Our Commitment to Your Privacy
At ZaGenie, we believe that your personal information belongs to you. We respect your privacy and are committed to protecting the information you entrust to us.
We aim to collect only the information reasonably necessary to provide our services, maintain our community, fulfil our legal obligations and improve your experience.
Our privacy commitments are straightforward:
- We do not sell or rent your personal information.
- We do not sell our members’ email addresses or mailing lists.
- We do not share your information with third parties for their independent marketing without an appropriate legal basis.
- We collect only the information reasonably necessary for the purposes described in this Policy.
- We use appropriate technical and organisational measures to protect your information.
- We use trusted service providers to help operate our Website and services.
- We do not store complete payment card details on our servers.
- We respect your rights to access, correct and, where applicable, delete your personal information.
- We provide ways to manage your marketing preferences and unsubscribe from promotional communications.
- We aim to be transparent about cookies, analytics, AI-assisted services and other technologies that process personal information.
You remain in control of your personal information, subject to applicable legal and contractual requirements.
This Privacy Policy explains how we collect, use, store, protect and share personal information when you interact with ZaGenie.
1. Who We Are
This Privacy Policy applies to this website (the “Website”) and the related products, services, memberships, communications and online community operated by ZaGenie LTD.
Data Controller
ZaGenie LTD Fergusson House 128 City Road London EC1V 2NX United Kingdom
Website: https://zagenie.com/ Privacy enquiries: https://zagenie.com/support/
ZaGenie LTD is the data controller for personal information processed for its own purposes through the Website and related services.
This means that we determine why and how that information is processed.
Where we process personal information on behalf of a client under a separate service agreement, our role and responsibilities may differ and will be governed by that agreement.
2. Scope of This Privacy Policy
This Policy applies to personal information collected when you:
- Visit or browse our Website.
- Register for an account or create a community profile.
- Purchase products, subscriptions or memberships.
- Participate in community discussions, groups or events.
- Subscribe to newsletters or other communications.
- Download resources or register for educational activities.
- Complete forms, questionnaires or surveys.
- Contact us through email, support tickets or other communication channels.
- Use our software, digital tools or interactive services.
- Interact with our advertising, promotional content or affiliate programmes.
It also applies to information collected automatically through our Website and supporting technologies.
This Policy does not govern independent third-party websites or services that have their own privacy policies.
3. Information We Collect
We collect personal information directly from you, automatically when you use our Website and, where appropriate, from third-party services you choose to connect or use.
3.1 Information You Provide
Depending on how you interact with ZaGenie, we may collect:
- First name and surname.
- Email address.
- Username and account details.
- Profile photograph or avatar.
- Country, location or time zone.
- Optional profile information, such as age, gender, biography, professional interests or social media links.
- Contact details and information included in your enquiries.
- Membership and subscription information.
- Billing information and transaction records.
- Preferences, feedback and survey responses.
- Community posts, comments, messages and other contributions.
- Information submitted when registering for events, courses or other activities.
We distinguish between information required to provide a particular service and information you may choose to share voluntarily.
Optional profile fields are not compulsory unless clearly identified as necessary for a specific feature or service.
Please avoid including sensitive personal information in public profiles, comments or community discussions.
3.2 Information Collected Automatically
When you visit our Website, our systems and service providers may automatically collect certain technical and usage information, including:
- IP address.
- Browser type and version.
- Operating system and device type.
- Device identifiers, where applicable.
- Pages visited and website navigation.
- Date, time and duration of visits.
- Referral sources.
- Approximate geographical location derived from your IP address.
- Login activity and account access records.
- Security events, error logs and technical diagnostic information.
- Cookie identifiers and other tracking information, where permitted.
We use this information to operate and secure the Website, identify technical problems, prevent abuse and understand how our services are used.
IP addresses, cookie identifiers and other technical information may constitute personal data under applicable data protection law.
3.3 Information From Third Parties
Where you choose to use third-party authentication, social login, payment or integrated services, we may receive information necessary to provide the requested functionality.
The information received depends on the service, the permissions you grant and the relevant third party’s privacy practices.
We do not require access to unrelated third-party information simply because you connect an account or service.
4. How We Use Your Information
We process personal information only where we have a valid purpose and an appropriate legal basis.
The principal purposes and corresponding legal bases are outlined below.
| Purpose | Legal basis |
|---|---|
| Creating and managing your account or membership | Performance of a contract |
| Providing purchased products, digital resources and services | Performance of a contract |
| Processing orders, subscriptions and payments | Performance of a contract and legal obligations |
| Responding to enquiries and providing customer support | Contractual necessity or legitimate interests |
| Operating and moderating the online community | Contractual necessity and legitimate interests |
| Maintaining website security and preventing fraud | Legitimate interests and, where applicable, legal obligations |
| Maintaining accounting and legally required business records | Legal obligation |
| Sending newsletters and promotional communications | Consent or another lawful basis where permitted |
| Using non-essential cookies and tracking technologies | Consent or an applicable legal exemption |
| Analysing performance and improving our services | Legitimate interests or consent, as appropriate |
| Establishing, exercising or defending legal claims | Legitimate interests or other applicable legal grounds |
Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether our interests are overridden by your rights and freedoms.
