ZAY FUTURE LTD ("Zayphire", "we") is the data controller for personal data collected through zayphire.com. Registered in England and Wales, Company No. 17409365, 128 City Road, London EC1V 2NX, United Kingdom.
Questions, requests or complaints: hello@zayphire.com.
| Data | Why | Basis |
|---|---|---|
| Name, email address | To respond to your enquiry | Legitimate interests |
| Organisation (optional) | To understand context before responding | Legitimate interests |
| Engagement type (optional) | To route the enquiry appropriately | Legitimate interests |
| What prompted the enquiry (optional) | To prepare for the conversation | Legitimate interests |
| Marketing consent (optional, unticked by default) | To send occasional research and insights | Consent |
| Referral source, UTM parameters | To understand how people find us | Legitimate interests |
Running a tool without submitting an email records only non identifying metadata: the tool used, a bucketed score band, the model version, a timestamp, and a salted, truncated hash of your IP address used solely for rate limiting. The hash cannot be reversed to an IP address and is not linked to any enquiry.
If you ask us to email a calculator result or request a free public experience review, we additionally store your email address and the inputs needed to fulfil that request. Result delivery is transactional and does not require marketing consent. A separate, optional marketing checkbox controls whether we may send occasional research and insights.
We use Cloudflare Web Analytics, which is cookieless and does not track individuals or build profiles across sites.
Tool outputs are produced with automated analysis. They are indicative signals, not decisions about you, and have no legal or similarly significant effect. No automated decision making within the meaning of Article 22 UK GDPR takes place.
| Processor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, D1 database, bot protection (Turnstile), cookieless analytics | Global edge network |
| Resend | Transactional email delivery | United States |
| Anthropic or Cloudflare Workers AI | Automated analysis for tool outputs | United States / global edge |
| Zoho Mail | Our own email inbox | Per Zoho's regional hosting |
Transfers outside the UK and EEA rely on the processors' Standard Contractual Clauses or equivalent safeguards. We do not sell personal data, and we do not share it with advertisers.
Enquiry and tool lead records carry a retention date of 365 days from creation. A scheduled process deletes expired lead records, associated pipeline entries, and calculator submission rows containing personal data. Anonymous tool metadata contains no personal data and is retained for service analysis.
Where a conversation leads to an engagement, contract and billing records are kept for the period required by UK company and tax law.
Under UK GDPR you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. Email hello@zayphire.com; we respond within one month.
You may complain to the Information Commissioner's Office at ico.org.uk.
Findings produced during a client engagement remain confidential unless publication is explicitly authorised by the client. Assessment work is conducted from customer visible journeys and publicly available signals; it does not involve access to client systems unless separately agreed in writing.
Data is transmitted over TLS and stored in Cloudflare D1. Administrative interfaces are access controlled. Form submissions are protected by Cloudflare Turnstile.
Material changes will be reflected in the version and date at the top of this page.