Privacy Policy
Draft — not yet reviewed or published. Last edited 18 July 2026.
Who we are
This website is operated by Zeena Consultancy Ltd ("we", "us", "our"), a UK-based business process automation consultancy. For any question about this policy or your data, contact [email protected].
What we collect
| Source | What's collected | Why |
|---|---|---|
| Contact form | Name, company, email, phone (optional), and the message you send | To reply to your enquiry and assess whether we can help |
| Direct email | Whatever you include when you email us | To respond and, if you become a client, deliver the service |
| Site visit | Standard server/security logs (IP address, browser type, pages visited) via our hosting and Cloudflare's network | Security, abuse prevention, and keeping the site running |
| Cookies / local storage | See our cookie notice — currently limited to remembering your cookie choice | Site functionality |
We don't currently run analytics or advertising tracking on this site. If that changes (for example, adding Google Analytics), this policy and the cookie notice will be updated first, and the cookie banner will reflect the new categories.
Our lawful basis for using it
- Legitimate interests — responding to enquiries sent through the contact form or by email.
- Contract — where you become a client, to deliver and manage the automation work agreed.
- Consent — for anything beyond the above, such as marketing emails, which we will only send if you've opted in.
Who we share it with
We use a small number of service providers to run this business, each acting as a data processor on our behalf:
- Google Workspace — for business email.
- Our hosting provider (Contabo) — where the website and its data are physically hosted.
- Cloudflare — provides DNS and security/CDN in front of the site.
- A CRM (e.g. HubSpot or Pipedrive) if and when one is adopted for lead tracking, as described in our internal project plan.
We don't sell personal data, and we don't share it with third parties for their own marketing purposes.
International transfers
Some of the providers above may process data outside the UK/EEA. Where that happens, we rely on the provider's standard contractual clauses or an equivalent adequacy safeguard.
How long we keep it
Enquiry and client data is kept for as long as needed to respond, deliver the service, and meet our legal/accounting obligations, and is deleted or anonymised after that. [Specific retention periods to be confirmed and inserted here — e.g. "12 months after last contact for unconverted enquiries."]
Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you and get a copy
- Ask us to correct inaccurate data
- Ask us to delete your data, where there's no legal reason for us to keep it
- Restrict or object to certain processing
- Receive your data in a portable format
- Complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data
To exercise any of these, email [email protected].
Children
This site and our services are aimed at businesses, not children, and we don't knowingly collect data from anyone under 18.
Changes to this policy
We'll update this page when what we collect or how we use it changes, and update the date at the top.