Legal Information

Last updated: 19 April 2026

1. Introduction

This Privacy Policy explains how Zempotis Ltd ("Zempotis", "we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website or use our services. We are committed to protecting your personal information and your right to privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions or concerns about this policy or how we handle your data, please contact us at hello@zempotis.co.uk.

2. Who We Are

Zempotis Ltd is a company registered in England and Wales. For the purposes of UK data protection law, we are the data controller for personal data collected through this website and our services.

• Company: Zempotis Ltd
• Email: hello@zempotis.co.uk
• Location: United Kingdom

3. What Data We Collect

3.1 Contact form submissions

When you complete our contact form, we collect:

• Your first and last name
• Your email address
• Your company name (if provided)
• The nature of your enquiry and your message
• Your stated budget range (if provided)

3.2 Analytics and usage data

We use Google Analytics to collect anonymised information about how visitors use our website. This may include pages visited, time spent on the site, your geographic region (country or region level), device type and browser, referring website, and session duration. This data is aggregated and does not directly identify you.

3.3 Cookies

We use cookies and similar tracking technologies to operate and improve our website. Please see our Cookie Policy for full details of the cookies we use and how you can control them.

3.4 Chatbot interactions

Our website includes an AI-powered chatbot widget. If you interact with this chatbot, your messages and any personal details you share during the conversation may be collected and processed by the chatbot provider. Please refer to Section 7 for details of our third-party providers.

3.5 Technical data

When you visit our website, our hosting provider (Vercel) may automatically collect certain technical data, including your IP address and server access logs, for security and operational purposes.

4. How We Use Your Data

We use the personal data we collect to:

• Respond to your enquiries and provide information about our services
• Fulfil our contractual obligations to you as a client
• Improve our website and understand how visitors use it
• Comply with our legal and regulatory obligations
• Protect our legitimate business interests

We will not use your data for automated decision-making that produces significant legal or similarly significant effects on you without first obtaining your explicit consent.

5. Legal Basis for Processing (UK GDPR)

Under the UK GDPR and the Data Protection Act 2018, we must have a valid legal basis for each processing activity. The bases we rely on are:

• Contract — Article 6(1)(b): Processing necessary to perform a contract with you, or to take steps at your request before entering into a contract. This applies when we process your details to deliver our services.
• Legitimate interests — Article 6(1)(f): Processing necessary for our legitimate business interests, such as responding to general enquiries and improving our website. We have assessed that this does not override your fundamental rights and freedoms.
• Consent — Article 6(1)(a): Where we rely on consent — for example, for non-essential cookies — we will ask for your explicit permission. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation — Article 6(1)(c): Where we are required to process your data to comply with a legal obligation.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Contact form enquiries: [X months] from the date of your enquiry, unless an ongoing client relationship is formed
• Client records: [X years] from the end of the client relationship, in accordance with HMRC requirements
• Analytics data: Governed by Google Analytics' data retention settings, currently configured to [X months] in our account
• Server access logs: [X days] as retained by Vercel for operational and security purposes

Retention periods may be extended where necessary to defend or pursue legal claims.

7. Who We Share Your Data With

We do not sell your personal data. We share data only with trusted third-party service providers who process it on our behalf, under appropriate data processing agreements:

Each provider is required to handle your data only as instructed by us and in accordance with applicable data protection law.

8. International Data Transfers

Some of our service providers process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), or equivalent transfer mechanisms. If you would like further information about international transfers, please contact us.

9. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Ask us to delete your personal data in certain circumstances (the “right to be forgotten”).
• Right to restriction: Ask us to restrict how we process your data in certain circumstances.
• Right to data portability: In certain circumstances, request that we provide your data in a structured, commonly used, and machine-readable format.
• Right to object: Object to the processing of your data where we rely on legitimate interests as our legal basis.
• Rights relating to automated decision-making: The right not to be subject to a decision based solely on automated processing where it produces a significant effect on you.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at hello@zempotis.co.uk. We will respond within one calendar month. There is no charge for making a request unless requests are manifestly unfounded or excessive.

You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, use, alteration, or disclosure. Our website is served over HTTPS, and access to personal data is restricted to authorised personnel only.

No transmission of data over the internet is completely secure. While we take reasonable precautions, we cannot guarantee the absolute security of information you transmit to us.

11. Children's Data

Our services are not directed at children under the age of 16. We do not knowingly collect or process personal data from anyone under 16. If you believe a child has provided personal data to us, please contact us and we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be reflected on this page with an updated “Last updated” date. We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact:

• Company: Zempotis Ltd
• Email: hello@zempotis.co.uk