olognlabs.com
• Subject for data-rights requests: "Data Rights Request"
• Grievance Officer (DPDP Act): Aditya, contactable at hello@olognlabs.com
• Postal: OLOG N Solutions Technology LLP, Vaishali, Ghaziabad, Uttar Pradesh, India

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India (under the DPDP Act) or your local supervisory authority (under GDPR/UK GDPR).