Privacy Policy

Who we are

Zeffron Systems is a product and AI studio based in London, United Kingdom. We act as the data controller for personal information you provide to us through this website or in the course of an engagement.

Contact for privacy questions: [email protected].

What we collect

We collect personal data in three situations:

• Project briefs. When you submit a brief through the form on this site, we collect your name, email address, company name (if provided), the project description you write, any files you upload, and the technical metadata of the request (IP address, browser, time).
• Engagement correspondence. If we begin work together, we keep the records needed to deliver the project — emails, meeting notes, shared documents, and billing details.
• Site analytics. We use Ahrefs Analytics to understand which pages are read and how visitors arrive. The data is aggregated and does not identify you personally.

Why we use it

We rely on the following lawful bases under UK GDPR:

• Legitimate interests — responding to project briefs, communicating during an engagement, and protecting our systems from abuse.
• Contract performance — invoicing, delivering work, and meeting our obligations to you as a client.
• Consent — sending you optional product or thought-leadership emails when you have explicitly opted in.
• Legal obligation — keeping accounting records that HMRC requires us to retain.

Who we share it with

We do not sell your data. We share the minimum necessary with vetted service providers acting on our instructions:

• Resend — transactional email delivery for brief notifications and project correspondence.
• Ahrefs Analytics — privacy-friendly site usage measurement.
• Cloud infrastructure — application hosting and database storage on managed providers in the UK or EU.
• Cal.com — scheduling discovery calls if you book one.

If we ever need to share personal data outside the UK or EEA, we use the UK International Data Transfer Agreement or Standard Contractual Clauses to safeguard it.

How long we keep it

Project briefs that don't lead to engagement are deleted within 24 months. Client and engagement records are retained for seven years after the end of the relationship to satisfy UK accounting and contractual obligations. Marketing-list entries are kept until you unsubscribe.

Your rights

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you.
• Correct anything that's inaccurate.
• Ask us to delete it, where there is no overriding legal reason to keep it.
• Restrict or object to how we process it.
• Withdraw consent at any time.
• Lodge a complaint with the UK Information Commissioner's Office (ICO).

Email [email protected] to exercise any of these rights. We respond within one month.

Cookies

This site does not set advertising or cross-site tracking cookies. We use a small number of essential cookies and local-storage entries to keep you signed in to internal tools and to remember your preferences. Analytics is performed without third-party tracking cookies.

Changes to this policy

We update this policy when our practices change or when the law requires. The "Last updated" date at the top of this page reflects the most recent revision. If we make material changes that affect existing clients, we will email you in advance.