Legal

Privacy Policy

How zedConsulting collects, uses and protects your personal data, in line with the UK GDPR and the Data Protection Act 2018.

Last updated: {{ updated }}

This Privacy Policy explains how ZED GROUP LTD, trading as zedConsulting ("we", "us", "our"), collects, uses, shares and protects your personal data when you visit our website, enquire about our services, or work with us. We are committed to protecting your privacy and handling your data in an open and transparent manner.

This policy is governed by the laws of England and Wales and is designed to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

zedConsulting is the trading name of ZED GROUP LTD, a company registered in England and Wales. For the purposes of data protection law, we are the data controller in respect of the personal data we hold about you.

2. The personal data we collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

  • Identity and contact data — your name, job title, company name, email address and telephone number, for example when you complete our contact form or a job application.
  • Enquiry and engagement data — information you provide about your business, current systems and requirements when you ask us about our services.
  • Recruitment data — your CV, work history and any details you submit when applying to join our team.
  • Technical and usage data — your IP address, browser type and version, device information, and how you use our website, collected through cookies and similar technologies.
  • Communications data — the content of emails, calls and messages exchanged with us.

We do not deliberately collect special category data (such as data about health, race or religion) through our website. Please do not send us such information unless we specifically request it for a lawful purpose.

3. How we use your data and our lawful bases

Under the UK GDPR we must have a lawful basis for processing your personal data. We rely on the following bases:

  • Legitimate interests — to respond to your enquiries, provide and improve our services, manage our relationship with you, and keep our website secure. We have assessed that this processing does not override your rights and freedoms.
  • Performance of a contract — to deliver the consulting services you have engaged us to provide, and to administer our agreement with you.
  • Consent — where you have opted in to receive marketing communications, or where required for non-essential cookies. You may withdraw consent at any time.
  • Legal obligation — to comply with our legal and regulatory obligations, such as accounting and tax requirements.

4. Marketing communications

We will only send you marketing emails where you have asked us to or where we are otherwise permitted to do so under PECR. Every marketing message we send includes an option to unsubscribe, and you can opt out at any time by emailing contact@zedconsulting.io. We do not sell your data to third parties for their own marketing.

5. Cookies

Our website uses cookies and similar technologies to function correctly, remember your preferences (such as light or dark mode), and understand how visitors use the site. Strictly necessary cookies are essential to the operation of the site. Non-essential cookies are only set where permitted. You can control or delete cookies through your browser settings; disabling some cookies may affect how the site works.

6. How we share your data

We do not sell your personal data. We may share it with:

  • Service providers who support our business — for example hosting, email, CRM and analytics providers — who act as our processors and are bound by contract to protect your data.
  • Professional advisers such as accountants and legal advisers, where necessary.
  • Authorities and regulators where we are required to do so by law.

Where any provider processes data outside the UK, we ensure appropriate safeguards are in place (such as UK adequacy regulations or International Data Transfer Agreements) as required by the UK GDPR.

7. How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Enquiry data is typically retained for up to 24 months after our last contact; client records are kept for the duration of our engagement and for a period afterwards in line with legal requirements; unsuccessful recruitment data is held for up to 12 months. When data is no longer needed, we securely delete or anonymise it.

8. How we protect your data

We have appropriate technical and organisational measures in place to protect your personal data against unauthorised access, loss, misuse or alteration. These include access controls, encryption in transit, and limiting access to those who need it. While no method of transmission over the internet is completely secure, we take all reasonable steps to safeguard your information.

9. Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • The right to be informed about how your data is used.
  • The right of access to the data we hold about you.
  • The right to rectification of inaccurate or incomplete data.
  • The right to erasure ("the right to be forgotten") in certain circumstances.
  • The right to restrict processing in certain circumstances.
  • The right to data portability.
  • The right to object to processing based on legitimate interests or direct marketing.
  • Rights in relation to automated decision-making and profiling (we do not carry out such processing).

To exercise any of these rights, please contact us at contact@zedconsulting.io. We will respond within one month, as required by law. There is normally no charge to exercise your rights.

10. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113. Our ICO registration number is ZB065633.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Questions? Get in touch