Legal

Privacy Policy

Last updated: 13 April 2026

Introduction

Zigaflow Ltd ("Zigaflow", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information about you when you visit our website, use our platform, or interact with us. It applies to all users of zigaflow.com and the Zigaflow platform.

Zigaflow Ltd is registered in England and Wales (company number 03888530) with a registered office at 2A Charing Cross Road, London WC2H 0HF. We are registered with the Information Commissioner's Office (ICO) under registration number ZA262432.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy or how we handle your data, please contact us at support@zigaflow.com.

Information we collect

Information you provide directly

We collect personal data that you provide to us when you:

  • Complete a contact form on our website
  • Sign up for our newsletter or download a lead magnet
  • Use our ROI calculator and request a personalised report
  • Register for a Zigaflow account or free trial
  • Book a demo or speak with our sales team
  • Contact us for support

The information collected typically includes your name, email address, phone number, company name, and the content of your enquiry or message.

Information collected automatically

When you visit our website, we automatically collect certain technical information including your IP address, browser type and version, pages visited, time spent on pages, and referring URLs. This data is collected via cookies and analytics tools. Please see our Cookie Policy for full details.

How we use your information

We use your personal data for the following purposes:

  • To respond to your enquiries and provide customer support
  • To send you information about Zigaflow products and services where you have consented or we have a legitimate interest
  • To provide and improve our platform and website
  • To send transactional emails related to your account or requests
  • To analyse how our website and platform are used
  • To comply with legal obligations

Lawful basis for processing

We rely on the following lawful bases to process your personal data under UK GDPR:

  • Consent — where you have given us explicit consent, such as signing up for our newsletter
  • Contract — where processing is necessary to fulfil a contract with you or take steps at your request before entering into a contract
  • Legitimate interests — where we have a legitimate business interest in processing your data that is not overridden by your rights, such as improving our services and marketing to business contacts
  • Legal obligation — where we are required to process data to comply with a legal requirement

Third parties we share data with

We share personal data with the following third-party service providers who process data on our behalf:

  • ActiveCampaign — email marketing and CRM platform. Data is stored on servers in the United States under Standard Contractual Clauses.
  • Intercom — customer messaging and support platform.
  • Stripe — payment processing. Stripe is PCI-DSS compliant.
  • Sanity — headless CMS for website content management.
  • Vercel — website hosting and deployment.
  • Google Analytics (via GTM) — website analytics.
  • Resend — transactional email delivery.
  • Usercentrics — cookie consent management.

We do not sell your personal data to third parties. We require all third-party processors to maintain appropriate security measures and to process data only in accordance with our instructions.

Data retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Marketing contact data is retained until you unsubscribe or request deletion. Account data is retained for the duration of your account and for a reasonable period afterwards in case of disputes.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data we hold about you
  • Right to rectification — you can ask us to correct inaccurate or incomplete data
  • Right to erasure — you can ask us to delete your personal data in certain circumstances
  • Right to restrict processing — you can ask us to limit how we use your data
  • Right to data portability — you can request your data in a machine-readable format
  • Right to object — you can object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at support@zigaflow.com. We will respond within one month. You also have the right to lodge a complaint with the ICO at ico.org.uk.

Cookies

We use cookies and similar tracking technologies on our website. Please see our Cookie Policy for full details of the cookies we use and how to manage your preferences.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data is transmitted over HTTPS. Access to personal data is restricted to authorised personnel only.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@zigaflow.com or write to us at Zigaflow Ltd, 2A Charing Cross Road, London WC2H 0HF.