Legal

Privacy policy

Last updated: 13 April 2026

Introduction

Zigaflow Ltd ("Zigaflow", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information about you when you visit our website, use our platform, or interact with us. It applies to all users of zigaflow.com and the Zigaflow platform.

Zigaflow Ltd is registered in England and Wales (company number 03888530) with a registered office at 2A Charing Cross Road, London WC2H 0HF. We are registered with the Information Commissioner's Office (ICO) under registration number ZA262432.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy or how we handle your data, please contact us at support@zigaflow.com.

Information we collect

Information you provide directly

We collect personal data that you provide to us when you:

  • Complete a contact form on our website
  • Sign up for our newsletter or download a lead magnet
  • Use our ROI calculator and request a personalised report
  • Register for a Zigaflow account or free trial
  • Book a demo or speak with our sales team
  • Contact us for support

The information collected typically includes your name, email address, phone number, company name, and the content of your enquiry or message.

Information collected automatically

When you visit our website, we automatically collect certain technical information including your IP address, browser type and version, pages visited, time spent on pages, and referring URLs. This data is collected via cookies and analytics tools. Please see our Cookie Policy for full details.

How we use your information

We use your personal data for the following purposes:

  • To respond to your enquiries and provide customer support
  • To send you information about Zigaflow products and services where you have consented or we have a legitimate interest
  • To provide and improve our platform and website
  • To send transactional emails related to your account or requests
  • To analyse how our website and platform are used
  • To generate reports, assessments, and communications using automated and AI-assisted tools, based on the information you provide
  • To comply with legal obligations

Lawful basis for processing

We rely on the following lawful bases to process your personal data under UK GDPR:

  • Consent — where you have given us explicit consent, such as signing up for our newsletter
  • Contract — where processing is necessary to fulfil a contract with you or take steps at your request before entering into a contract
  • Legitimate interests — where we have a legitimate business interest in processing your data that is not overridden by your rights, such as improving our services and marketing to business contacts
  • Legal obligation — where we are required to process data to comply with a legal requirement

Third parties we share data with

We share personal data with the following third-party service providers who process data on our behalf:

  • Vercel — website hosting and serverless processing of form submissions.
  • Sanity — content management and storage of enquiry, lead, and contact records.
  • Resend — transactional and notification email delivery.
  • Anthropic — AI processing of enquiry and prospect data to generate reports, assessments, and communications.
  • Microsoft 365 — sending and receiving email in connection with sales enquiries.
  • Explorium — sourcing and enrichment of business contact data for prospecting.
  • Calendly — scheduling of product demonstrations.
  • Intercom — live chat and customer support.
  • Google — website analytics and tag management, via Google Analytics and Google Tag Manager.
  • Sentry — error and performance monitoring.
  • Usercentrics — cookie consent management.

Some of these providers are located outside the United Kingdom, including in the United States. Where personal data is transferred internationally, we ensure it is protected by appropriate safeguards, such as the UK Addendum to the EU Standard Contractual Clauses or the International Data Transfer Agreement.

Where we run advertising campaigns, we may also use advertising and measurement technologies provided by Google and Meta. These are activated only with your consent, and any cookies they set are listed in our cookie consent banner.

We do not sell your personal data to third parties. We require all third-party processors to maintain appropriate security measures and to process data only in accordance with our instructions.

Data retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Marketing contact data is retained until you unsubscribe or request deletion. Account data is retained for the duration of your account and for a reasonable period afterwards in case of disputes.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data we hold about you
  • Right to rectification — you can ask us to correct inaccurate or incomplete data
  • Right to erasure — you can ask us to delete your personal data in certain circumstances
  • Right to restrict processing — you can ask us to limit how we use your data
  • Right to data portability — you can request your data in a machine-readable format
  • Right to object — you can object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at support@zigaflow.com. We will respond within one month. You also have the right to lodge a complaint with the ICO at ico.org.uk.

Cookies

We use cookies and similar tracking technologies on our website. Please see our Cookie Policy for full details of the cookies we use and how to manage your preferences.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data is transmitted over HTTPS. Access to personal data is restricted to authorised personnel only.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@zigaflow.com or write to us at Zigaflow Ltd, 2A Charing Cross Road, London WC2H 0HF.