1.Controller
Orangeful Private Ltd, operating as Domainza, Gurugram, India, is the controller for personal data processed through domainza.com. Contact the privacy desk at privacy@domainza.com.
2.What we collect
When you enquire
- Your email address, and — only if you choose to give them — your name, company and alias.
- The content of your enquiry, including names of interest, indicative budget and timeline.
- A reference code we generate for you.
When you apply for a role
- Name, email, links you supply, and the content of your application.
Automatically
- Server log data: IP address, user agent, pages requested, timestamps. Retained for security and diagnostics.
- A bot check by Cloudflare Turnstile when you submit a form, which reads signals from your browser to tell people from automated traffic.
- Your location, only if you allow your browser to share it when you submit a form: coordinates, and the city, region and country looked up from them. Your browser remembers your answer for 30 days. We do not ask if your browser sends a Do Not Track signal.
- Analytics and consented cookies, described in section 6.
3.Anonymous enquiries
If you submit an enquiry with the anonymity option selected, we do not ask for your identity, we do not attempt to determine it from your email address, and we do not run enrichment, reverse lookup or data-append services against it. We will ask for verified identity only at escrow, where financial and sanctions regulation requires it, and you may withdraw instead.
4.Why we process it, and on what basis
- To respond to you — performance of a contract or steps taken at your request.
- To run an engagement — contract, and legal obligation for escrow, AML and sanctions checks.
- Security and fraud prevention — legitimate interests.
- Analytics and marketing — consent, which you may withdraw at any time.
5.Who we share it with
Hosting, email, CRM, analytics, bot-protection and location lookup providers acting as processors under contract; escrow agents, registrars and financial institutions where a transaction requires it; professional advisers; and authorities where compelled by law. We do not sell personal data and we do not share it with data brokers.
Some processors operate outside India. Transfers are made under appropriate safeguards, including standard contractual clauses where applicable.
6.Cookies
Strictly necessary cookies keep the site working and are set without consent. Analytics and preference cookies are set only after you consent, and you can change or withdraw that at any time through the cookie control. Blocking non-essential cookies does not restrict access to the site.
7.Retention
- Enquiries that do not become engagements: 24 months, then deleted.
- Engagement records: the period required by contract, tax and anti-money-laundering law, generally 8 years.
- Applications: 12 months unless you ask us to keep them longer.
- Server logs: 90 days.
8.Your rights
Subject to the law applying to you, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests, and withdraw consent. Write to privacy@domainza.com. We respond within 30 days. You may also complain to your supervisory authority, or in India to the Data Protection Board.
9.Security
Transport encryption, access control on a need-to-know basis, encryption at rest for enquiry records, and logged access to advisory files. No system is perfectly secure; we will notify you and the relevant authority of a qualifying breach within the statutory window.
10.Children
The site is not directed at anyone under 18 and we do not knowingly collect their data.
11.Changes
Material changes will be dated above and, where required, notified directly.