Privacy Notice
ZENDRAL operates as a consulting and digital marketing agency and may carry out its activities through affiliated entities, depending on your location. In certain countries, privacy laws require that a Controller—the legal entity that determines the purposes and means of processing personal data—be identified.
Where applicable under local privacy regulations, the ZENDRAL entity responsible for processing your Personal Data (referred to as “we,” “our,” or “us” in this notice) will typically be the ZENDRAL entity operating in your country or region, unless a specific ZENDRAL affiliate is identified as the Controller in your interaction with us.
If you have any questions or are unsure about which ZENDRAL entity is acting as your Data Controller, please reach out to us at [email protected] (or your preferred contact email), and we will ensure your inquiry is directed to the appropriate entity.
What This Privacy Notice Covers
This Privacy Notice explains in detail the types of Personal Data that ZENDRAL may collect about you when you engage with us—whether through our digital experiences, marketing activities, business communications, events, or by visiting our offices.
By interacting with ZENDRAL and providing your Personal Data, you acknowledge and accept that your data may be collected, used, and disclosed in accordance with the purposes and lawful bases described in this Privacy Notice.
“Personal Data” refers to any information that relates to an identified or identifiable individual. This includes details such as your name, email address, phone number, mailing address, or any other data that can be used to identify you.
What This Privacy Notice Does Not Cover
This Privacy Notice does not apply to the following:
Information collected during our services performed for clients, where ZENDRAL acts as a data processor;
Personal information related to our employees, contractors, or job applicants;
Data collected via cookies or other tracking technologies;
Information gathered through specific tools or platforms we offer, which may be subject to their own privacy notices depending on the service and location.
If you’re seeking information on how cookies are used, about employee or applicant data, or about our role as a data processor, it’s important to refer to the appropriate policies provided through your point of contact with ZENDRAL.
ZENDRAL may collect and process Personal Data in a variety of ways, including:
Information you provide directly to us;
Data collected through automated technologies when you interact with our digital platforms;
Data obtained from other lawful sources.
Providing Personal Data is entirely your choice. However, if you decide not to share certain information, it may limit our ability to offer you some of our digital marketing or growth hacking services or to respond effectively to your inquiries.
In general, we collect Personal Data related to you and your engagement with ZENDRAL through:
Business communications or interactions (such as emails, contact forms, or consultations);
Participation in our events or campaigns;
Use of our websites, social media platforms, or other digital properties;
Analytics and tracking technologies used to enhance user experience and optimize performance.
This data helps us deliver, improve, and personalize our services while maintaining transparency and compliance with applicable data protection regulations.
Contact Data
ZENDRAL may collect your contact details when you interact with us—for example, by engaging in a business conversation, attending one of our events, requesting information, accessing our content, subscribing to updates, or visiting our offices. The Personal Data collected may include your:
Name
Email address
Phone number
Job title
Company or organization name
Work location or region
This information helps us maintain professional communication and respond appropriately to your inquiries.
Marketing and Communications Data
We may collect information about your marketing preferences and how you wish to be contacted, in accordance with applicable privacy laws. This includes whether you have expressed interest in receiving updates, insights, or offers related to ZENDRAL’s services and content.
Location Data
Occasionally, we may ask for your general location—such as your city or region—when coordinating meetings, events, or service delivery. This information is provided directly by you and is never collected through device tracking. It is only used to support relevant business interactions or service logistics.
Usage Data Related to Our Website(s)
ZENDRAL may collect Personal Data about how you interact with our website(s) and digital platforms. This includes information such as:
Pages viewed
Time spent on specific content
Search queries
Clicked content or services explored
This data helps us understand user behavior and improve the functionality and relevance of our digital experiences.
Profiling Data
We may use data gathered through your interactions with our website(s) to better understand your preferences and tailor content accordingly. This process, often referred to as profiling, involves the use of automated tools to analyze or predict potential interests, behaviors, or engagement patterns.
Profiling helps us refine our marketing strategies and deliver more relevant communications. Where applicable by law, you have the right to object to such profiling.
