Effective date: 1 January 2026
Zenotris (“we”, “us”, “our”) operates zenotris.com and provides business-process-management and process-mining consulting services. This policy explains what personal data we collect, why, how we handle it, and the rights you have over it.
Questions? Reach us through the contact form on our website (the “Contact” button on any page).
1. Who we are
Zenotris is the data controller responsible for your personal data. You can reach us any time through the contact form on our website.
2. The personal data we collect
We only collect what we need:
- Information you give us, when you complete a contact or enquiry form, request a
consultation, or subscribe to updates: your name, work email, company, role, phone number (optional), and anything you type into the message field.
- Information collected automatically, standard technical data when you visit the site, such
as IP address, browser and device type, pages visited, and timestamps, gathered through cookies (see section 6).
- Correspondence, records of messages you exchange with us.
We do not knowingly collect special-category data (such as health or ethnicity), and we ask that you do not submit it through our forms.
3. Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Respond to your enquiry and provide the service you requested | Contract, or steps prior to a contract |
| Send you updates or marketing you asked for | Consent, which you can withdraw at any time |
| Keep the website secure, working, and improving | Legitimate interests |
| Meet legal, tax, and accounting obligations | Legal obligation |
4. How long we keep it
We keep personal data only as long as necessary for the purposes described above, and for as long as we are required to for legal, tax, and accounting reasons. When it is no longer needed, we delete or anonymise it.
5. Who we share it with
We do not sell, rent, or trade your personal data, and we do not share it with third parties for their own purposes. We may disclose personal data only where we are required to by law, for example, in response to a valid request from a regulator, court, or law-enforcement authority.
We use service providers that process personal data on our behalf and only on our instructions: Google (Google Analytics and reCAPTCHA form protection), Microsoft (Clarity), Apollo.io (website visitor insights), our website host and our email provider. Some of them are based outside the UK and EU; where personal data is transferred, we rely on the safeguards these providers offer, such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses.
6. Cookies
We use cookies and similar technologies to make the site work and to understand how it is used so we can improve it. You can control or delete cookies through your browser settings; disabling some may affect how the site works.
Analytics cookies (Google Analytics, Microsoft Clarity) and our visitor-insight tool (Apollo) only run if you accept them in the cookie banner. The full list is in our Cookie Policy, and you can change your choice at any time.
7. Your rights
Depending on your location, you have the right to:
- Access the personal data we hold about you;
- Rectify data that is inaccurate or incomplete;
- Erase your data (“right to be forgotten”);
- Restrict or object to our processing;
- Portability, receive your data in a portable format;
- Withdraw consent at any time, where we rely on consent;
- Complain to a supervisory authority, in the UK, the Information Commissioner’s Office (ICO,
ico.org.uk); in the EU, your local Data Protection Authority.
To exercise any of these, submit a request through the contact form on our website. We will respond within the timeframe required by law (one month under UK/EU GDPR).
8. How we protect your data
We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
9. Children
Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect their data.
10. Changes to this policy
We may update this policy from time to time. The “Effective date” above shows the current version; material changes will be highlighted on this page.
11. Contact us
For any question, request, or complaint about this policy or your data, use the contact form on our website.