Effective Date: July 26, 2026
OttOcean (“us”, “we”, or “our”) operates the https://ottocean.in website (the “Service”). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. Unless otherwise defined, terms in this Privacy Policy have the same meanings as in our Terms of Service.
Information We Collect
We collect various types of information to provide and improve our Service to you.
Personal Data
While using our Service, we may ask you to provide personally identifiable information (“Personal Data”), such as:
- Email address
- First name and last name
- Payment information (processed securely by our payment provider; we do not store card details)
- IP address
- Cookies and Usage Data
Usage Data
We may also collect information on how the Service is accessed and used (“Usage Data”), including your IP address, browser type and version, pages visited, time spent, device identifiers, and diagnostic data.
Tracking and Cookies
We use cookies and similar tracking technologies to monitor activity and hold certain information. You can instruct your browser to refuse cookies, but some Service features may not function properly.
- Session Cookies: Operate our Service.
- Preference Cookies: Remember your preferences and settings.
- Security Cookies: Ensure security purposes.
- Analytics Cookies: Help us understand how visitors use our site (Google Analytics).
How We Use Your Data
OttOcean uses collected data for purposes including:
- Providing and maintaining the Service
- Processing your subscription orders and payments
- Sending you setup instructions and account details
- Notifying you about changes to the Service
- Providing customer support
- Analyzing usage to improve the Service
- Monitoring and preventing technical issues
- Detecting and preventing fraud
Legal Basis for Processing (GDPR)
If you are a resident of the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:
- Performance of a contract: Processing is necessary to fulfill our obligations under your subscription agreement.
- Legitimate interests: Processing is necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security.
- Consent: Where you have given us specific consent to process your data for a particular purpose (e.g., marketing emails). You may withdraw consent at any time.
- Legal obligation: Processing is necessary to comply with applicable laws.
Your Rights Under GDPR
If you are in the EEA or the United Kingdom, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): You can request that we delete your personal data, subject to certain legal exceptions.
- Right to Restrict Processing: You can request that we limit how we use your personal data.
- Right to Data Portability: You can request your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You can object to the processing of your personal data for certain purposes, including direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
Your Rights Under CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
- Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You can request that we delete your personal information, subject to certain legal exceptions.
- Right to Opt-Out of Sale: We do not sell your personal information to third parties. If this changes, we will provide a “Do Not Sell My Personal Information” link.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, email [email protected] with the subject line “CCPA Request.” We will verify your identity and respond within 45 days.
In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email), commercial information (purchase history), and internet activity (browsing, usage data). This information is used for the purposes described in this policy and is shared only with service providers who assist in operating our Service.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When your data is no longer needed, we securely delete or anonymize it.
- Account data: Retained while your subscription is active and for up to 12 months after cancellation.
- Transaction records: Retained for up to 7 years for tax and legal compliance.
- Usage data: Retained for up to 26 months for analytics purposes.
Transfer of Data
Your information may be transferred to and maintained on computers outside your jurisdiction. If you are located in the EEA or the UK, we ensure that any transfer of your data to countries outside the EEA is protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
Disclosure of Data
Legal Requirements
OttOcean may disclose Personal Data in good faith to:
- Comply with legal obligations
- Protect OttOcean’s rights or property
- Prevent or investigate wrongdoing
- Protect the safety of users or the public
- Defend against legal liability
Third-Party Service Providers
We share data with the following categories of service providers:
- Payment processors (e.g., Stripe, PayPal) to process transactions
- Analytics providers (e.g., Google Analytics) to understand site usage
- Customer support tools (e.g., Tawk.to) to provide live chat
- Email service providers to send transactional emails
These providers have access only to perform tasks on our behalf and are obligated not to misuse your data.
Security of Data
We implement industry-standard security measures to protect your personal data, including SSL/TLS encryption, secure payment processing, and access controls. However, no method of electronic transmission or storage is 100% secure.
Links to Other Sites
Our Service may contain links to third-party sites. OttOcean is not responsible for their content, privacy policies, or practices. Please review their policies carefully.
Children’s Privacy
Our Service is not intended for children under 18. We do not knowingly collect data from minors. If you believe we have, please contact us to remove it.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. The “Effective Date” at the top of this page indicates when it was last revised. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us at:
- Email: [email protected]
- Website: https://ottocean.in/contact/
