Privacy Policy

Identity of the Data Controller

OkayyyCyrus Ltd. Co is registered in the United States and operates from 320 N 490 W APT 7005, Salt Lake City, UT 84103-3731, United States. For all data protection inquiries, you may contact us at feedback@okcyrus.surf or by telephone at +18285978144. The designated privacy contact is Ok Cyrus, Principal of the organization.

Information We Collect

We collect only the information necessary to deliver our systems design and integration services effectively. The categories of information we may process include:

• Identity and contact data such as your name, email address, telephone number, organization name, and job title, provided through our contact forms and service agreements.
• Technical usage data including IP address, browser type and version, operating system, pages visited, time spent on each page, referral source, and device identifiers, collected automatically through standard web analytics.
• Communication records including email correspondence, meeting notes, support tickets, and project-related documentation exchanged during the course of our professional engagement.
• Professional data such as your industry sector, technology stack descriptions, infrastructure specifications, and business requirements shared for the purpose of service delivery.

How We Use Your Information

All information we collect is used exclusively for legitimate business purposes connected to our services. Specifically, we use your data to:

• Respond to inquiries, service requests, and support communications in a timely and professional manner.
• Prepare proposals, architecture assessments, and project plans tailored to your requirements.
• Deliver contracted computer systems design, integration, and advisory services.
• Improve our website functionality and user experience through aggregated, anonymized analytics.
• Comply with legal obligations, resolve disputes, and enforce our Terms of Service.

We do not use automated decision-making or profiling that produces legal effects concerning you.

Legal Basis for Processing

For individuals located in the European Economic Area, the United Kingdom, or other jurisdictions with similar data protection laws, our processing of personal data is based on one or more of the following legal grounds: performance of a contract or pre-contractual steps at your request; our legitimate interests in operating and improving our business, provided those interests are not overridden by your rights; compliance with a legal obligation to which we are subject; and your explicit consent, which you may withdraw at any time.

Data Sharing and Disclosure

We do not sell, trade, rent, or otherwise monetize your personal information. We may share your data only in the following limited circumstances:

• With trusted service providers and subcontractors who perform functions on our behalf under strict contractual confidentiality obligations, including cloud hosting providers, analytics platforms, and communication tools.
• When required by applicable law, regulation, legal process, or enforceable governmental request.
• In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets, subject to your right to be notified where practicable.
• With your explicit consent or at your direction.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to provide essential functionality, enhance your browsing experience, and gather anonymized analytics. Essential cookies are required for website operation and security. Analytics cookies help us understand aggregate visitor behavior so we can improve our content and navigation. You may configure your browser settings to reject or delete cookies at any time, though doing so may affect certain website features.

Data Security

We implement and maintain administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include transport layer encryption for all data in transit, access controls with role-based permissions, regular security assessments and vulnerability scanning, and confidentiality agreements binding all personnel. While we strive to use commercially acceptable means to protect your data, no method of transmission or storage is absolutely secure.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specific retention periods vary by category: contact and inquiry data is typically retained for 24 months from the last interaction; client project data is retained for 7 years following project completion to satisfy professional and legal obligations; website analytics data is anonymized after 26 months. When data is no longer needed, we securely delete or irreversibly anonymize it.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data: the right to access and obtain a copy of your data; the right to rectify inaccurate or incomplete information; the right to request deletion of your data under certain circumstances; the right to restrict or object to processing; the right to data portability; and the right to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us at feedback@okcyrus.surf. We will respond to verified requests within 30 days as required by applicable law. You also have the right to lodge a complaint with your local data protection supervisory authority.

Children's Privacy

Our website and services are not directed to, nor do we knowingly collect personal information from, individuals under the age of 16. If we become aware that a child under 16 has provided us with personal data without verifiable parental consent, we will take immediate steps to delete such information from our records. If you believe we may have collected information from a child, please contact us promptly.

International Data Transfers

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These jurisdictions may have data protection laws that differ from those in your country of residence. We ensure that any cross-border transfers of personal data are protected by appropriate safeguards, including Standard Contractual Clauses or other lawful transfer mechanisms recognized by applicable data protection authorities.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Material changes will be communicated through a notice on our website prior to the change becoming effective. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the revised policy.