Privacy Policy
Last updated: 1 June 2026 · Version 3.1
This Privacy Policy explains how ZEC TRADING Ltd ("ZEC TRADING", "we", "us") collects, uses and protects personal data when you visit our website or engage with us as a business customer or partner. We are a business-to-business infrastructure provider and do not offer services to retail consumers.
1. Introduction
ZEC TRADING Ltd is the data controller responsible for personal data processed through this website and our commercial relationships. This policy applies to information about prospective and existing business customers, their representatives, partners, suppliers and website visitors. It does not govern data processed by our clients within their own platforms, where they act as the controller and we act as a processor under a separate data processing agreement.
2. Data we collect
We collect the following categories of personal data:
- Contact & identity data — name, business email, company, job title and phone number you provide via our forms or directly.
- Commercial data — details about your organisation, your enquiry, and the products or services you are interested in.
- Technical data — IP address, browser type, device information, and pages visited, collected via cookies and similar technologies.
- Communications data — the content of emails, messages and calls exchanged with our teams.
- Compliance data — where you become a client, KYB/KYC information required to satisfy legal and regulatory obligations.
3. How we use data
We use personal data to:
- Respond to enquiries, provide demos and manage our commercial relationship with you.
- Deliver, maintain, secure and improve our products and services.
- Meet legal, regulatory, accounting and compliance obligations.
- Send service communications and, where permitted, relevant business updates.
- Detect, prevent and investigate fraud, abuse and security incidents.
4. Legal bases for processing
Where the EU/UK GDPR applies, we rely on the following legal bases: performance of a contract; our legitimate interests in operating and growing our business (balanced against your rights); compliance with a legal obligation; and your consent, where required, which you may withdraw at any time.
5. Sharing & processors
We do not sell personal data. We share it only with: service providers and sub-processors who support our operations (such as cloud hosting, analytics and CRM) under contractual confidentiality and security obligations; professional advisers; and authorities where required by law. A current list of key sub-processors is available on request.
6. International transfers
We operate globally and may transfer personal data to countries outside your own. Where we do, we put appropriate safeguards in place — such as Standard Contractual Clauses or equivalent mechanisms — to ensure your data remains protected to the standard required by applicable law.
7. Data retention
We keep personal data only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, regulatory or reporting requirements. Retention periods vary by data category and applicable law; when data is no longer needed we delete or anonymise it.
8. Security
We maintain technical and organisational measures designed to protect personal data against unauthorised access, loss or misuse, including encryption in transit and at rest, access controls, network segmentation, and regular third-party security testing. No system is perfectly secure, but we work continuously to protect the data entrusted to us.
9. Your rights
Subject to applicable law, you may have the right to access, correct, delete or restrict processing of your personal data, to object to processing, to data portability, and to withdraw consent. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.
10. Cookies
We use cookies and similar technologies as described in our Cookie Policy. You can manage non-essential cookies through your browser settings or our cookie controls.
11. Children
Our website and services are intended for businesses and their representatives. They are not directed at children, and we do not knowingly collect personal data from anyone under the age of 18.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the latest revision. Material changes will be communicated through the website or, where appropriate, directly to affected business contacts.
13. Contact us
For any privacy enquiry or to exercise your rights, contact our Data Protection team at info@zecfinance.org or by post at ZEC TRADING Ltd, 15 George Close, Norwich, NR13 5GP, United Kingdom.
This document is provided as a template for a fictional company and does not constitute legal advice. Replace with policy text reviewed by qualified counsel before publishing.