Last updated: 26 September 2026
1. Who we are
This website is operated by TOVOZO Ltd ("Zinizu", "we", "us", a company registered in Scotland with company number SC862553), whose address is 90 Glasgow Road, Perth, PH2 0LT, United Kingdom. We are the data controller for the personal data described in this policy.
If you have any questions about this policy or how we handle your data, contact us at hello@zinizu.com.
2. The data we collect
When you contact us
When you use our contact form or email us, we collect your name, email address, company name (if given), the type of project and budget range you select, and the contents of your message.
When you become a client
If we work together, we also hold your billing name and address, phone number, VAT number (if applicable), the details of the work we carry out, and records of invoices, statements and payments. We do not store card details — payments are made by bank transfer.
When you visit our website
We use Vercel Web Analytics to understand how our website is used (for example, which pages are visited). It does not use cookies and does not identify you personally. Our hosting provider also processes technical data such as IP addresses in server logs to keep the site secure and working.
Invoice links
When you open an invoice using the private link we send you, we record the date and time it was first viewed.
3. Why we use your data and our lawful basis
- Responding to enquiries — our legitimate interest in answering your questions and providing quotes, or taking steps at your request before entering into a contract.
- Delivering our services — performance of our contract with you.
- Invoicing and accounting — compliance with legal obligations, including HMRC record-keeping and VAT rules.
- Website security and improvement — our legitimate interest in running a secure, useful website.
We do not sell your data, and we do not use it for automated decision-making or profiling.
4. Who we share it with
We only share personal data with trusted service providers who help us run our business:
- Vercel Inc. — website hosting and analytics
- Supabase Inc. — secure database hosting
- Resend Inc. — sending emails such as invoices and enquiry notifications
- Google LLC — secure sign-in to our internal admin system, and email
- Our accountant, bank and HMRC, where required for accounting and tax purposes
We may also disclose information if required to by law.
5. International transfers
Some of our providers are based in, or store data in, the United States. Where personal data is transferred outside the UK, we rely on the UK–US Data Bridge, UK adequacy regulations or the ICO's International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses to keep it protected.
6. How long we keep it
- Enquiries that don't lead to work: up to 2 years, then deleted.
- Client, invoice and payment records: 6 years from the end of the financial year they relate to, as required by HMRC.
- Server logs: kept by our hosting provider for a short period for security purposes.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data (where we are not legally required to keep it);
- object to or ask us to restrict how we use your data;
- receive your data in a portable format.
To exercise any of these rights, email hello@zinizu.com. We will respond within one month. There is normally no charge.
8. Cookies
We only use cookies that are strictly necessary. Our public website stores your light/dark theme choice in your browser's local storage, and our admin area uses a secure session cookie for signing in. We don't use advertising or tracking cookies, so no cookie banner is needed. If this changes we will update this policy and ask for your consent.
9. Security
We use encrypted connections (HTTPS), access controls and reputable providers to keep your data secure. Access to client and billing data is restricted to authorised Zinizu staff.
10. Complaints
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page. See also our Terms & Conditions.