We will not use your personal information for unrelated purposes without identifying an appropriate legal basis and providing any further notice required by law.
5. Accounts, Memberships and Community Profiles
Creating a ZaGenie account or becoming a member may require you to provide certain personal information.
We use this information to authenticate your account, administer your membership, provide access to relevant features and communicate important service-related information.
You may also choose to provide additional information in your community profile.
Depending on the Website’s settings and your privacy preferences, certain profile information, posts, comments and other contributions may be visible to other members or the public.
Please remember that information you choose to publish in publicly accessible areas may be viewed, copied or shared by others.
We encourage you to review your profile and privacy settings and exercise discretion when publishing personal information.
You can manage available account settings through your member account.
Deleting your account does not necessarily remove information that we are legally required to retain or copies of public material already obtained by third parties.
Community content may also be retained, removed or anonymised where permitted by law and necessary for legitimate purposes.
6. Payments and Financial Information
ZaGenie uses Stripe as a payment processing provider.
When you purchase a product, subscription or membership, your payment information is processed through the applicable payment service.
We do not store complete payment card numbers or card security codes on our Website servers.
We may retain transaction-related information, including payment status, amounts, dates, billing details, invoices, refunds and payment references.
This information is used to fulfil purchases, manage subscriptions, maintain accounting records, prevent fraud and comply with financial and tax obligations.
Stripe processes personal information in accordance with its own privacy obligations and applicable agreements.
You can review Stripe’s Privacy Policy for further information.
7. Newsletters, Email Communications and Marketing
We use email to provide information about your account, transactions, subscriptions, services and other activities you have requested.
We may also send newsletters, educational material, promotional offers, product announcements and other marketing communications where permitted by applicable law.
We distinguish between essential service communications and optional marketing messages.
Where consent is required, we will request your permission before sending marketing communications.
Where legally permitted, we may contact existing customers about our own similar products and services, provided the applicable requirements are met and an appropriate opportunity to opt out is available.
We do not automatically enrol every person who downloads a resource, attends an event or makes a purchase in our marketing newsletter.
You can unsubscribe from marketing emails at any time using the unsubscribe link provided in the relevant message or by contacting our Support Centre.
Unsubscribing from marketing does not prevent us from sending necessary transactional, account, security or service-related communications.
Email Tracking
We may use email delivery statistics and tracking technologies to assess whether messages have been delivered, opened or interacted with.
Such technologies may include tracking pixels and individually identifiable links.
Where consent is legally required for these technologies, we will obtain it before using them.
Email tracking information may be affected by privacy features in email applications and should not be interpreted as a definitive indication of individual behaviour.
You may contact us to enquire about your email preferences and available tracking controls.
8. Cookies and Similar Technologies
Our Website uses cookies and related technologies to support essential functionality, improve performance and, where enabled, provide analytics and other optional features.
Cookies are small files stored on your device that help websites recognise your browser, maintain sessions and remember certain preferences.
We distinguish between essential and non-essential technologies.
Essential Cookies
These support functions such as account authentication, login sessions, security, shopping baskets, payment processes and the storage of privacy preferences.
Where legally exempt from consent requirements, essential cookies may be used without your prior consent.
Functional Cookies
These may remember preferences such as language, display settings or other personalised features.
Where consent is required, these cookies will only be used with the appropriate permission.
Analytics Cookies
Where enabled, analytics technologies may help us understand website traffic, visitor behaviour, content performance and technical issues.
We may use services such as Google Analytics or other analytics platforms, subject to our actual configuration and applicable privacy requirements.
We will obtain consent where required and will apply any relevant legal exemption only when its conditions are satisfied.
Marketing and Advertising Cookies
Where enabled, advertising cookies, pixels or similar technologies may be used to measure campaigns, assess advertising performance or deliver relevant promotional content.
Non-essential marketing and advertising technologies will not be activated before the necessary consent has been obtained.
Managing Your Cookie Preferences
Where non-essential cookies or similar technologies require consent, we will provide a means of accepting, rejecting or managing them.
You can also configure your browser to restrict or delete cookies.
Disabling essential cookies may affect the availability or functionality of certain Website features.
Further information about the cookies actually deployed on the Website, their providers, purposes and relevant durations should be available through our cookie information and preference controls.
9. Website Security and Cloudflare
We use Cloudflare to support website performance, content delivery, availability and security.
