PRIVACY POLICY
Your information,
handled with care.
This policy describes how Citra One handles information provided through this website and our enquiry form.
1. Who we are
This Privacy Policy explains how Citra One (“Citra One”, “we”, “us”, “our”) collects, uses, shares, and protects personal information when you use our website and contact form. This policy applies to our public website and any messages you submit through our contact channels.
2. What information we collect
When you submit our contact form, we may collect:
- Contact details: name, email address, company (if provided)
- Inquiry details: topic selection and the message you send
- Consent: whether you opted in to be contacted about your inquiry
- Anti spam signals: a hidden “honeypot” field and other basic signals used to detect automated spam (e.g., timing checks, rate limits)
We may also collect limited technical data automatically when you visit our site, such as IP address, device/browser type, pages viewed, date/time stamps, referral URLs, and approximate location derived from IP. This data typically comes from server logs and/or analytics tools (if enabled).
3. How we use your information
We use personal information to:
- Respond to your inquiry and communicate with you about your request
- Prepare estimates, proposals, or scope options you asked for
- Provide service information, onboarding steps, or support guidance
- Improve the website experience, performance, and accessibility
- Maintain security, prevent spam and abuse, and detect unauthorized access
- Keep internal records of inquiries and communications for continuity
4. Legal basis (where applicable)
Depending on your jurisdiction, we process your information based on: consent (when you opt in), legitimate interests (to respond to inquiries, run and secure our business), and/or contractual necessity (when we are taking steps at your request prior to entering a contract or providing services).
5. How we share information
We do not sell your personal information. We may share information only in these circumstances:
- Service providers: vendors who help us operate the website and communications (e.g., hosting, email delivery, monitoring, spam prevention, analytics). They may process data only under our instructions and for the purposes described in this policy.
- Legal and compliance: to comply with applicable laws, regulations, court orders, or lawful requests by public authorities.
- Security and protection: to protect our rights, users, and systems, including investigating suspected fraud or security incidents.
- Business transfers: in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.
6. Cookies and similar technologies
Our site may use cookies or similar technologies for essential functionality. If we enable analytics, those tools may use cookies to help us understand site usage. You can control cookies through your browser settings, but disabling some cookies may affect site functionality.
7. Data retention
We keep inquiry information only as long as needed to respond, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on the nature of the inquiry and whether an ongoing service relationship is established.
8. Security
We use reasonable administrative, technical, and organizational measures to protect personal information, including access controls, encryption in transit (HTTPS), monitoring/logging, and least privilege practices. No method of transmission or storage is 100% secure, but we work to continuously improve safeguards.
9. International transfers
If you access our site from outside the country where our systems or service providers operate, your information may be transferred and processed in another country. Where required, we implement appropriate safeguards for cross border transfers.
10. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, or object to certain processing of your personal information, and to request data portability. You may withdraw consent where processing is based on consent.
To exercise these rights, contact us using the information below. We may need to verify your identity before fulfilling certain requests.
11. Children’s privacy
Our website and services are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.
12. Third party links
Our website may link to third party sites. We are not responsible for their privacy practices. Please review their privacy policies before submitting information to them.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. Continued use of the site after changes means you accept the updated policy.
14. Contact us
If you have questions about this Privacy Policy or your personal information, contact:
Citra One
Email: [email protected]