This Privacy Policy explains what personal information One Cloud Utopia collects when you visit our website, contact us, apply for a job, comment on a blog post or use our AI assistant, and what we do with it.
We have written it in plain language. If anything is unclear, email us at legal@onecloudutopia.com and we will explain.
1.Who We Are
One Cloud Utopia ("OCU", "we", "us", "our") is a cloud consulting and solutions provider specialising in Amazon Web Services (AWS) migration, data analytics, security and managed services.
OCU operates through two entities:
- One Cloud Utopia LLC, a Wyoming limited liability company with its principal office at 1600 Bryant St #411447, San Francisco, CA 94141, United States, the controller responsible for this website and for customer relationships.
- One Cloud Utopia Pvt. Ltd., Dillibazar, Kathmandu-29, Nepal, our delivery and engineering arm, which processes personal data on behalf of the US entity.
For the purposes of the EU/UK General Data Protection Regulation (GDPR), One Cloud Utopia LLC is the data controller. Our Nepal entity and our sub-processors act as processors under written agreements.
You can contact us about privacy at legal@onecloudutopia.com.
2.Scope of This Policy
This policy explains how we handle personal information collected through onecloudutopia.com (the "Site"), our AI assistant, our contact and application forms, and our marketing activities.
It does not cover personal data we process inside a client's AWS environment while delivering a consulting engagement. That data is governed by the Master Services Agreement, Statement of Work and Data Processing Addendum signed with that client, where OCU acts as a processor and the client remains the controller.
It also does not cover third-party sites we link to, such as AWS documentation, partner sites or social media profiles.
3.Information We Collect
Information you give us
- Contact enquiries: your name, email address, phone number, company name, subject and the content of your message.
- Event requests: organisation name, contact person, email, phone, event type, expected attendee count, preferred date and any message you include.
- Job applications: your name, email, phone number, résumé/CV file, cover letter and the position you applied for. Your résumé may contain additional information you choose to include, such as education and employment history.
- Blog comments: the name, email address and comment text you submit on a blog post. Your name and comment are displayed publicly; your email address is not.
- AI assistant conversations: the messages you type into our chat assistant, which is powered by Amazon Bedrock.
- Administrator accounts: for OCU staff using the admin dashboard, a username, email and hashed password.
Information collected automatically
- Technical data such as IP address, browser type and version, device type, operating system, referring URL and the pages you view.
- Analytics data collected via Google Analytics 4, but only after you accept analytics cookies in our consent banner. If you decline, no analytics scripts are loaded.
- Server and infrastructure logs, including request timestamps and error diagnostics, kept for security and reliability purposes.
Information we do not want
Please do not send us special-category data (health, religious or political views, biometric data, trade union membership), government identity numbers, or payment card details through our web forms or AI assistant. If you send such data unsolicited, we will delete it unless we are legally required to keep it.
4.How We Use Your Information
We use personal information to:
- Respond to your enquiries, proposals and event requests.
- Evaluate job applications and communicate with candidates about current and, where you consent, future openings.
- Publish and moderate blog comments.
- Operate and improve the AI assistant, including reviewing conversations to fix errors and improve answer quality.
- Understand how the Site is used so we can improve content, navigation and performance.
- Send you newsletters, event invitations or service updates where you have asked to receive them or where permitted by law. Every marketing email includes an unsubscribe link.
- Protect the Site against fraud, abuse, spam and security incidents.
- Comply with legal, tax, accounting and regulatory obligations.
We do not sell your personal information, and we do not share it with third parties for their own cross-context behavioural advertising.
We do not use your personal information to make decisions about you by solely automated means that produce legal or similarly significant effects. Our AI assistant provides information only; it does not make hiring or contracting decisions.
5.Legal Bases for Processing (EEA/UK)
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
- Contract: to respond to your enquiry, progress a job application you submitted, or deliver services you requested.
- Legitimate interests: to run and secure the Site, understand aggregate usage, prevent abuse, and market our services to business contacts in a proportionate way. We balance these interests against your rights and you may object at any time.
- Consent: for analytics cookies, marketing emails where consent is required, and retention of your résumé for future opportunities. You may withdraw consent at any time without affecting processing carried out beforehand.