Cloudflare may process technical information such as IP addresses, browser information, request data and security-related information to provide these services.
This may include identifying suspicious activity, managing traffic, mitigating malicious requests and protecting the Website against cyberattacks.
Some security technologies may use cookies or other technical identifiers where necessary and legally permitted.
You can review Cloudflare’s Privacy Policy for additional information.
We may also use server logs, security software and other technical measures to detect and investigate unauthorised access, attempted fraud, spam or abuse.
10. Customer Relationship Management
We use an internally managed customer relationship management system (CRM) to organise information about our members, customers, subscribers and other contacts.
Our CRM may store contact details, account information, communication preferences, membership records, purchase history and relevant interactions with ZaGenie.
The information is used for customer support, account administration, communications, relationship management and other purposes described in this Policy.
Access is restricted according to operational requirements.
An internally managed CRM does not necessarily mean that every supporting service or infrastructure component is operated exclusively by ZaGenie. Relevant hosting, email delivery, backup and technical service providers may process information on our behalf.
11. Artificial Intelligence and Automated Services
ZaGenie may use artificial intelligence (AI) and automated technologies to support content production, customer service, research, analysis, software development and other business activities.
Where personal information is processed using AI-assisted tools, we will identify an appropriate legal basis and apply relevant data protection requirements.
Depending on the service, personal information may be processed by an external AI provider acting on our behalf or in another capacity identified in its applicable privacy terms.
We aim to minimise the personal information supplied to such systems and apply appropriate contractual and technical safeguards.
We do not assume that information supplied to an external AI service remains exclusively within ZaGenie’s own infrastructure.
Where an AI-powered feature is made available directly to you, additional information may be provided about the relevant provider, data processing and available controls.
We will not make solely automated decisions that produce legal or similarly significant effects on individuals without an appropriate legal basis and the safeguards required by applicable law.
12. Sharing Your Information
ZaGenie does not sell or rent your personal information.
We may, however, share information where reasonably necessary for the purposes described in this Policy.
Recipients may include:
- Hosting, infrastructure and content delivery providers.
- Payment processors and financial service providers.
- Email delivery and communication platforms.
- Customer support, CRM and membership service providers.
- Security, analytics and technical service providers.
- Professional advisers, including accountants, auditors and legal representatives.
- Public authorities, regulators or law enforcement bodies where disclosure is legally required or otherwise justified.
- Other parties where you have authorised the disclosure or requested an integrated service.
Where a provider processes personal information on our behalf, we seek to ensure that appropriate contractual, confidentiality and security obligations apply.
Some independent service providers, including payment providers, may also act as separate data controllers for their own legally defined purposes.
Where you voluntarily participate in third-party promotions or services, we will explain any relevant transfer of personal information and obtain consent where required.
We may disclose information as part of a lawful business restructuring, acquisition or transfer, subject to applicable data protection requirements.
We will not treat a relationship with an affiliate, commercial partner or other business as automatic permission to share your information for unrelated purposes.
13. International Data Transfers
ZaGenie LTD operates from the United Kingdom and may provide services to individuals in the United Kingdom, European Union and other countries.
Our service providers and supporting infrastructure may process or store personal information in different jurisdictions.
Where personal information is transferred internationally, we will apply the safeguards required by applicable data protection law.
These may include:
- An applicable adequacy decision.
- Approved standard contractual clauses.
- The UK International Data Transfer Agreement or an applicable UK Addendum.
- Other legally recognised transfer mechanisms.
Where necessary, we will assess the circumstances of a transfer and implement additional safeguards.
We will not assume that a provider’s international operations automatically establish compliance with data protection requirements.
You may contact us for information about the safeguards applicable to transfers of your personal information.
14. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including any applicable legal, accounting, contractual, security or regulatory requirements.
The applicable retention period depends on the type of information and the reason for processing it.
For example:
- Account and membership information: Generally retained while your account remains active and subsequently for any period justified by legal or legitimate operational requirements.
- Transaction and accounting records: Retained for the periods required by applicable tax, accounting and financial legislation.
- Marketing information: Retained while there is an appropriate legal basis for marketing, subject to periodic review and your right to unsubscribe or object.
- Support correspondence: Retained for as long as reasonably necessary to resolve enquiries, maintain relevant records and address potential disputes.
- Security and technical logs: Retained for periods proportionate to their operational, security and legal purposes.
- Community contributions: Retained according to the applicable account, community and moderation requirements, subject to your rights and our legal obligations.
- Consent and suppression records: Retained where necessary to demonstrate compliance and respect your communication preferences.
We determine appropriate retention periods by considering the amount, nature and sensitivity of the information, the purposes of processing, potential risks and applicable legal requirements.
When information is no longer needed, we will delete it, anonymise it or otherwise dispose of it securely, subject to applicable legal obligations.
