This Privacy Policy describes how Zbang Ltd (company number 11824205; registered office 71-75 Shelton Street, London, WC2H 9JQ) collects and uses personal information on this website. Zbang Ltd is the controller for this website. The Ads product at ads.zbang.ai may have additional product-specific notices and controls.
1. What we collect, why, and how long we keep it
Scroll to view every column
| Data category | Purpose and lawful basis | Recipients | Retention |
|---|---|---|---|
| Contact details and messages you send us, including your website and annual sales range if you choose to give them | Respond to enquiries and discuss services. Lawful basis: legitimate interests, or contract/pre-contract steps where relevant. | Microsoft 365 for email, Railway for website hosting, and professional advisers where needed. | Normally up to 24 months after the last interaction, unless needed for a contract or legal record. |
| Website logs, IP address, user agent, request metadata | Deliver the site, secure it, prevent abuse, and debug faults. Lawful basis: legitimate interests and legal obligations where applicable. | Railway for hosting and Cloudflare Turnstile for contact-form abuse prevention. Turnstile receives browser, device, network, site-origin and challenge signals needed to distinguish legitimate use from automation. | Normally up to 30 days in operational logs, unless investigation or legal preservation requires longer. |
| Consent record | Remember and demonstrate your cookie choices. Lawful basis: legal obligation and legitimate interests. | Stored first-party in browser local storage and in the strictly necessary, host-bound __Host-zbang_consent cookie, which is visible to this website server when needed. Other Zbang subdomains cannot change this cookie. |
About 6 months for reject choices, including managed choices where all optional categories are off, and about 12 months for choices that opt into analytics or marketing, unless refreshed sooner. |
| Analytics events | Understand aggregate site usage after consent. Lawful basis: consent. | Google Analytics 4. | Normally up to 14 months in analytics reporting, subject to Google Analytics property settings. |
| Marketing audience page-load signals, conversion events and matched enquiry email | Build advertising audiences and measure page-level campaign performance, audit CTA performance, and ad conversions after marketing consent. The sitewide audience signal includes the current page URL and title and is not recorded as a conversion. After an enquiry is accepted for processing, the email address you provided is normalised and one-way hashed for conversion matching, and our server also sends your IP address, browser user agent and Meta browser cookie identifiers (_fbp/_fbc) to Meta to attribute that conversion. Lawful basis: consent. |
Meta, and Google Ads if configured. | The unhashed email is not added to analytics events. Conversion event requests are not intentionally stored beyond operational logs; platform retention is controlled by Meta/Google settings and terms. |
| Business, accounting, and legal records | Manage contracts, invoices, tax, and legal obligations. Lawful basis: contract and legal obligation. | Accountants, banks, professional advisers, regulators, or authorities where required. | Normally up to 6 years after the relevant financial year or relationship ends. |
2. Cookies and consent
Analytics and marketing technologies are off by default. You can accept, reject non-essential technologies, manage cookies, or later withdraw consent through Cookie preferences. See the Cookie Policy for the current categories, technologies, and withdrawal behaviour.
3. Third parties and international transfers
We use service providers for hosting, email, essential abuse prevention, analytics, advertising measurement, and operational support. Cloudflare Turnstile processes essential security signals when you use the enquiry form. Providers such as Cloudflare, Google and Meta may process data in the United States or other countries. Where a restricted international transfer is involved, we rely on the provider’s stated transfer safeguards, such as adequacy arrangements, standard contractual clauses, and the UK international data transfer addendum where applicable. You can contact us for more information about a specific transfer or to request a summary of relevant safeguards where available.
4. Your rights
Depending on the circumstances, you may have the right to access, correct, erase, restrict, object to processing, and receive a portable copy of your personal data. Where processing is based on consent, you can withdraw that consent at any time. You also have a separate right to object at any time to processing based on legitimate interests, including website security, operational logging, and responding to enquiries where applicable.
You can opt out of direct marketing at any time. To exercise a right, email go@zbang.ai.
5. Automated decision-making and profiling
This website does not make solely automated decisions that produce legal or similarly significant effects. If you consent to marketing technologies, Google or Meta may use conversion and audience signals according to their own policies and your platform settings.
6. Security
We use HTTPS, access controls, limited access to systems, and operational monitoring appropriate to this website. No internet service can be guaranteed completely secure, so please avoid sending unnecessary sensitive information through general contact channels.
7. Changes to this policy
We may update this policy as the site, products, providers, or legal requirements change. Material changes will be reflected by updating the effective date above and, where appropriate, refreshing consent choices.
8. Complaints
If you have a complaint, contact us first and we will work to resolve it. You can also contact the Information Commissioner’s Office:
Information Commissioner’s OfficeWycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Online form: ico.org.uk/make-a-complaint
If EU GDPR applies to you, you may also complain to the supervisory authority in the EU member state where you live, work, or where you believe an issue occurred.
9. Contact
Questions about this policy: go@zbang.ai