Privacy Policy

1. Who We Are

ZNZ Digital Media Agency (“we”, “us”, or “our”) is a digital marketing and web design agency registered in England and Wales, operating from West Sussex, UK. We are the data controller responsible for your personal data collected through this website (theznz.co.uk) and through our business operations.

If you have any questions about this privacy policy or our data practices, please contact us at: info@theznz.co.uk.

2. The Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

Information you provide directly

• Contact and enquiry data: your name, email address, phone number, company name, and the content of messages you send us via our contact form or by email.
• Client data: billing information, project briefs, and correspondence relating to the services we provide you.

Information collected automatically

• Usage data: pages visited, time spent on pages, referring URLs, browser type, operating system, and device information.
• Cookie data: identifiers and preferences stored in cookies and similar technologies. Please see our Cookie Policy for full details.
• Log data: IP addresses and server access logs retained for security and diagnostic purposes.

We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with their data, please contact us so that we can delete it.

3. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following lawful bases to process your personal data:

• Legitimate interests (Article 6(1)(f) UK GDPR): to respond to enquiries, improve our website, prevent fraud, and maintain the security of our systems. We have assessed that our legitimate interests are not overridden by your rights and freedoms.
• Performance of a contract (Article 6(1)(b) UK GDPR): to fulfil our obligations to you where you are a client or are in the process of becoming one.
• Compliance with a legal obligation (Article 6(1)(c) UK GDPR): where we are required by law to process your data (for example, for tax and accounting purposes).
• Consent (Article 6(1)(a) UK GDPR): for the placement of non-essential cookies and, where applicable, for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. How We Use Your Information

We use the personal data we collect to:

• respond to your enquiries and provide the services you request;
• manage our client relationships and fulfil contractual obligations;
• send you service-related communications (such as project updates or invoices);
• improve the content and functionality of our website;
• analyse website traffic and user behaviour through analytics tools;
• detect and prevent fraud, abuse, or other unlawful activity;
• comply with our legal and regulatory obligations.

We will not sell, rent, or trade your personal data to any third party for their own marketing purposes.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on this website. Essential cookies are placed without your consent as they are strictly necessary for the website to function. Non-essential cookies (such as analytics and marketing cookies) are only placed with your prior consent, which you can manage via our cookie consent tool.

For full details of the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

6. Sharing Your Data

We may share your personal data with carefully selected third parties in the following circumstances:

• Service providers: companies that provide services on our behalf, such as website hosting (Cloudflare), email delivery, and analytics (e.g., Google Analytics). These providers act as data processors and are contractually bound to process data only on our instructions and in accordance with applicable data protection law.
• Legal and regulatory authorities: where we are required to disclose data by law, court order, or to protect the rights and safety of ourselves or others.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

We do not transfer your personal data outside the United Kingdom or the European Economic Area unless appropriate safeguards are in place (such as standard contractual clauses approved by the Information Commissioner’s Office).

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Enquiry data is retained for up to 24 months from the date of last contact, after which it is securely deleted.
• Client data is retained for 6 years from the end of the client relationship in accordance with our obligations under the Limitation Act 1980 and HMRC guidelines.
• Website log data is retained for up to 90 days for security and diagnostic purposes.

8. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights in relation to your personal data:

• Right of access (Subject Access Request): you may request a copy of the personal data we hold about you.
• Right to rectification: you may ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): you may ask us to delete your personal data where there is no compelling reason for its continued processing.
• Right to restriction of processing: you may ask us to restrict how we use your data in certain circumstances.
• Right to data portability: where processing is based on consent or a contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: you may object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making: we do not carry out solely automated decision-making that produces legal or similarly significant effects on you.

To exercise any of these rights, please contact us at info@theznz.co.uk. We will respond within one calendar month. We may need to verify your identity before processing your request.

9. How to Complain

If you are unhappy with how we have handled your personal data, please contact us in the first instance so that we can seek to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your data. Continued use of our website after any change constitutes your acceptance of the updated policy.

11. Contact Us

For any questions, concerns, or requests relating to this privacy policy or your personal data, please contact us: