This website collects as little as a website can.

Who we are

Zelvoris Tech Ltd is a company registered in England and Wales (company number 17061246; registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ; VAT registration number 527194969). We are registered as a fee payer with the UK’s data protection regulator, the ICO (registration reference ZC219390), and we are the data controller for any personal data described in this notice. You can reach us at privacy@zelvoristech.com.

What this website collects

Nothing from you directly. This site has no accounts, no forms, no comments and no newsletter sign-up. It runs no analytics and includes no tracking or advertising code. Every file on the site, including the fonts, is served from our own domain, so visiting it does not send your details to any other company's servers for content.

The site itself sets no cookies. To protect the site from automated attacks, our security provider, Cloudflare, may set strictly necessary security cookies, such as __cf_bm, which helps tell people from automated traffic and expires after 30 minutes, and cf_clearance, which records that your browser has passed a security check and expires after 30 minutes. They are not used for tracking or advertising. Because they are strictly necessary to provide the website securely, the law does not require your consent for them (regulation 6 of the Privacy and Electronic Communications Regulations 2003).

How the site is delivered

The site is delivered through Cloudflare, which also protects it from attacks. To do that, Cloudflare's systems process the technical details every web request carries: your IP address, the page requested, the time, and information your browser sends about itself. Cloudflare uses this to serve the page, to block malicious traffic and to keep short-term security logs. It acts as our data processor for this purpose. Cloudflare's own privacy policy is at cloudflare.com/privacypolicy.

Cloudflare runs a global network, so this technical data may be handled on servers outside the United Kingdom. Cloudflare's data processing addendum includes the UK International Data Transfer Addendum to the European Commission's standard contractual clauses for these transfers; you can ask us for details. Cloudflare keeps these logs for a short period under its own retention schedule. We can see summaries of security events in Cloudflare's dashboard, which can include the IP address of a blocked request, for as long as the dashboard shows them; we do not export or keep them. Our lawful basis is our legitimate interest in running a secure, available website. We do not use this data to identify or profile visitors.

If you email us

If you write to us, we hold your email address, your name if you give it, and what your message says, so that we can reply and deal with what you have asked. Our lawful basis is our legitimate interest in answering people who contact us or, if you are asking about working with us, the steps needed before entering into a contract with you. We keep correspondence while the matter is open and for up to two years afterwards, unless the law requires us to keep it longer, for example records that support our accounts.

Email sent to our domain is delivered to and stored by Google (Google Workspace), our email provider, which acts as our processor under a written contract. Google may store messages outside the United Kingdom; the transfer is protected by the safeguards UK data protection law requires, such as the UK International Data Transfer Addendum to the European Commission's standard contractual clauses. You can ask us for details of the safeguard that applies. We do not add you to any mailing list without asking.

Waitlists and product news you ask for

If you email us to join a product waitlist, ask about a pilot or register interest in a product, we use your email address only to tell you when that product's waitlist, pilot or launch opens. We rely on your consent, which you can withdraw at any time by replying "stop" or emailing privacy@zelvoristech.com. We delete your request once we have told you, or after 12 months if the product has not opened by then. We will not send you anything else unless you ask.

Job enquiries

If you send us details about yourself because you would like to work with us, we keep them for up to six months so that we can contact you if a suitable role comes up, then delete them. Our lawful basis is the steps you have asked us to take before a possible contract. Please do not send health information or other sensitive details at this stage.

Security reports

If you report a vulnerability, we keep your report and contact details while we fix the issue and for up to two years afterwards, so that we can credit you if you wish and check that the fix holds. Our lawful basis is our legitimate interest in keeping our systems secure.

Your rights

Under UK data protection law you have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict how we use it and, where we rely on your consent or a contract and handle the data by automated means, to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time; this does not affect anything we did before you withdrew it.

Your right to object. Where we rely on our legitimate interests, you can object at any time, and we will stop unless we have compelling grounds that override your interests.

We do not make decisions about you by automated means, and we do not sell your data or share it for advertising. You do not have to give us any personal data; if you do not email us, we simply cannot reply. To use any of your rights, email privacy@zelvoristech.com. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so that we can put it right. Email privacy@zelvoristech.com. We will acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome without undue delay.

You also have the right to complain to the regulator, the ICO: ico.org.uk, telephone 0303 123 1113.

Our apps

This notice covers the zelvoristech.com website only. Each Zelvoris app has its own privacy policy, published before the app launches, which explains exactly what that app collects and why. We design every app to collect only the data each feature needs.

Changes to this notice

If we change how this website works, for example by adding a waitlist form, we will update this notice first and change the date at the top.