Where deletion is requested, some limited records may need to be retained to comply with the law, resolve disputes, establish legal claims or prevent unwanted communications.
15. How We Protect Your Information
We implement technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, misuse and destruction.
These may include, as appropriate:
- Encrypted connections using HTTPS and TLS.
- Access controls and authentication.
- Restricted administrative privileges.
- Website and infrastructure security controls.
- Security monitoring and abuse prevention.
- Software maintenance and security updates.
- Appropriate backup and recovery arrangements.
- Contractual safeguards for relevant service providers.
No method of transmitting or storing information over the internet is completely secure.
Although we take reasonable measures to protect personal information, we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials and should notify us promptly if you suspect unauthorised access to your account.
Where a personal data breach occurs, we will assess the incident and notify the relevant authorities and affected individuals when required by law.
16. Your Data Protection Rights
Depending on your location, the applicable legislation and the circumstances of the processing, you may have the following rights.
Right of access: Request confirmation of whether we process your personal information and obtain access to it.
Right to rectification: Request correction of inaccurate information or completion of incomplete information.
Right to erasure: Request deletion of your personal information where the applicable legal conditions are met.
Right to restrict processing: Request that we limit the processing of your information in certain circumstances.
Right to data portability: Obtain certain personal information in a structured, commonly used and machine-readable format and, where applicable, request its transfer.
Right to object: Object to processing based on legitimate interests or other applicable grounds. You have the right to object to the processing of your personal information for direct marketing at any time.
Right to withdraw consent: Withdraw your consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
Rights relating to automated decision-making: Exercise applicable rights and safeguards concerning decisions based solely on automated processing that produce legal or similarly significant effects.
These rights are not absolute and may be subject to legal conditions and exceptions.
We will assess and respond to requests in accordance with the requirements and timescales of the applicable legislation.
17. Accessing, Correcting or Deleting Your Information
You can manage available personal information and account preferences through your member account.
If you wish to exercise your data protection rights, you can submit a request through our Support Centre.
You may request:
- A copy of the personal information we hold about you.
- Correction of inaccurate or incomplete information.
- Deletion of eligible personal information.
- Restriction of particular processing activities.
- Withdrawal of consent.
- Information about applicable international transfers.
- Other rights available under applicable data protection law.
We may request reasonable information to verify your identity before fulfilling a request, particularly where disclosure could compromise the security or privacy of your account.
We will not request more verification information than is reasonably necessary.
Where a request is valid, we will normally respond without undue delay and within one month, subject to any applicable statutory extension or alternative legal deadline.
Exercising your rights will ordinarily be free of charge. Fees may apply in the limited circumstances permitted by law.
18. Children’s Privacy
The Website is intended for a general audience and is not specifically directed at children under the age of 13.
We do not knowingly collect personal information from children under 13.
Where services are available to individuals below the applicable age of digital consent, we will obtain parental or guardian authorisation when legally required.
Age requirements may vary depending on the individual’s country and the particular service.
If we become aware that personal information has been collected from a child in circumstances that do not comply with applicable law, we will take appropriate steps to address the situation, including deletion where required.
Parents or guardians who believe that a child has provided information inappropriately should contact our Support Centre.
19. Third-Party Websites and Services
Our Website may contain links to independent websites, applications, social networks, payment platforms and other third-party services.
These services may collect and process personal information according to their own privacy policies.
We do not control the privacy practices of independent third parties and encourage you to review their policies before providing personal information.
Where a third-party service is integrated into our Website, we will comply with the disclosure, consent and other obligations applicable to our use of that integration.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technologies, business operations, legal requirements or data protection practices.
The date displayed at the beginning of this Policy indicates when it was last updated.
The current version will be available on the Website.
Where changes materially affect how we process your personal information, we will provide any additional notification or obtain any consent required by applicable law.
We encourage you to review this Policy periodically.
21. Complaints and Supervisory Authorities
If you have concerns about how we process your personal information, please contact us first so that we have an opportunity to investigate and address the matter.
You also have the right to lodge a complaint with the relevant data protection supervisory authority.
In the United Kingdom, the supervisory authority is the Information Commissioner’s Office (ICO).
Information Commissioner’s Office Website: https://ico.org.uk/ Telephone: +44 (0)303 123 1113
If you are located in the European Economic Area and the EU GDPR applies to the processing concerned, you may also have the right to lodge a complaint with the competent data protection authority in the relevant EEA member state.
A list of European data protection authorities is available through the European Data Protection Board.
You do not need our permission to contact a supervisory authority.
22. Contact Information
For questions, privacy enquiries, data access requests, account deletion requests or concerns about this Policy, please contact:
ZaGenie LTD Fergusson House 128 City Road London EC1V 2NX United Kingdom
Privacy enquiries and deletion requests: https://zagenie.com/support/
.
.