- Legal obligation: to meet tax, accounting, employment and regulatory requirements.
7.The OCU AI Assistant
Our AI assistant answers questions about OCU's services using Amazon Bedrock, a managed AWS service.
- Your messages are sent to AWS to generate a response. Under AWS's terms, Bedrock does not use customer prompts or outputs to train its foundation models.
- We may retain conversation transcripts for a limited period to debug problems and improve the assistant's answers.
- Please do not enter confidential, proprietary or personal information about yourself or others into the assistant. Use our contact form for anything sensitive.
- The assistant's answers are generated automatically, may be incomplete or wrong, and do not constitute a binding statement, quote or professional advice from OCU.
9.International Transfers
OCU operates in the United States and Nepal, and our infrastructure runs on AWS. Your information will therefore be transferred to and processed in countries that may not provide the same level of data protection as your own.
Where we transfer personal data out of the EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary technical measures such as encryption in transit and at rest.
You may request a copy of the relevant transfer safeguards by emailing legal@onecloudutopia.com.
10.Data Retention
We keep personal information only as long as we need it:
- Contact and event enquiries: up to 24 months after our last substantive interaction, then deleted or anonymised.
- Job applications: up to 12 months after a hiring decision, or longer if you consent to being kept on file for future roles.
- Blog comments: for as long as the post remains published, or until you ask us to remove your comment.
- AI assistant transcripts: up to 90 days, unless a longer period is needed to investigate abuse or a security incident.
- Analytics data: in line with the retention setting configured in Google Analytics (currently 14 months).
- Server and security logs: typically 90 days.
We may keep information for longer where required by law or where it is needed to establish, exercise or defend legal claims.
11.Security
We apply technical and organisational measures appropriate to the risk, including HTTPS/TLS encryption in transit, encryption at rest for stored files and databases, hashed administrator passwords, role-based access controls, least-privilege AWS IAM policies, and monitoring and logging of administrative activity.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant supervisory authorities where the law requires it.
12.Your Privacy Rights
EEA, UK and Switzerland (GDPR)
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data where there is no overriding reason for us to keep it.
- Restrict or object to processing, including objecting to direct marketing at any time.
- Receive your data in a portable, machine-readable format.
- Withdraw consent at any time where we rely on it.
- Lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office.
California (CCPA/CPRA)
California residents may request disclosure of the categories and specific pieces of personal information we have collected, the sources, the purposes and the categories of recipients; request deletion or correction; and are entitled not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CPRA, and we do not process sensitive personal information for purposes requiring a right to limit.
An authorised agent may submit a request on your behalf with proof of authorisation.
Nepal
Where the Individual Privacy Act, 2075 (2018) applies, you may request access to and correction of personal information we hold about you, and you may object to its collection or use where it was obtained without your consent.
How to exercise your rights
Email legal@onecloudutopia.com with the subject line "Privacy Request" and tell us what you would like us to do. We will verify your identity, usually by confirming control of the email address associated with the data, and respond within 30 days, or within 45 days for California requests, extending only where the law permits and telling you if we do.
There is no charge for exercising your rights unless a request is manifestly unfounded or excessive.
13.Children's Privacy
The Site is a business-to-business website and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us at legal@onecloudutopia.com and we will delete it.
14.Changes to This Policy
We may update this policy to reflect changes in our services, technology or legal obligations. The "Last updated" date at the top of this page shows when it was last revised.
If we make a material change, we will give prominent notice on the Site and, where required, seek your consent before the change takes effect. Please review this page periodically.
15.Contact Us
For any privacy question, request or complaint:
- Email: legal@onecloudutopia.com
- Post (US): One Cloud Utopia LLC, Attn: Privacy, 1600 Bryant St #411447, San Francisco, CA 94141, United States
- Post (Nepal): One Cloud Utopia Pvt. Ltd., Attn: Privacy, Dillibazar, Kathmandu-29, Nepal
EU/UK representative: We do not regularly and systematically offer services to, or monitor the behaviour of, individuals located in the EEA or UK, so we have not appointed an Article 27 representative. If that changes, we will appoint one and update this policy.
We will always try to resolve concerns directly, but you retain the right to complain to your data protection authority.