Legal
This policy explains what personal data Zinn Digital® collects, why, the legal bases we rely on, who we share it with, and the rights you have over it.
Last updated: 21 July 2026.
Zinn Digital® Ltd (Company No. 16385785), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("Zinn Digital", "we", "us" or "our") is the data controller for the personal data described in this policy, unless we are acting as a processor on your behalf as explained below.
We take privacy seriously and only process the data we need to run our hosting and SEO platform, bill for it, support you, keep it secure, and meet our legal obligations. This policy covers our websites, dashboards and APIs; our Cookie Policy covers cookies and similar technologies in detail.
The personal data we hold falls into a few clear groups.
The details you give us when you register and use the platform: your name, email address, organisation, login credentials and multi-factor settings, and the roles and team members you set up. Authentication is handled through our identity provider.
What we need to charge you and issue invoices: billing name and address, country, tax identifiers, the plan you bought, and a payment mandate. Card payments are handled by our payment providers — we never receive or store your full card number or security code.
How you interact with our own websites and dashboards: pages viewed, features used, device and browser information, and IP address. On our marketing site this is measured with PostHog only if you consent, and configured not to receive personal data or your search terms.
The content of tickets, emails and messages you send us, so we can help you and keep a record of what was agreed.
The websites and applications you host with us may themselves contain personal data about your own users and customers. We process that data only to operate the hosting on your behalf — see section 4.
We use personal data to:
Under the UK GDPR and the EU GDPR, we rely on one or more of these lawful bases whenever we process your personal data:
When we host your website or application, it may contain personal data about your own visitors, users or customers. For that data you are the controller and we are your processor: we handle it only on your documented instructions and only to provide the hosting service — we do not use it for our own purposes.
We keep that data logically separated between tenants, apply least-privilege access controls, and help you meet your own obligations, including responding to the data-subject requests and security-incident duties that fall on you as the controller. If you need a separate data-processing agreement, contact us.
We do not sell your personal data. We share it only with service providers that help us run the platform, each under a contract that limits them to our instructions, and each sitting behind an adapter so it can be replaced. These include:
We choose sub-processors that offer appropriate security and privacy protections, and we keep the categories above current. We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety and property of Zinn Digital®, our customers or the public.
We are based in the United Kingdom and prefer to keep data in the UK and the European Economic Area where we can — our website analytics, for example, use an EU region. Some of our providers may process data in other countries.
Where personal data is transferred outside the UK or EEA, we rely on a lawful transfer mechanism — an adequacy decision, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses — together with additional safeguards where needed, so your data keeps an equivalent level of protection.
We keep personal data only as long as we need it for the purposes in this policy. Account data is kept while your account is active. After you close it, we keep what we must to meet legal, tax and accounting duties and to resolve disputes, then delete or anonymise the rest.
Billing and invoice records are retained for the period tax law requires. Website content and backups follow the retention window described in your plan. Analytics data is retained for a limited period and holds no direct identifiers.
Subject to the conditions in data-protection law, you have the right to:
To exercise any of these rights, contact us using the details below; we will respond within the time limit the law sets. Exercising your rights is free and carries no penalty. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA, though we would welcome the chance to put things right first.
Our websites use a small number of first-party cookies for preferences (such as your locale, currency and theme) and, only if you consent, one analytics cookie for PostHog. We do not run third-party advertising or cross-site tracking cookies. Our separate Cookie Policy lists every cookie by name, what it does and how long it lasts, and explains how to change your choice at any time.
Security is built into the platform. We do not claim any particular compliance certificate here, but we maintain strong technical and organisational measures and can describe our practices to buyers on request.
The service is intended for businesses and adults. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
We may update this policy as our platform, providers or legal obligations change. When we make a material change we will update the date at the top of this page and, where appropriate, tell you by email or in the dashboard. Please review it from time to time.
The data controller is Zinn Digital® Ltd (Company No. 16385785), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
For any privacy question, or to exercise your rights, reach us through our contact page at zinndigital.com/contact, or email office@zinndigital.com for formal data-protection requests. We will route your request to the person responsible for data protection.
Zinn Digital® Ltd (Company No. 16385785), 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom is the data controller for your account, billing and website-visitor data. When we host a site for you, we act as a processor for the personal data inside that site — you remain the controller for it.
No. We never sell your personal data or your visitors' data, and we do not share it for third-party advertising. We share it only with the sub-processors that help us run the service, and only as much as they need.
Under the UK GDPR and, where it applies, the EU GDPR, you can ask to access, correct, erase, restrict or object to our use of your personal data, ask for a portable copy, and withdraw consent at any time. Contact us and we will respond within the statutory time limit. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
We host and process data in data centres chosen for the service and, for our website analytics, in PostHog's EU cloud region. Where data moves outside the UK or EEA, we rely on the legal safeguards described in this policy, such as adequacy decisions and standard contractual clauses.
We keep account and billing records for as long as you have an account and afterwards only as long as the law requires — for example, to meet tax and accounting obligations. Website content and backups are kept for the retention window described in your plan and then deleted.