Data from Third Parties
ZENDRAL may obtain Personal Data about you from trusted third-party sources. These may include:
Analytics and data service providers
Affiliate or strategic partners
Professional platforms such as LinkedIn
Event registration or participation where ZENDRAL is a host or affiliated organizer
We may collect this data to better understand your professional interests and to enhance the relevance and effectiveness of our communications. ZENDRAL does not purchase or use precompiled Personal Data lists from commercial vendors.
Children
ZENDRAL does not knowingly collect Personal Data from children or minors (as defined by applicable laws in your location). If you believe that a child under the relevant age may have submitted Personal Data to us, we encourage you to contact our Data Protection Officer at [email protected]. We will take appropriate steps to delete such data from our records within a reasonable timeframe.
Sensitive Personal Data
We do not intentionally collect sensitive Personal Data, such as information revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers, as part of our normal operations. If such data is provided to us inadvertently, it will be handled with heightened caution and, where appropriate, removed.
Unless required by law, ZENDRAL uses and processes the Personal Data we collect about you for the following purposes:
To generate leads
To send you newsletters and information related to our services and insights
To manage our relationship with you
To arrange and manage visits to our offices
To ensure our website(s) remain relevant, secure, and user-friendly
To respond to your enquiries and feedback
To respond to and manage data subject rights requests
To analyze and improve our services
To verify your identity and maintain the accuracy of our records
To protect and defend our legal rights or respond to complaints
To facilitate business transitions, such as acquisitions or integrations
In accordance with applicable privacy laws, we are required to identify the legal basis on which we process your Personal Data. The table below outlines the key purposes, the types of Personal Data involved, and the legal grounds we rely on (which may vary depending on context and jurisdiction).
In some regions, such as Asia-Pacific, we may rely primarily on your consent for data processing where required. In such cases, we will ask for your consent explicitly, and you will have the right to withdraw it at any time.
| Processing Activity | Types of Personal Data Used | Legal Basis |
|---|---|---|
| To arrange and run events | Contact data, third-party data, location data | Legitimate interests |
| To generate leads | Contact data, third-party data, website usage data | Legitimate interests or Consent |
| To send newsletters and service-related content | Contact data, marketing and communication data, location data | Consent |
| To manage business relationships | Contact data, location data, marketing preferences | Contractual necessity |
| To manage office visits | Contact data, location data | Legitimate interests |
| To improve website usability and relevance | Website usage data, technical data, data from automated tools | Legitimate interests |
| To ensure website security | Technical and usage data related to website access | Legitimate interests |
| To respond to enquiries or feedback | All relevant Personal Data | Legitimate interests or Contractual necessity |
| To manage data subject rights requests | All relevant Personal Data | Legal obligation |
| To analyze and improve our services | Usage data, contact details (email, name, phone, job title, company) | Legitimate interests or Consent (e.g. cookie usage) |
| To maintain and update records | Contact data, marketing and communication data, location data | Legitimate interests or Legal obligation |
| To protect legal rights or respond to complaints | All relevant Personal Data | Legal obligation or Legitimate interests |
| To support business transitions or acquisitions | All relevant Personal Data | Legitimate interests |
If you have any questions about how your Personal Data is used or would like to exercise your data rights, you can contact our Data Protection Officer at [email protected].
ZENDRAL will retain your Personal Data only for as long as necessary to provide the relevant service and to comply with legal obligations. Once your data is no longer required, we will securely delete it or anonymize it for use in analytics and business improvement purposes.
If you would like more information about how long we keep your Personal Data or wish to request its deletion in line with your data rights, please contact our Data Protection Officer at [email protected].
At ZENDRAL, we implement appropriate organizational and technical measures to protect your Personal Data from unauthorized access, use, loss, alteration, or destruction—whether in physical or electronic form. We also require our service providers and any authorized third parties who handle or store Personal Data on our behalf to maintain similar security standards.
The safeguards we use may include firewalls, penetration testing, vulnerability assessments, encryption, and restricted access controls to our IT systems, depending on the situation.
When we share Personal Data, access is strictly controlled on a need-to-know basis and only provided where necessary to deliver requested services or to carry out legitimate functions.
Personal Data may be transferred outside the market where you are located only if adequate protections are in place to maintain the integrity and security of your data and to comply with applicable privacy laws. These protections might include contractual agreements or the fact that the destination jurisdiction has stronger data protection regulations.
