Introduction
This Privacy Policy applies to Zoral Limited together with its affiliated entities operating in multiple jurisdictions worldwide (“Company,” “we,” “us,” or “our”). Our company information and contact details are shown at the foot of this Privacy Policy. Company respects your privacy and is committed to protecting your personal data.
Visit our websites (including www.zorallabs.com) or use collaborative services, communicate with us, engage with our marketing content, authenticate to our systems, or interact with us through digital platforms.
This Privacy Policy applies to Zoral’s public websites and collaborative online services used by customers, partners, and internal users. These may include support portals, authentication services, collaboration platforms, development environments, and automation systems operated or managed by Zoral. References in this policy to the “Website” or “services” should be understood to include these environments.
Scope
This Privacy Policy applies to individuals interacting with Zoral through its websites and collaborative services, including but not limited to:
- Website visitors and users of Zoral online services
- Customers and prospective customers, including those submitting requests or support issues through our platforms
- Business partners and external collaborators who may access Zoral systems or shared environments
- Vendors
- Marketing subscribers
- Individuals interacting with us via digital channels, authentication portals, support systems, or collaboration platforms
This Privacy Policy generally does not apply to internal employee HR data, although employees may interact with the services described here.
Information We Collect
We may collect the following categories of personal data when you interact with our Website:
- Technical Data such as IP address, device type, operating system, browser version, time zone, and platform.
- Usage Data such as how you navigate the Website, including pages visited and interaction details.
- Contact Data such as your name, email address, company name, phone number (if provided), and message content.
- Cookie Data collected through cookies and tracking technologies (see below).
We do not intentionally collect special category (sensitive) personal data via the Website.
How We Collect Data
Personal data is collected directly when you fill out forms on the Website, such as the Contact Us form or Login Form. We also collect data automatically through cookies, server logs, and tracking technologies. In some cases, we receive information from third-party services such as analytics tools.
How We Use Your Information
As a global organization operating through multiple affiliated entities across various jurisdictions worldwide, we use personal information in a manner that is consistent with applicable data protection and privacy laws in the countries where we conduct business. Under data protection legislation, we must always have a lawful basis for using personal data.
We process personal data to respond to inquiries, operate and maintain the Website, and improve user experience. Data is also used to analyse Website performance, manage cookie preferences in compliance with laws, and maintain security to prevent fraudulent use.
Where users submit support requests or service tickets (for example, through Jira or other support channels), we process the personal data provided to register, investigate, manage, and resolve technical issues or service inquiries. This may include communicating with users regarding their requests, troubleshooting problems, and maintaining records of support interactions to improve our services and ensure proper service delivery.
Cookies and Similar Technologies
We use essential cookies to make the website work. With your consent, we also use analytics cookies, provided by HubSpot, to understand how the website is used. We do not set analytics cookies until you agree, and you can change your choice at any time from “Cookie settings” at the bottom of every page.
| Name | Provided by | Purpose | Type | How long it lasts |
|---|---|---|---|---|
| __hs_cookie_cat_pref | HubSpot | Remembers your cookie choice | Essential | 6 months |
| __hs_gpc_banner_dismiss | HubSpot | Remembers that you closed the notice shown when your browser sends a Global Privacy Control signal | Essential | 6 months |
| hubspotutk | HubSpot | Tells visitors apart, and links a form you submit to your earlier visits | Analytics (with consent) | 6 months |
| __hstc | HubSpot | Keeps track of visits: first visit, last visit and number of visits | Analytics (with consent) | 6 months |
| __hssc | HubSpot | Keeps track of the current visit and its page views | Analytics (with consent) | 30 minutes |
| __hssrc | HubSpot | Detects whether the browser was restarted since the last visit | Analytics (with consent) | Until the browser is closed |
The contact and download forms and the meeting scheduler on this website are provided by HubSpot. When you submit a form or book a meeting, HubSpot processes the details you give us on our behalf.
If you withdraw consent, we stop collecting new analytics data and the analytics cookies are deleted from your browser. Data already collected is kept as set out in section 8.
Data Sharing and Subprocessors
We do not sell personal data.
We may share information with trusted subprocessors including HubSpot (CRM, forms, meeting scheduling, website analytics and cookie consent), Tailscale (security), Microsoft 365 and SendGrid (communications), and AWS, Azure, and GCP (cloud hosting). The full list of subprocessors may be found at https://trust.zorallabs.com
All subprocessors are subject to contractual data processing agreements in accordance with data protection legislation in your jurisdiction.
International Transfers
Because we operate globally your data may be transferred outside your home jurisdiction.
Where transfers occur, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs), Adequacy decisions, Binding Corporate Rules, or International Data Transfer Agreements (IDTAs).
Data Retention
We retain personal data only as long as necessary for the purposes for which it was collected or as required by law.
When no longer required, personal data is securely deleted or anonymized.
Your Rights
Depending on your jurisdiction, you may have rights including access, rectification, erasure, restriction or objection to processing, portability, withdrawal of consent, and the right to lodge a complaint with a data protection authority.
Requests can be sent to: compliance@zorallabs.com
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
Measures include TLS encryption, firewalls, access controls, secure development practices, and regular security assessments.
Zoral undergoes annual independent external audits for SOC 2 Type II compliance to assess the effectiveness of security controls.
Third-Party Links
Our Website may contain links to third-party websites. Zoral is not responsible for the privacy practices or content of external sites.
Children’s Privacy
Our Website is not directed to individuals under the age of 16, and we do not knowingly collect personal data from children.
Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted here and will take effect upon posting.
Contact Us
Zoral Limited
Company No: 04579626
Alexandra House, St Johns Street, Salisbury, Wiltshire, United Kingdom, SP1 2SB
Email: compliance@zorallabs.com
If you are a UK resident and your concern remains unresolved, you may contact the Information Commissioner’s Office: https://ico.org.uk