Privacy Policy

ZyFlow Website and Application Privacy Statement

Updated October 20, 2025

1. What is a Privacy Statement

1.1 This Privacy Statement sets out details relating to how your personal data is collected and processed via the ZyFlow website (the "Website"), SaaS products, APIs, and related ecosystem services ("Services"), in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the UK Data Protection Act 2018, and other applicable legislation relating to the processing of personal data ("Data Protection Legislation"), and to inform you of your data protection rights regarding your personal data.

This Website is operated by ZyFlow Automation Ltd ("ZyFlow," "we," or "us") of 128 City Road, London, United Kingdom, EC1V 2NX.

ZyFlow is the data controller of your data and respects your data protection rights. This Privacy Statement sets out the basis on which we use, process, store, or disclose any personal data detailed below ("Personal Data") we collect from you or that you provide to us, and we process as a data controller. We do not knowingly collect personal data from persons under 16.

Any queries relating to your personal data may be addressed to privacy@zyflow.com.

1.2 This Privacy Statement, together with our Cookies Policy, applies to the processing of your Personal Data via ZyFlow online products and services where we act as a data controller of your personal data. Where we act as a data processor (handling your end users' data on your behalf), your own company privacy policy will also apply.

2. Overview

2.1 We collect Personal Data from you when you use the Website and Services and process this for the purposes of providing access, usage analytics, security, product improvement, customer support, and communications. You may provide Personal Data to us via registration, account management, API use, forms, support, demo requests, communications, or partner integrations. We also process Personal Data obtained via third parties or integrations that you opt into.

2.2 We store your Personal Data on secure cloud servers located in the UK, EEA, and/or the USA as necessary. Data may be shared with trusted third parties to operate the Service, improve our product, respond to your requests, for marketing (with consent), or as required by law.

2.3 We may also share anonymised or aggregated data that does not identify you.

3. What Data Do We Collect From You

Categories include:

• Account registration data (email, name, contact info, company)

• Device/browser information (IP address, type, operating system, cookies)

• Access and session logs (activity, feature usage, API calls)

• Content and form submissions (responses, uploaded material, files)

• Payment and billing (for paid services, handled via secure processor)

• Customer support or feedback communications

• Marketing preferences, opt-in/out choices, newsletter subscriptions

• Data from integration partners or authorized third parties
  
  

4. How & Why We Use Your Personal Data

We process your data for these lawful purposes:

• To provide access to and use of ZyFlow services and website.

• To manage your account, support requests, and communication with you.

• To improve and monitor service efficiency (performance, analytics, product iteration).

• For legitimate business interests such as promoting ZyFlow's services, brand awareness, and service improvement—balanced against your rights.

• To comply with legal obligations, regulatory requirements, and enforce Terms of Use.

• To respond to and resolve legal, security, or contractual issues or inquiries.

• For lawful marketing and, where required, with your explicit consent.

• For the handling of payments and transactional data (never storing payment card data directly).

5. Who We Share Your Personal Data With

• Other ZyFlow group entities, if applicable, for operations, support, or restructuring.

• Trusted third-party Service Providers (cloud hosts, analytics, CRM, security, marketing, communications providers).

• Authorized partners (when you activate integrations or enter a co-marketing program).

• Payment processors (e.g., Stripe) for billing—see their privacy policies for further info.

• Prospective buyers/mergers (with appropriate safeguards) in the event of company sale, merger, or reorganization.

• Regulatory authorities, law enforcement, public bodies, or advisers as required by law or in pursuit of legal interests.

• We ensure sub-processors and partners handle your data in compliance with GDPR, using contracts as required.
  
  

6. International Transfers Of Your Personal Data

Where your data is transferred outside the UK or EU/EEA, ZyFlow uses contracts, model clauses, adequacy decisions, or similar legal safeguards to ensure your rights are protected.

7. Links

ZyFlow's site and Service may contain links to third-party websites, tools, or partner sites. You are responsible for reviewing those sites' privacy terms. ZyFlow assumes no responsibility for the content or privacy practices of external sites.

8. Data Retention

We hold your data only as long as necessary for the purposes it was collected for—e.g., while you are a user/customer, or for statutory periods to meet legal obligations or resolve claims.

9. Profiling and Automated Decision Making

We may perform user profiling through product and marketing analytics (e.g., via cookies), but do not carry out automated decision-making that significantly affects your legal rights.

10. Your Rights and How to Exercise Them

You are entitled to:

• Know whether and how your data is processed

• Access and obtain a copy of your data

• Have inaccurate data corrected

• Request erasure within the limits of law and contract

• Object to or restrict processing

• Data portability (receive your data in a machine-readable format)

• Withdraw consent to marketing at any time

• Lodge a complaint with a regulator (UK ICO or local DPA)

You may exercise any of these rights by contacting privacy@zyflow.com.

11. Children

ZyFlow does not knowingly collect data from persons under 16. If you believe data has been collected from a minor, please contact us for immediate removal.

12. Updates to This Privacy Statement

We may update this Privacy Statement from time to time. Notice of material changes will be posted prominently on our website and may be sent via email. The current version is always available on our site.

13. Contact Information

Questions, comments, and requests regarding this Privacy Statement should be addressed to:

privacy@zyflow.com

ZyFlow Automation Ltd, 128 City Road, London, United Kingdom, EC1V 2NX.