1. Introduction
Zyvora Studio ("Zyvora Studio", "we", "us", or "our") operates the website https://zyvorastudio.com (the "Site"). We are a web design, web development, and search engine optimisation studio providing services to local businesses.
This Privacy Policy explains what personal data we collect when you use the Site or contact us, why we collect it, how we use and protect it, and the rights you have in relation to it. By using the Site, you acknowledge that you have read and understood this policy.
2. Personal data we collect
We collect personal data in the following categories.
2.1 Data you provide to us
Contact form submissions. When you complete the lead form on the Site, we collect your name, your email address, and the answers you select about your business, including your business type, whether you currently have a website, how your customers currently find you, your biggest business challenge, and what you have tried before.
Direct communications. When you contact us by email or through any other channel, we collect your email address, your name, and the content of your message.
Client information. If you become a client, we may collect additional information needed to deliver the project, such as your business details, billing contact details, and access credentials that you choose to share with us for your website, hosting, or analytics accounts.
2.2 Data collected automatically
When you visit the Site, certain information is collected automatically through cookies and similar technologies, including:
- Device and browser information, such as device type, operating system, and browser version.
- Usage information, such as the pages you visit, the time spent on each page, links clicked, and the page that referred you to the Site.
- Approximate location information at city or region level, derived from your IP address.
- Your IP address, in truncated or anonymised form where configured.
2.3 Data from third parties
We do not purchase personal data from data brokers. We may receive information about you from platforms you use to contact us, such as social media or messaging platforms, in line with your settings on those platforms.
3. How we use your personal data
We use personal data for the following purposes:
- To respond to your inquiry, prepare proposals, and communicate with you.
- To provide, manage, and deliver the services you engage us for.
- To operate, maintain, and improve the Site and our services.
- To measure and analyse how the Site is used, so we can improve its content and performance.
- To send administrative messages, such as replies, project updates, and invoices.
- To comply with legal obligations and to protect our rights, property, and safety.
We do not sell, rent, or trade your personal data to any third party. We do not use your personal data for automated decision making that produces legal or similarly significant effects.
4. Legal bases for processing
Where applicable data protection law requires a legal basis, we process personal data on the following bases:
- Consent, where you voluntarily submit your details through our form or contact us.
- Performance of a contract, where processing is needed to deliver services you have engaged us for.
- Legitimate interests, in operating and improving our business and the Site, where those interests are not overridden by your rights.
- Legal obligation, where we are required to process or retain data by law.
5. Cookies and analytics
The Site uses a limited set of cookies.
- Strictly necessary cookies. Required for the Site to function securely and correctly.
- Analytics cookies. Set by Google Analytics, delivered through Google Tag Manager, to measure visits and usage patterns in aggregate form. These cookies help us understand which pages are useful and which need improvement.
You can control or delete cookies through your browser settings, and you can block them entirely. The Site will continue to work if you block cookies. You may also opt out of Google Analytics by using the Google Analytics opt out browser add on provided by Google. Our analytics tools are configured to respect "Do Not Track" signals where supported.
6. Third party service providers
We use a small number of carefully selected service providers (processors) to operate the Site and our communications. Each provider processes personal data only as needed to provide its service, under its own privacy and security terms:
- Formspree Inc., to receive, store briefly, and forward contact form submissions to us.
- Google LLC, for Google Analytics and Google Tag Manager (website measurement) and for Gmail (our email inbox).
We may also share personal data where we are legally required to do so, for example in response to a lawful request by a public authority, or where necessary to establish, exercise, or defend legal claims.
7. International data transfers
Our service providers may process and store data on servers located outside your country of residence, including in the United States. Where personal data is transferred internationally, we rely on the safeguards and contractual terms offered by those providers under their published data protection terms.
8. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this policy:
- Inquiry data is retained while we are in communication with you and for a reasonable period afterwards for business records.
- Client data is retained for the duration of the engagement and afterwards in line with accounting and legal record keeping requirements.
- Analytics data is retained for 14 months in Google Analytics, after which it is automatically deleted.
You may request deletion of your personal data at any time, subject to any legal obligation that requires us to retain it.
9. Data security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including access controls on our accounts and the use of established, reputable service providers. No system connected to the internet can be guaranteed completely secure, and we cannot warrant absolute security of data transmitted to us.
10. Your rights
Depending on your location, you may have the following rights in relation to your personal data:
- The right to access the personal data we hold about you.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure of your personal data.
- The right to restrict or object to certain processing.
- The right to data portability for data you have provided to us.
- The right to withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at info@zyvorastudio.com. We will respond to verified requests within 30 days. You also have the right to lodge a complaint with your local data protection authority.
11. Children
The Site is intended for business owners and professionals. It is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
12. Links to other websites
The Site may contain links to third party websites. This policy does not apply to those websites, and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of every website you visit.
13. Changes to this policy
We may revise this Privacy Policy from time to time. The updated version will be published on this page with a new "Last updated" date, and material changes will apply from the date of publication. We encourage you to review this page periodically.
14. Contact us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, contact: