Privacy Policy

1. Who we are

ZENZBL is based in Sydney, New South Wales, Australia. In this policy, “we”, “us” and “our” refer to ZENZBL.

This policy explains how we handle personal information collected through zenzbl.com and related enquiries by email or other direct contact. Products, trials and client projects may have additional privacy arrangements agreed separately.

For privacy questions, requests or complaints, contact our Privacy Contact at info@zenzbl.com.

2. Information we collect

When you contact us, we collect the information you provide. This may include your name, email address, business name, service interests, description of your needs and subsequent correspondence. Our website form requires a name, email address and enquiry description; business name and service interests are optional.

When you visit the website, our service providers may process technical information such as your IP address, browser and device information, requested pages, referring website, access times and security signals. Google Analytics also uses identifiers and cookies to produce website usage statistics.

Please send only information needed for the initial conversation. Do not include passwords, API keys, payment-card details, identity documents, health records or other sensitive personal information. Use fictional or de-identified examples where possible. If a project needs sensitive information or confidential records, contact us first to agree an appropriate transfer method and handling arrangements.

If you provide someone else’s personal information, you must be authorised to share it and give them any required notice. If we receive information we do not need, we will assess whether it should be deleted or de-identified, subject to applicable legal requirements.

3. How and why we use information

We use personal information to:

• receive, assess and respond to your enquiry;
• discuss your requirements and prepare proposals or agreed next steps;
• maintain correspondence and records relevant to those discussions;
• operate, troubleshoot and protect the website and prevent spam or misuse;
• understand website traffic and improve the website; and
• meet legal obligations and handle complaints or disputes where necessary.

Submitting an enquiry does not subscribe you to a marketing mailing list.

You may browse without identifying yourself directly. You may use a pseudonym for an initial enquiry where practical, but we need a working contact method to reply and may need your identity before entering a business engagement. If required information is not provided, we may be unable to respond or provide the requested service.

4. Website analytics and security

We use Google Analytics 4 to understand website traffic, including page visits, referring websites and general device and location information. Analytics cookies can distinguish visits and visitors; this information is not necessarily anonymous simply because it does not contain your name.

Our website analytics configuration does not intentionally send enquiry form contents, names, email addresses or customer user IDs to Google Analytics. It removes query strings and fragments from the page and referrer URLs supplied to Analytics and disables Google Signals and advertising personalisation signals. The website does not load Google Analytics when it detects a browser Global Privacy Control signal.

You can manage cookies through your browser, use tracking protection or enable Global Privacy Control in a supporting browser. These controls do not necessarily prevent information processing needed for security or delivery of the website. Google explains its Analytics practices at Safeguarding your data.

We use Cloudflare, including Turnstile, to deliver and protect the website and check whether form submissions are legitimate. This involves processing technical and security information, including IP addresses and browser signals. Our form sends the visitor’s IP address to Cloudflare for server-side verification. See the Cloudflare Turnstile Privacy Addendum.

5. Service providers and disclosures

Our current website and enquiry arrangements use:

• Cloudflare for hosting and delivery, security checks, rate limiting and sending enquiry emails;
• Namecheap Private Email to receive and store business email; and
• Google Gmail to receive forwarded copies of enquiry emails, and Google Analytics for website traffic reporting.

An enquiry submitted through the form is sent to our business mailbox and forwarded to the Gmail mailbox used to manage enquiries. Copies may therefore exist in more than one email service.

People authorised to handle your enquiry may access the relevant information. We may also disclose information to professional advisers where necessary, with your authorisation, or where required or permitted by law. Service providers process information under their applicable service agreements and privacy terms.

6. Overseas handling

Our providers operate internationally, so personal information may be stored, processed or accessed outside Australia.

Where applicable law requires safeguards for overseas disclosures, we take the steps required by that law. This policy does not ask you to waive privacy protections for overseas disclosures.

7. AI and information submitted to us

Offering AI services does not mean that the website enquiry form is an AI chatbot. The form’s current submission process delivers your message by email; it does not send the message to a generative AI model.

If responding to an enquiry or delivering a project requires processing such information with an AI service, we will explain the intended use and agree appropriate arrangements before doing so. Any consent required by law will be obtained separately.

8. Security and retention

We take reasonable steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure. The website uses encrypted connections, server-side form validation, spam checks and submission rate limits. The contact handler is designed to exclude message contents, visitor email addresses and challenge tokens from its application logs; delivery references and technical records may still be logged.

No online service can guarantee absolute security. Please contact us promptly if you believe information sent to us has been compromised.

We retain information only as long as reasonably needed for the purposes described in this policy, including applicable recordkeeping obligations and disputes. When it is no longer needed, we take reasonable steps to delete or de-identify it, subject to legal requirements and backup cycles.

9. Access, correction and deletion requests

Email info@zenzbl.com to request access to or correction of personal information we hold about you, or to ask us to delete information we no longer need. We may request proportionate identity verification before releasing or changing information.

We will respond within a reasonable time and comply with applicable legal requirements. If we cannot fulfil a request, we will explain why, unless the law prevents us from doing so, and explain available complaint options. Deletion may be limited by legal obligations, legitimate recordkeeping requirements or backup arrangements; we will explain relevant limitations.

10. Privacy complaints

Please email info@zenzbl.com with the details of your concern and the outcome you are seeking. We aim to respond within 30 days. If we need more time, we will explain the reason and expected timeframe.

If you are dissatisfied with our response, or do not receive a response within 30 days, you may contact the Office of the Australian Information Commissioner (OAIC) where the matter falls within its jurisdiction. See OAIC privacy complaints.

11. Changes

We may update this policy to reflect changes to our practices or legal requirements. The current version will be available on our website with its effective date. Where required, we will provide additional notice or obtain consent before using previously collected information for a new purpose.