Privacy Policy

• Contact details: your name, email address, phone number, company and role.
• Project information: messages, briefs, requirements, files, feedback and other information you share with us.
• Billing information: company name, billing contact, address, tax identifiers and payment status. We do not store full payment card details; payments are handled by third-party payment providers.
• Technical information: IP address, browser and device type, operating system, pages visited, referring URL, approximate location and cookie identifiers.
• Recruitment information: if you apply for a role, your CV, contact details and any information you include in your application.

We collect personal information directly from you when you fill in a form, email or call us, sign a contract or provide project materials.

We collect some information automatically when you use the website, such as server logs and analytics data.

We may receive information from third parties, such as referrals, publicly available sources, payment providers and service providers that support our operations.

• Respond to enquiries, prepare proposals and communicate about projects.
• Provide, deliver and support our services.
• Manage client relationships, accounts and billing.
• Process payments and comply with tax and accounting obligations.
• Operate, secure, maintain and improve our website and services.
• Send service updates and, where permitted, marketing communications.
• Detect and prevent fraud, abuse and security incidents.
• Evaluate job applications.
• Comply with legal obligations and enforce our agreements.

Where data protection law requires a legal basis, we rely on one or more of the following:

• Contract: to take steps at your request before entering a contract, or to perform a contract with you.
• Legitimate interests: to operate and improve our business, secure our systems, communicate with business contacts and market our services, where those interests are not overridden by your rights.
• Consent: for optional cookies, analytics or marketing where consent is required. You can withdraw consent at any time.
• Legal obligation: to comply with tax, accounting, fraud-prevention and other legal requirements.
• Vital interests: where necessary to protect the life of someone.

Where we rely on legitimate interests, we carry out a balancing assessment and give you the right to object.

We use cookies and similar technologies that are necessary for the website to function, such as security and load-balancing cookies.

Where we use optional analytics or marketing cookies, we will ask for your consent first where required by law. You can change your choices at any time through the cookie settings or your browser.

Blocking or deleting cookies may affect how the website works. We do not control third-party cookies set by services we link to or embed.

We do not sell personal information. We share it only as described below:

• Service providers: hosting, analytics, email, payment, CRM, project management and IT providers that process information on our behalf under written contracts.
• Professional advisers: lawyers, accountants, auditors and insurers where needed.
• Authorities: courts, regulators and law enforcement where required by law, or where necessary to protect our rights, property or safety.
• Business transfers: a buyer or successor in connection with a merger, acquisition, financing or sale of assets, subject to appropriate confidentiality.

We require processors to protect personal information and use it only for the purposes we specify.

We are a remote-first business and our service providers may process personal information in countries other than your own.

Where we transfer personal information internationally, we use appropriate safeguards required by law, such as adequacy decisions, standard contractual clauses and supplementary measures.

We retain personal information only for as long as necessary for the purposes described in this policy, including to perform contracts, comply with legal, tax and accounting obligations, resolve disputes and enforce agreements.

As a guide, we typically retain enquiry and marketing information for up to 24 months after our last interaction, and client, project and billing records for up to 6 years after the end of the project. Retention periods may be longer where required by law or during an ongoing dispute.

We may retain aggregated or anonymised information that cannot identify you.

We use reasonable technical and organisational measures to protect personal information, including access controls, least-privilege permissions, encryption in transit, secure backups and regular review of our providers.

No method of transmission or storage is completely secure. If a personal data breach affects you and notification is required by law, we will notify you and the relevant authority without undue delay.

Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal information, to object to processing, to receive a portable copy, and to withdraw consent.

You may also have the right to opt out of marketing at any time and to lodge a complaint with your local data protection authority.

To exercise your rights, email us at hello@zenoxcore.com. We may need to verify your identity. We will respond within the timeframe required by applicable law.

Our website and services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Our website may link to third-party websites and services. We are not responsible for their privacy practices. Review their privacy policies before providing personal information.

We may update this Privacy Policy from time to time. The current version will be posted on this page with a new effective date.

If we make material changes, we will take reasonable steps to notify you, such as posting a notice on the website or emailing active clients. Changes apply from the date they are posted, unless stated otherwise.