Who We Are

zenithoravalex operates as a comprehensive cost management platform based in the United Kingdom. Our registered address is 167 Roslyn Rd, Hull HU3 6XH, United Kingdom. We're committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

When we say "we," "us," or "our" in this policy, we're referring to zenithoravalex as the data controller responsible for your personal information. As a data controller, we determine the purposes and means of processing your personal data.

Information We Collect

We collect various types of information to provide and improve our services. The information we gather falls into several categories, each serving specific purposes for our platform operations.

How We Use Your Information

Your personal information serves multiple purposes within our platform ecosystem. We process your data based on various lawful grounds under UK GDPR, ensuring every use has a legitimate basis and clear purpose.

We analyse usage patterns to understand how our cost management tools perform and where improvements might benefit users. This analysis helps us develop better features and resolve technical issues more effectively.

Data Sharing and Third Parties

We maintain strict control over your personal information and only share data when necessary for service provision or legal compliance. Our approach to data sharing follows the principle of data minimisation, ensuring we only share what's absolutely required.

All third-party service providers undergo thorough vetting processes and must demonstrate adequate data protection measures. We establish data processing agreements that define exactly what data can be accessed, how it's used, and what security measures must be maintained.

Your Rights Under UK GDPR

UK data protection law grants you comprehensive rights regarding your personal information. These rights ensure you maintain control over how your data is processed and can make informed decisions about your privacy.

Data Security and Protection

We implement comprehensive security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. Our security framework follows industry best practices and regulatory requirements.

Our servers are hosted in secure UK data centres with 24/7 monitoring, redundant systems, and physical security measures. We maintain regular backups and disaster recovery procedures to ensure data availability and integrity.

Data Retention Periods

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by UK law. Different types of data have varying retention periods based on their purpose and legal requirements.

When retention periods expire, we securely delete or anonymise personal data using industry-standard methods. Some anonymised data may be retained indefinitely for statistical and research purposes, provided it cannot be linked back to individuals.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience, analyse performance, and provide personalised services. We categorise cookies based on their purpose and provide clear information about each type.

You can manage cookie preferences through your browser settings or our cookie preference centre. Disabling certain cookies may affect website functionality, but we'll always inform you of any limitations this might cause.

International Data Transfers

While we primarily process data within the UK, some of our service providers may transfer data internationally. When this occurs, we ensure appropriate safeguards are in place to protect your personal information.

Before any international transfer, we evaluate the destination country's data protection laws and the recipient's ability to protect your data. We maintain records of all transfers and the safeguards applied, which are available upon request.

Children's Privacy

Our services are designed for business use and are not intended for individuals under 16 years old. We do not knowingly collect personal information from children, and our terms of service require users to be at least 16 years old.

If we discover that we've inadvertently collected personal information from someone under 16, we'll delete this information immediately and take steps to prevent future collection. Parents or guardians who believe we may have collected information about their child should contact us immediately.

Changes to This Policy

We review this privacy policy regularly and update it when necessary to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated through email notifications or prominent website notices.

We encourage you to review this policy periodically to stay informed about how we protect your privacy. The "Last Updated" date at the top indicates when the most recent changes were made. Continued use of our services after policy updates constitutes acceptance of the revised terms.