Privacy Policy

How Obsium collects, uses, and protects your information

Last Updated: May 8, 2026

Applies to: obsium.io and all Obsium services

1. Introduction

Obsium (“we”, “our”, or “us”) is a cloud and DevOps consulting firm headquartered in  Kochi, India. We operate the website obsium.io and provide professional services including Cloud Consulting, DevOps Solutions, Kubernetes Consulting, Site Reliability Engineering, Platform Engineering, and Observability Solutions.

This Privacy Policy explains what personal data we collect when you visit our website or engage with our services, why we collect it, how we use it, and what rights you have over your data. We take your privacy seriously and are committed to handling your information transparently and responsibly.

By using obsium.io, you agree to the practices described in this policy. If you do not agree, please discontinue use of our website.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily submit to us, including:

• Contact form submissions: your full name, email address, and the message content you provide when reaching out through our website contact form.
• Email correspondence: any personal information included in emails you send to hello@obsium.io.
• Inquiry and consultation requests: business name, job title, or project details you share when requesting a quote or consultation.

2.2 Information Collected Automatically

When you visit obsium.io, our web server and analytics tools may automatically collect:

• IP address and approximate geographic location (country/city level).
• Browser type, version, and operating system.
• Pages visited, time spent on each page, and referring URL.
• Device type (desktop, mobile, tablet).
• Date and time of visit.

This information is collected to understand how visitors use our website and to improve our content and user experience.

2.3 Cookies and Tracking Technologies

Our website uses cookies – small text files stored on your device – to enable basic site functionality, remember your preferences, and collect analytics data. We use the following categories of cookies:

• Strictly necessary cookies: required for the website to function (e.g. session management, contact form operation). These cannot be disabled.
• Analytics cookies: used to understand visitor behaviour via tools such as Google Analytics. These collect anonymised, aggregated data and can be declined.
• Functional cookies: used to remember preferences and improve your experience. Optional.

You can manage cookie preferences through your browser settings. Declining optional cookies will not affect your ability to use the site, though some features may behave differently.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to your enquiries and contact form submissions.
• Providing and delivering the professional services you have engaged us for.
• Sending follow-up communications related to a service enquiry you initiated.
• Improving the content, design, and functionality of our website.
• Analysing website traffic and user behaviour to inform our marketing and content strategy.
• Complying with applicable legal obligations.
• Protecting against fraud, security incidents, or abuse of our website.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Consent: where you have given explicit consent (e.g. accepting analytics cookies, or subscribing to communications).
• Legitimate interests: for analytics and website improvement activities, where our interests do not override your rights.
• Contract performance: where processing is necessary to fulfil a service agreement with you.
• Legal obligation: where we are required to process data to comply with applicable law.

5. How We Share Your Information

Obsium does not sell, rent, or trade your personal data to third parties. We may share your information in the following limited circumstances:

• Service providers: trusted third-party vendors who assist us in operating our website and delivering services (e.g. web hosting providers, email delivery platforms, analytics tools). These parties are contractually bound to handle your data only as instructed by us and in compliance with applicable privacy law.
• Professional advisors: lawyers, accountants, or auditors where necessary for legal or financial purposes, subject to confidentiality obligations.
• Legal requirements: where we are required to disclose data by law, court order, or governmental authority.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, with appropriate notice provided to you.

All third parties we work with are required to maintain appropriate security standards and may only use your data for the stated purpose.

6. International Data Transfers

Obsium operates from the United States and India. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, please be aware that your personal data may be transferred to and processed in countries that may not have the same level of data protection as your home country.

Where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or other mechanisms approved under applicable data protection law.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law:

• Client engagement records: retained for up to 7 years following the end of an engagement, in line with standard accounting and legal retention requirements.
• Website analytics data: aggregated and anonymised, retained indefinitely; individual session data retained for up to 26 months.

You may request deletion of your personal data at any time, subject to any legal retention obligations we are required to honour.

8. Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption for all data transmitted via obsium.io.
• Access controls limiting data access to authorised personnel only.
• Regular review of our data handling practices and third-party provider security postures.

While we take these measures seriously, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify affected individuals and relevant authorities promptly in the event of a data breach as required by law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data (“right to be forgotten”), subject to legal exceptions.
• Restriction: request that we limit the processing of your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@obsium.io. We will respond within 30 days. We may ask you to verify your identity before processing your request.

California residents: under the California Consumer Privacy Act (CCPA), you have additional rights including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. Obsium does not sell personal information.

10. Children’s Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will promptly delete it.

11. Third-Party Links

obsium.io may contain links to external websites, including our partners’ websites and professional platforms such as LinkedIn. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.

Continued use of obsium.io after a policy update constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

Email: hello@obsium.io

Phone: +91 9895941969

India Office: GB4, Ground Floor, Athulya, Infopark Phase 1, Infopark Campus Kakkanad, Kochi 682042, India

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.