What We Collect, And Why.

Who this policy is from

This site is operated by ZYFISTA. [TO BE COMPLETED: registered entity name, company registration number, and registered address.] Until that is confirmed, treat the contact email below as the only verified way to reach the operator of this site.

What we collect

There are two sources, and no others:

• Form submissions. When you use the contact or quote form, we receive the name, email address, and, if you choose to give them, phone number and company name, together with the service, budget band, timeline, and whatever you write in the message or brief fields.
• Analytics. [TO BE COMPLETED: name the analytics product in use, or state that none is used.] No analytics or tag-management script is installed on this site at the time of writing. If one is added, this section must name it, describe what it records, and say whether the data leaves the region it was collected in.

We do not ask for payment card details through this site, and we do not knowingly collect information from children.

Why we use it

• To read your enquiry and reply to it.
• To prepare a proposal or answer a question about scope, timeline, or fit.
• To keep a record of what was agreed during a project, for the duration of that project.

We do not sell your information, and we do not add you to a marketing list because you sent an enquiry.

Lawful basis

[TO BE COMPLETED: the lawful basis relied on for each purpose, for example legitimate interests for replying to an enquiry, and contract for delivering agreed work, confirmed against the data-protection law that applies to the operating entity.] The basis differs by jurisdiction, so this must be decided rather than assumed.

Third parties that may process your data

Running a website means other companies touch some of this data. The list must be accurate, so it is left open until the stack is finalised:

• Hosting and delivery. [TO BE COMPLETED: hosting provider and the regions where requests are served.]
• Email delivery. [TO BE COMPLETED: the transactional email provider used to send form notifications, once connected.] No email provider is connected yet.
• Lead storage or CRM. [TO BE COMPLETED: any database, spreadsheet, or CRM that stores enquiries, or a statement that none is used.]
• Spam protection. [TO BE COMPLETED: the bot-protection service, if one is enabled.]

[TO BE COMPLETED: whether personal data is transferred outside its region of origin, and the safeguard relied on for that transfer.]

Cookies and analytics

This site sets no advertising or tracking cookies, and there is no consent banner because there is currently nothing to consent to. If analytics, embedded video, a chat widget, or an ad pixel is added later, this section and a consent mechanism both need to be in place first. [TO BE COMPLETED: cookie table, name, purpose, and lifetime, once any cookie is set.]

How long we keep it

[TO BE COMPLETED: retention periods for enquiries that do not become projects, for project records, and for anything kept for tax or accounting reasons.] We are not stating a period here that has not been agreed, because a retention promise you cannot keep is worse than none.

How it is protected

Form submissions are transmitted over HTTPS and validated on the server. Submission contents are not written to application logs. Access to enquiries is limited to the people who need it to reply to you. [TO BE COMPLETED: the internal access-control and breach-notification process.]

Your rights

Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise any of these, email us and say what you want. We will confirm receipt and tell you what we hold. [TO BE COMPLETED: the statutory response deadline that applies, and the supervisory authority a complaint can be made to.]

How to contact us

Email zyfista@gmail.com for anything in this policy, including data requests. [TO BE COMPLETED: whether a data protection officer or representative is required, and if so, their details.] Working remotely with clients worldwide, so email is the reliable route.

Changes to this policy

When this policy changes we will update the page and the date below. If a change materially affects how we use information you have already sent us, we will contact you about it rather than relying on you noticing an edit here.

Last updated: 21 September 2026