Effective 20 September 2026
Privacy policy
The signal boundary
This notice covers the public Zynextech website and messages addressed to [email protected]. ZYNEXTECH LTD, company number 234619404, is controller when it decides why its own correspondence is used.
Controller, processor, separate records
A request for a conversation is controller work: Zynextech chooses the purpose and keeps the reply. A customer instruction to handle an operational dataset can make the company a processor for that dataset. Customer instructions, company administration and security records live in separate categories.
Packets received
A visitor can submit a name, return address, job context, question or file. Delivery logs add the page requested, time, browser details and network address. The site has no member account and is not a route for health, identity or other special category material.
Why a packet is opened
The company reads a message to answer it, arrange a meeting, maintain a business record and keep the service secure. The lawful basis will be requested steps, legitimate interests, legal obligation or consent, depending on the event. A consent choice is reversible.
Processors and suppliers
Mail, domain, hosting and professional service suppliers see only the fields needed to perform their named operation. A supplier is selected for security and confidentiality as well as function. Zynextech does not sell personal data and does not assemble an advertising audience from technical signals.
Retention pulse
A conversation record is reviewed after its active work ends. A contractual or accounting record remains for the period the law requires; a security log has a shorter operational life. A person can request account deletion or erasure at [email protected]. Since the pages do not ask for an account, that request will normally concern correspondence. Statutory duties, claims or a security investigation may require a small remainder.
International routes
A supplier outside the UK is used only with a lawful transfer route. Depending on the destination, that route can be a UK adequacy regulation, the IDTA, the UK Addendum to the EU Standard Contractual Clauses, or another permitted safeguard. The company records the transfer assessment.
When a signal is an incident
Zynextech investigates a suspected personal data breach, preserves evidence and decides whether people face a risk. A notifiable event is reported to the ICO within the 72-hour UK GDPR window. A processor alerts its controller without undue delay; affected people receive a notice where the law calls for it.
Requests and children
Access, correction, erasure, restriction, objection and portability can be requested under the UK GDPR. Identity checks protect the channel, and the normal response target is one month. The website is not aimed at children; a parent or guardian can ask for a child’s message to be reviewed.
Escalation
Write to [email protected] about privacy. A separate complaint can go to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, 0303 123 1113. This notice is dated 20 September 2026 and changes are recorded on this page.