Privacy Policy

1. Who we are

Mailoza is a trading brand of Ozavion Limited, a company registered in England and Wales (company no. 16814450), registered office 86-90 Paul Street, London, EC2A 4NE, United Kingdom. For personal data about visitors to our Website and people who contact us or receive our marketing, Ozavion Limited is the data controller, registered with the UK Information Commissioner's Office (ICO) under registration reference ZC055758. For any privacy question, contact us at .

2. Our two roles: controller and processor

When we operate email systems for a business client — for example sending, relaying or monitoring email, or migrating and managing a mailbox estate — we typically process personal data (including data about the client's own recipients and end users) on that client's documented instructions. In that context the client is the controller and Mailoza is the processor, and that processing is governed by our Data Processing Agreement and the services contract, not by this policy. This policy governs the personal data for which we are the controller.

3. Information we collect

Information you give us

• Contact and enquiry details — your name, work email, telephone number, company and role — when you request an email audit, use a contact form, or open a support request.
• The content of your correspondence with us, including email, calls and meeting notes.
• Account, configuration and billing details when you become a customer.

Information we collect automatically

• Limited technical data needed to serve the Website securely — such as IP address, browser and device type, and the pages you view.
• Server and security logs kept to operate and protect the Website. We keep cookies to the essentials needed for the site to function; see our Cookie Policy.

Information from third parties

We may receive limited information from referrals, business directories and, where you have consented to them, analytics platforms, consistent with those parties' terms and your choices.

4. How we use your information and our lawful bases

Where the UK GDPR applies, we rely on the following lawful bases:

• Responding to enquiries and audit requests — our legitimate interests, and steps taken at your request before entering a contract.
• Providing and supporting the Services — performance of a contract with you.
• Billing, accounting and tax records — compliance with a legal obligation and performance of a contract.
• Securing, operating and improving the Website — our legitimate interests in a safe, effective site.
• Marketing — your consent, and/or our legitimate interest in business-to-business marketing where permitted. You can opt out at any time.

Where we rely on legitimate interests, we have weighed them against your rights and concluded that our use does not override them. You can object at any time using the contact details below.

5. Cookies and analytics

We use only essential cookies for the site to function, plus any analytics you have agreed to. Non-essential cookies do not run until you choose them. Full details, categories and controls are set out in our Cookie Policy.

6. Sharing your information

We do not sell your personal data. We share it only with:

• Service providers and sub-processors that help us run our business and deliver the Services — for example hosting, email delivery and relay, DNS, monitoring, CRM and professional tooling — under contracts that require them to protect it.
• Professional advisers, such as accountants and lawyers, where reasonably required.
• Authorities or regulators where we are legally obliged to disclose, or to establish, exercise or defend legal claims.
• A successor in connection with a merger, acquisition or reorganisation, subject to this policy.

For customers, a current list of key sub-processors is maintained under our Data Processing Agreement.

7. International transfers

We aim to keep personal data within the UK and EEA. Where a provider processes data outside those areas, we put appropriate safeguards in place — such as the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses — so your data keeps an equivalent level of protection. Contact us for more information about the safeguards we use.

8. How long we keep it

We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires. As a guide, enquiry and contact records are kept for a limited period after our last contact; customer and contract records for the life of the contract and as long afterwards as the law requires; and financial records for at least six years, as UK tax law requires. After that, we delete or anonymise the data.

9. How we protect your data

Security is central to what we do. We apply appropriate technical and organisational measures — including least-privilege access controls, encryption in transit (and at rest where supported), hardened configuration, logging and monitoring, and vendor due diligence — to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, but we work to protect your data and to respond appropriately to any incident.

10. Your rights

Under UK data protection law you have the right to be informed about how we use your data; to access a copy of it; to have inaccurate data corrected; to have your data erased in certain circumstances; to restrict or object to processing; to data portability where it applies; and to withdraw consent at any time where we rely on it. To exercise any right, email ; we will verify your request and respond within one month. If you have a concern, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Children

The Website and Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date; material changes affecting customers will be communicated directly where appropriate.

13. Contact us

Questions about this policy or your data? Contact Mailoza:

• Email:
• Phone:

Part of Ozavion Limited.
Ozavion Limited · Registered in England and Wales · Company No. 16814450 · Registered office: 86-90 Paul Street, London, EC2A 4NE, United Kingdom

Governing law: England and Wales. Data-protection regime: UK GDPR and the Data Protection Act 2018.