Privacy Policy & Data Governance

  • Home
  • Privacy Policy
LEGAL NOTICE & DATA COMPLIANCE

Commitment to Data Privacy & Ethical Marketing

Ztatus Business Strategists operates with uncompromising standards of data ethics, transparency, and regulatory compliance. This Privacy Policy details our protocols for collecting, managing, and protecting client and visitor information under the Digital Personal Data Protection (DPDP) Act 2023 of India and international digital governance frameworks.

1. Information We Collect & Lawful Basis

When interacting with our website, strategic assessment tools, or messaging channels, we collect only necessary business information voluntarily provided by you, including:

  • Identity & Contact Data: Name, professional corporate email, verified phone/WhatsApp number, designation, and company name.
  • Business Diagnostics: Website URL, target marketing geographies (Kerala, GCC), current conversion challenges, and strategic growth requirements submitted via our Digital Visibility Score assessment.
  • Technical Telemetry: Anonymized IP address, browser user-agent, operating system, and session navigation metrics collected through secure, first-party web analytics.

2. Complete Client Asset Ownership (Zero-Lockin Guarantee)

Ztatus enforces a strict anti-lockin operational charter. All advertising accounts (Google Ads, Meta Business Manager), conversion tracking tags (GA4, Google Tag Manager), domain registrations, CRM configurations, and marketing collaterals remain 100% the intellectual and commercial property of the client:

  • All ad campaigns run inside client-owned payment profiles with direct invoice settlements to ad networks.
  • Ztatus operates solely under delegated agency roles with revocable partner access.
  • Upon completion or transition of any retainer, all administrative ownership remains unimpeded in your possession.

3. Healthcare Patient Confidentiality & Medical Advertising Standards

For our hospital, dental, aesthetic, and medical clinic clients, patient privacy is legally and ethically paramount:

  • We never capture, log, or transmit patient medical histories, clinical diagnostics, or personal health records (PHR) via marketing web forms.
  • Tracking pixels are strictly prohibited from collecting or passing sensitive health parameters on clinical appointment paths.
  • All medical content and patient testimonials adhere strictly to Indian National Medical Commission (NMC) guidelines and respective GCC health authority advertising regulations.

4. WhatsApp Business API & Direct Messaging Consent

We deploy automated WhatsApp systems solely under explicit user opt-in standards. By contacting Ztatus on WhatsApp or submitting your phone number on our website forms, you consent to receive direct business correspondence. You can instantly opt-out at any time by replying "STOP", after which all automated messaging is permanently suppressed.

5. Cookie Governance & Web Analytics

Our website utilizes essential, performance, and functional cookies to measure visitor navigation and enhance accessibility. We do not sell, rent, or trade your personal or browsing information to third-party data brokers under any circumstances.

6. Data Principal Rights & Grievance Redressal

In accordance with India's DPDP Act 2023, you hold the right to access, rectify, or request erasure of your personal data held in our systems. To exercise any data rights or file a privacy query, contact our designated Data Protection Officer at privacy@ztatus.in or write to our Kakkanad office.

Governance Highlights

  • 100% Client Asset Ownership
  • Zero Ad Account Lock-in
  • DPDP Act 2023 Compliant
  • Strict Healthcare NDA Protocols
  • Instant WhatsApp Opt-Out

Data Protection Officer

For privacy escalations, compliance notices, or data erasure requests:

Email: privacy@ztatus.in

Phone: +91 88483 79706

Near Carnival Food Court, Infopark Road, Kakkanad, Kochi, Kerala 682030

COMMON QUESTIONS

Data Privacy & Governance FAQs

How does Ztatus handle sensitive healthcare patient data and clinical inquiries?

We do not store or process clinical health records or medical histories on public marketing platforms. All website forms and booking workflows collect only minimal appointment scheduling information, routed directly to the hospital or clinic's encrypted internal patient coordination team. Furthermore, our healthcare campaigns comply strictly with National Medical Commission ethical guidelines and patient privacy charters.

What compliance standards apply under India's Digital Personal Data Protection (DPDP) Act?

We comply fully with India's DPDP Act 2023. We collect personal data strictly on a lawful basis with transparent purpose limitation, implement robust organizational and technological safeguards, ensure prompt grievance redressal through our designated Data Protection Officer, and honor all data principal rights including access, correction, and complete erasure.

Who retains ownership of ad accounts, pixels, domains, and analytics properties?

The client retains 100% unconditional ownership of all digital assets, ad accounts, payment setups, conversion pixels, analytics dashboards, and web domain assets. Ztatus operates purely with delegated agency manager privileges. We maintain a strict zero-lockin policy: you will never face withheld accounts, masked spending, or asset transfer penalties.

How do you manage consent for WhatsApp Business API marketing and messaging?

Our WhatsApp Business API implementations require proactive opt-in through form checkmarks, user-initiated WhatsApp conversations, or verified QR-code entry points. We adhere strictly to Meta's Business Messaging Policies, utilize pre-approved official message templates, and provide an instant, automated one-click opt-out (replying STOP) for all recipients.

How can I request data rectification or complete erasure of my submitted records?

You can exercise your right to access, update, or permanently delete your contact records from our CRM systems by emailing privacy@ztatus.in with the subject line 'Data Erasure Request'. Requests are verified and processed within 7 business days, followed by formal confirmation of deletion across all marketing databases.