Privacy Policy

Effective Date: June 23, 2025

Zymbly ("we", "us", or "our") is committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the UK GDPR and SOC 2 Trust Services Criteria.

1. Data Controller Contact Details

Zymbly is the data controller for your personal data.
Contact us at: help@zymbly.com

2. What Data We Collect

Personal Information

Name, email address, and contact details you provide when using our services.

OAuth Data

Your email address if you sign in via third-party services (e.g. Google). We do not access profile pictures or additional data.

Usage Data

IP address, browser type, device data, and website usage statistics.

Cookies

See our Cookie Policy below for details.

3. Purpose and Legal Basis for Processing

  • Account registration and login → Consent / Contract
  • Service delivery and support → Contract
  • Usage analytics and performance → Legitimate interest
  • Compliance and security → Legal obligation

4. Data Sharing and Recipients

We do not sell your personal data.

We may share your information with:

  • Trusted service providers under strict confidentiality agreements
  • Legal authorities if required by law

5. Data Security and SOC 2 Controls

We implement appropriate technical and organizational measures including:

Access Controls

Authentication and authorization systems

Encryption

Data at rest and in transit protection

Security Audits

Regular monitoring and assessments

Incident Response

Breach notification procedures

6. International Data Transfers

If we transfer your data outside the UK or EEA, we rely on legal safeguards such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum.

7. Data Retention

We retain your data only as long as necessary for the stated purposes or as required by law. When no longer needed, data is securely deleted or anonymized.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion ("right to be forgotten")
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

To exercise your rights, contact: help@zymbly.com

9. Children's Privacy

Our services are not intended for individuals under 13 years of age. We do not knowingly collect personal data from children.

10. Automated Decision-Making

We do not use your data for automated decision-making that produces legal or similarly significant effects.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a revised effective date.

12. Cookie Policy

We use cookies to improve your experience on our website.

Essential Cookies

Enable core functionality like authentication — legal basis: legitimate interest.

Analytics Cookies

Help us understand how users interact with the site — legal basis: consent.

Preference Cookies

Remember your settings — legal basis: consent.

You can control cookies through your browser settings. For non-essential cookies, we request your explicit consent.

13. Contact Us

Zymbly

82, Unit A James Carter Road
Mildenhall, United Kingdom, IP28 7DE

Email: help@zymbly.com