Privacypolicy.
Written to be read. What we collect, why, how long we keep it, and what you can ask us to do with it.
1. Who we are
Zeron ("we", "us") provides customer service, retention, lifecycle marketing and automation services to businesses. For data collected through this website and in the course of selling our services, Zeron is the data controller. For customer data we process on behalf of our clients, we act as a data processor under a written data processing agreement.
2. What we collect
Information you give us. When you use the contact form or email us: your name, work email, company, website, the services you're interested in, approximate volumes, current tools and anything you write in the message.
Information collected automatically. Standard server logs (IP address, browser type, pages requested, timestamps) for security and to keep the site running. We do not run advertising trackers on this site.
Business contact information exchanged during proposals, contracts and ongoing work: names, roles, emails, phone numbers and the content of our correspondence.
3. How we use it
- To reply to your enquiry and prepare a proposal (legal basis: steps prior to a contract, or our legitimate interest in responding to you).
- To deliver and administer our services once you're a client (performance of a contract).
- To keep the website secure and understand, in aggregate, how it's used (legitimate interest).
- To send occasional, relevant updates about our services if you've opted in — every message includes an unsubscribe link (consent).
- To comply with legal obligations, such as accounting and tax rules.
We do not sell personal data, and we do not use it to train general-purpose AI models.
4. Customer data we process for clients
When we run customer service, retention or marketing for a client, we process that client's customers' data — conversations, order and account details, contact preferences — strictly on the client's documented instructions and inside the client's own systems wherever possible. Our AI tooling classifies, summarises, drafts and scores this data; it never sends a reply to an end customer without a person approving it. Access is role-based, agents work on managed devices, and customer data is not stored locally. The client's own privacy policy governs how their customers' data is used; questions from end customers are best directed to that client, and we will help route them.
5. Who we share it with
Only with service providers we need to run the business, under contracts that restrict what they can do with it: email and calendar hosting, a CRM, document and e-signature tools, accounting software, website hosting, and — for client work — the helpdesk, CRM and AI providers agreed in that client's DPA. Some providers are outside the EEA/UK; where that's the case we rely on adequacy decisions or standard contractual clauses. We'll disclose data if the law requires it, and we'll tell you if we're allowed to.
6. Cookies and local storage
This site sets no cookies and uses no advertising or cross-site tracking. If we add analytics in future, we'll use a privacy-respecting, cookieless tool and update this page.
7. How long we keep it
- Enquiries that don't become clients: up to 12 months, then deleted.
- Client contact and contract records: for the life of the relationship plus the period required by accounting and tax law (typically 6–7 years).
- Server logs: 30 days.
- Client customer data: as instructed in the client's DPA — normally deleted or returned within 30 days of the engagement ending.
8. Your rights
Depending on where you are, you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent where we rely on it. Email us and we'll respond within 30 days. You also have the right to complain to your local data protection authority; we'd appreciate the chance to sort it out first.
9. Security
Encryption in transit and at rest, single sign-on and multi-factor authentication on our tools, role-based access, managed devices for everyone who touches client data, and an incident process that notifies affected clients without undue delay. Ask us for the security overview if you'd like the detail.
10. Contact
Questions, requests, or something we've got wrong: use the contact form and mention privacy — it reaches the people who handle it. We'll update this page when our practices change and note the date at the top.