Policies

1. Introduction
3z247 Ltd. (“we”, “us”, “our”) is committed to protecting and respecting your privacy.
This policy explains how we collect, use, and protect the personal data you provide to us, or that we collect from you, when you use our website (3z247.com), purchase our digital products, or subscribe to the 3z247 Engine.
We are the data controller for this data. This means we are responsible for deciding how we hold and use personal data about you. We are registered with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
Our contact email for all data protection matters and user rights requests is: dpo@3z247.com.

2. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
Identity Data: Includes first name, last name, username, or similar identifier.
Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
Financial Data: Includes payment card details.
Transaction Data: Includes details about payments to and from you and details of products and services you have purchased from us.
Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage Data: Includes information about how you use our website, products, and services.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.

3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Performance of a Contract: To process and deliver your order, manage payments, and manage our relationship with you.
Legitimate Interest: To run our business, provide customer support, improve our website and services, and prevent fraud.
Consent: Where you have explicitly opted-in to receive email marketing.
Legal Obligation: To comply with a legal requirement (e.g., retaining financial records for tax purposes).

4. Who We Share Your Data With (Third-Party Processors)
We use third-party service providers (data processors) to help us operate our business. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
Our key third-party processors include:
Payment Processing: Square
Website Hosting: Fasthosts
E-Commerce: WooCommerce
Email Marketing: Zoho Campaign
Customer Support: Zoho Desk
CRM & Bookings: Zoho CRM and Zoho Bookings
Website Analytics: Google Analytics
Cookie Consent: Cookiebot

5. International Data Transfers
Many of our external third-party providers are based outside the United Kingdom (UK) and European Economic Area (EEA), including in the USA.
When we transfer your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards. This may include using specific contracts approved by the UK (such as Standard Contractual Clauses) or relying on an “adequacy decision” from the UK Government.

6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and third parties who have a business need to know.

7. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
Our standard retention periods are:
Customer & Financial Data: We will retain your customer profile and invoice history for 7 years after you are no longer an active customer, to comply with HMRC and legal requirements.
Marketing Contacts: If you have consented to marketing, we will retain your contact details for 2 years after your last interaction (e.g., opening an email) before marking you as inactive.
Customer Support Data: We will retain support tickets and appointment histories for 5 years after you are no longer an active customer to assist with any future queries.
Website Analytics Data: User identifiers collected via website tracking (e.g., cookies) are retained for up to 2 years.

8. Your Legal Rights
Under UK data protection law, you have rights relating to your personal data. These include the right to:
Request access to your personal data.
Request correction of the personal data that we hold about you.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request the transfer of your personal data to you or to a third party.
Withdraw consent at any time where we are relying on consent to process your data (e.g., by clicking “unsubscribe” on a marketing email).
To exercise any of these rights, please contact us at dpo@3z247.com.

9. Cookies
Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy.

10. How to Complain
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns first. Please contact us at dpo@3z247.com.