Skip to content
ZYNOFF

Legal

Privacy Policy

Last updated 30 October 2026

This privacy policy explains how ZYNOFF LTD ("Zynoff", "we", "us", "our"), trading as Zynoff.ai, collects, uses, shares and protects personal data when you visit this website (zynoff.ai) or contact us. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are

ZYNOFF LTD is a company registered in England and Wales, company number 15452602, with its registered office at Trinity Road, Cirencester, GL7 1PX, United Kingdom. We are the data controller for the personal data described in this policy. You can contact us about data protection through the enquiry form or by post at the registered office.

2. Personal data we collect

  • Enquiry data you provide through our enquiry form or by email: your name, email address, company name, website, location, the services you are interested in, company size, intended timeline and the content of your message.
  • Correspondence you exchange with us after an enquiry, including any documents you choose to send.
  • Technical data collected automatically when you use the site: IP address, browser type and version, device type, operating system, referring page, pages viewed and timestamps, held in server logs.

We do not knowingly collect special category data (for example health or biometric data) or data about children through this website. Please do not include such information in an enquiry.

3. How we use personal data and our lawful bases

  • To respond to your enquiry and discuss whether we can work together. Lawful basis: our legitimate interest in responding to business enquiries and, where you ask us to, taking steps at your request before entering into a contract (UK GDPR Article 6(1)(b) and 6(1)(f)).
  • To operate, secure and improve the website, including detecting spam, abuse and attacks. Lawful basis: our legitimate interest in running a secure, reliable service (Article 6(1)(f)).
  • To comply with legal obligations, such as accounting, tax and responding to lawful requests from authorities. Lawful basis: legal obligation (Article 6(1)(c)).

We do not use enquiry data for direct marketing unless you have separately agreed to receive it, and you can withdraw that agreement at any time. We do not sell personal data, and we do not make decisions about you based solely on automated processing.

4. Who we share personal data with

We share personal data only as needed to run this website and respond to you:

  • Hosting and infrastructure providers that run the website and store server logs.
  • Email service providers that deliver enquiry notifications and our replies.
  • Professional advisers such as accountants, insurers and lawyers, where necessary.
  • Authorities, regulators or courts where we are required to by law.
  • A buyer or successor if our business or assets are sold or reorganised, subject to the same protections.

Our service providers act on our instructions under written contracts that require them to protect your data and use it only for the services they provide to us.

5. International transfers

Some of our service providers process data outside the United Kingdom, including in the United States. Where this happens we rely on UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards needed, so that your data receives protection equivalent to UK law. You can ask us for details of the safeguards used.

6. How long we keep personal data

  • Enquiry data and correspondence: up to 24 months after our last contact with you, so that we can pick up the conversation if you return. If we enter into a contract, the data forms part of the client record and is kept for the duration of the relationship and for 6 years afterwards to meet legal, accounting and limitation requirements.
  • Server logs: up to 90 days, unless needed longer to investigate a security incident.

When data is no longer needed we delete or anonymise it securely.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, spam and abuse filtering on our forms, and limiting access to the people who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we will notify you and the Information Commissioner's Office where the law requires it if a breach affects your data.

8. Cookies and similar technologies

This website uses only strictly necessary technologies required for it to function and remain secure. We do not currently set analytics, advertising or tracking cookies. If we introduce any non-essential cookies in future we will ask for your consent first, in line with PECR, and update this policy. You can control cookies through your browser settings.

9. Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected and incomplete data completed;
  • have your data erased in certain circumstances;
  • restrict or object to our processing, including any processing based on legitimate interests;
  • receive the data you provided to us in a portable format;
  • withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us through the enquiry form or by post at the registered office. We will respond within one month, which may be extended by two further months for complex requests, as the law allows. We may need to verify your identity before acting on a request. There is normally no fee.

If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, or at ico.org.uk/make-a-complaint.

10. Third-party websites

This website may link to other websites. We are not responsible for their content or privacy practices and encourage you to read their privacy policies.

11. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with a revised "last updated" date. Where a change is significant we will take reasonable steps to bring it to your attention.

12. Contact

ZYNOFF LTD, Trinity Road, Cirencester, GL7 1PX, United Kingdom, or through the enquiry form.