We take data protection seriously. Our employees and authorized service providers are contractually required to handle Personal Data confidentially and comply with data protection regulations.
Information shared with third-party service providers
We work with third-party providers to perform business functions such as sending newsletters and managing online services or customer relationships. We only share the information necessary for these providers to carry out their services, and they are contractually obligated to follow our instructions.
Third parties assisting with marketing, including social media platforms, advertising networks, and ad tech companies, may receive contact information to help serve advertising relevant to you. Any Personal Data shared with these partners is subject to their own privacy policies and the controls they provide to manage data usage for advertising.
Group company transfers
As part of a global group, ZENDRAL may share your Personal Data within its group companies. Transfers within the group are governed by an Intra-Group Data Transfer Agreement that provides a framework for global data transfers where needed.
Personal Data may also be disclosed to successors in the event of a business sale or merger, such as sharing customer lists as part of that transaction.
Information shared with other parties
Where required or allowed by law, Personal Data may be shared with regulators, law enforcement, or other authorities, such as in response to court orders, subpoenas, or investigations of illegal activities.
Personal Data may also be collected from the parties mentioned in this section.
Further details about these transfers and protections can be requested through the contact details provided in this privacy notice.
Depending on the privacy laws applicable in your jurisdiction, you may have several rights concerning your Personal Data, including:
Objecting to our processing: If we rely on legitimate interests (ours or a third party’s) and you believe it affects your fundamental rights and freedoms, you may object to our processing. You also have the right to object if your Personal Data is used for direct marketing or profiling. You can object at any time, and we will stop processing the data unless we demonstrate legitimate grounds to continue.
Accessing your Personal Data: You can request access to the information we hold about you, including copies of your Personal Data and the reasons for processing it, except where legal exceptions apply. We will verify your identity before releasing any data.
Requesting data portability: You may ask us to provide your Personal Data in a structured, commonly used, machine-readable format, either to yourself or a third party. This applies only to data you provided, and when processing is based on your consent or a contract.
Requesting erasure: You may request that we delete your Personal Data when it is no longer necessary. However, we may need to retain certain data for legal or legitimate business purposes, and will inform you if this applies.
Requesting correction: You can ask us to correct any incomplete or inaccurate Personal Data we hold about you.
Requesting restriction: In some cases and jurisdictions, you may request that we restrict our processing of your Personal Data. We will continue to store the data but limit processing during the restriction period.
Withdrawing consent: Where processing is based on your consent, you can withdraw it at any time. Withdrawal will not affect the legality of prior processing nor our right to continue processing where permitted by law. You can also unsubscribe from marketing communications using the unsubscribe link in any email.
Making a complaint: If you believe your rights have been infringed, you can complain to your local data protection authority. For example, in the UK, this is the Information Commissioner’s Office. Contact us if you need assistance identifying your local authority.
Opting out of marketing: You may choose to stop receiving marketing communications at any time by using the unsubscribe link in messages. Non-marketing communications, such as account updates or responses to inquiries, may still be sent.
To exercise any of these rights, please provide your contact details and describe your request in sufficient detail so we can understand, assess, and respond appropriately. We may ask for information to verify your identity to protect your privacy.
We will respond within applicable legal timeframes. If we require additional time, we will notify you in writing with an explanation and the expected timeframe. Verification methods will depend on the sensitivity and type of data requested, usually by matching your provided details with data we hold.
If these rights do not exist in your jurisdiction, we reserve the right to decline your request.
This Privacy Notice applies only to the Personal Data we collect directly. Our website(s) may contain links to other websites, including social media platforms such as Facebook, Twitter, and LinkedIn, as well as links to websites operated by other ZENDRAL entities. If you follow these links, your use of those websites will be subject to their own terms of use and privacy policies, as their data practices are outside the scope of this Privacy Notice.
We have no control over, and accept no responsibility for, the collection, use, or protection of any Personal Data you provide on third-party websites.
This Privacy Notice from ZENDRAL may be updated from time to time to reflect changes in laws, best practices, changes in what we do, or changes in how we handle Personal Data.
The date of the most recent revision will appear at the top of this page. If you do not agree with the changes, please stop using ZENDRAL’s services and refrain from sharing your Personal Data with us. We recommend checking this notice regularly for any updates.