Privacy Policy
Last updated: 11 August 2026
1. Introduction
Zenvio Digital Ltd (“Zenvio Digital”, “the Company”, “we”, “us”, “our”) is a digital marketing agency registered in England and Wales under company number 17363362, with its registered office at Office 20344, 182-184 High Street North, East Ham, London E6 2JA, United Kingdom.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website (zenvio-digital.com), engage us for services, or otherwise interact with us. It also explains your rights under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 (“DPA 2018”).
We are the data controller responsible for your personal data. If you have any questions about this Policy or wish to exercise any of your rights, please contact us using the details in Section 13.
2. Scope of this Policy
This Policy applies to:
- Visitors to our website
- Prospective clients who contact us for a quote, proposal, or consultation
- Clients who engage us to provide digital marketing services
- Individuals whose data we process on behalf of our clients in the course of delivering services (for example, running advertising campaigns)
- Job applicants and prospective contractors/freelancers
Where we process personal data on behalf of a client (for example, campaign audience data within an advertising platform), the client remains the data controller for that data and we act as a data processor under a separate data processing agreement.
3. Personal data we collect
We may collect and process the following categories of personal data:
3.1 Identity and contact data: Full name, job title, company name, email address, telephone number, postal address.
3.2 Enquiry and correspondence data: Details you provide in enquiry forms, emails, calls, or meetings, including the nature of your enquiry, your business goals, and any documents or information you choose to share with us.
3.3 Client and contract data: Billing details, service agreements, invoices, payment records, and communications relating to the delivery of services.
3.4 Technical and usage data: IP address, browser type and version, device type, operating system, time zone setting, referral source, pages visited, and interaction data collected via cookies and similar technologies (see our Cookie Policy).
3.5 Marketing and communications data: Your preferences in relation to receiving marketing communications from us, and your communication history.
3.6 Campaign and advertising platform data:Where we manage advertising or marketing campaigns on behalf of a client, we may process data made available through advertising platforms (e.g. audience insights, performance metrics), acting as a processor on the client’s instructions.
We do not knowingly collect special category data (e.g. health, religion, ethnicity) and ask that you do not submit such data to us via our website or correspondence unless specifically requested.
4. How we collect your data
We collect data:
- Directly from you, when you fill in a form, send us an email, book a call, or otherwise contact us
- Automatically, as you interact with our website, through cookies and similar technologies
- From third parties, such as publicly available business information (e.g. LinkedIn, Companies House) where relevant to a prospective business relationship
- From our clients, where we are engaged to process data on their behalf as part of service delivery
5. How we use your personal data and our legal basis
We only use your personal data where the law allows us to do so. The table below sets out our processing activities and the corresponding legal basis under UK GDPR Article 6.
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and providing a proposal | Legitimate interests / steps taken prior to entering a contract |
| Onboarding you as a client and delivering agreed services | Performance of a contract |
| Invoicing and processing payments | Performance of a contract / legal obligation |
| Sending you service-related communications (e.g. reporting, account updates) | Performance of a contract |
| Sending marketing communications about our services | Consent, or legitimate interests where permitted (e.g. existing client relationships), subject to your right to opt out at any time |
| Improving our website, services, and client experience | Legitimate interests |
| Maintaining the security of our systems and preventing fraud | Legitimate interests |
| Complying with accounting, tax, and other legal obligations | Legal obligation |
| Managing job or freelance applications | Steps taken prior to entering a contract / legitimate interests |
Where we rely on legitimate interests, we have considered that this processing is proportionate and does not override your rights and freedoms.
6. Cookies and similar technologies
Our website uses cookies and similar technologies to operate effectively, understand how visitors use the site, and, where consented to, support marketing activities. Full details, including the categories of cookies used and how to manage your preferences, are set out in our separate Cookie Policy.
7. Sharing your personal data
We may share your personal data with the following categories of recipients, always under appropriate confidentiality and, where required, data processing obligations:
- Freelance specialists and contractors engaged to support service delivery (e.g. design, copywriting, development), who work under our direct oversight
- Software and technology providers, including project management, analytics, email, and advertising platform providers, used to operate our business and deliver services
- Payment processors and financial institutions, to process invoices and payments
- Professional advisors, such as accountants, auditors, or legal counsel, where reasonably necessary
- Regulatory, tax, or law enforcement authorities, where required by law or to protect our legal rights
- A prospective buyer or successor, in the event of a sale, merger, or restructuring of our business, subject to confidentiality obligations
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
8. International data transfers
Where any of our service providers or sub-processors are located outside the United Kingdom, we ensure appropriate safeguards are in place before any personal data is transferred, such as:
- Transferring data to countries subject to UK adequacy regulations, or
- Using the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses
You may request further details of the safeguards used for a specific transfer by contacting us.
9. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any applicable legal, accounting, or reporting requirements. As a general guide:
- Enquiry data from prospects who do not become clients is retained for up to 24 months, after which it is deleted unless you have asked us to keep in touch
- Client and contract data, including invoices and correspondence, is retained for 6 years following the end of the engagement, in line with UK statutory record-keeping requirements
- Website usage data collected via cookies is retained in accordance with the retention periods set out in our Cookie Policy
- Marketing data is retained until you withdraw consent or object to further processing
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage, including access controls, encryption where appropriate, and confidentiality obligations on our contractors and service providers.
11. Automated decision-making
We do not use your personal data for any form of automated decision-making that produces legal or similarly significant effects concerning you.
12. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access – to obtain a copy of the personal data we hold about you
- Right to rectification – to have inaccurate or incomplete data corrected
- Right to erasure – to request deletion of your data in certain circumstances
- Right to restrict processing – to limit how we use your data in certain circumstances
- Right to data portability – to receive your data in a structured, machine-readable format, or have it transferred to another controller
- Right to object – to object to processing based on legitimate interests or for direct marketing purposes
- Right to withdraw consent – where processing is based on consent, at any time, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, please contact us using the details in Section 13. We will respond within one month, as required by law. Some rights are subject to exceptions and limitations under UK data protection law.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO), the UK’s data protection regulator, at www.ico.org.uk or by calling 0303 123 1113, although we would welcome the opportunity to address your concerns directly first.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
Zenvio Digital Ltd
Office 20344, 182-184 High Street North, East Ham, London E6 2JA
Email: hello@zenvio-digital.com
14. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with a revised “last updated” date. We encourage you to review this Policy periodically.