Your privacy matters.

01 Who we are

Zelos Marketing provides website design and development, Meta advertising, search engine optimisation and related digital growth services.

Zelos Marketing is operated by Filip Lenarcik, trading as Zelos Marketing.

Our website is zelosmarketing.com and you can contact us about privacy at info@zelosmarketing.com.

Filip Lenarcik, trading as Zelos Marketing, is the controller responsible for the personal information described in this Privacy Policy. That means we decide why and how your personal information is used, and we are accountable for it under the UK GDPR and the Data Protection Act 2018.

02 Information we collect

Most of the information we hold is information you give us directly. Through our website enquiry form, that includes:

• your name
• your email address
• your telephone number, if you choose to provide it
• your business name, if you choose to provide it
• the service you have told us you are interested in
• any message or information you write in the enquiry form
• your marketing consent preference, and the exact wording of the consent statement shown to you
• the date and time your enquiry was submitted
• the page or source URL the enquiry was sent from

If you become a client, we may also process information reasonably necessary to communicate with you, provide our services, manage your project, issue invoices, manage payments, and maintain business and accounting records. This can include contact details for the people we work with at your organisation, project materials and account access you choose to share with us, and correspondence between us.

03 How we collect information

We may collect personal information when you:

• submit the enquiry form on our website
• contact us by email
• purchase, or attempt to purchase, one of our services
• communicate with us during a project
• opt in to marketing communications
• use our website, where limited technical data is handled by the providers that serve it

On that last point we want to be precise. Our website does not run analytics software, advertising pixels or similar tracking. However, like any website, the services that host and deliver it — including our website host, our form provider when you submit an enquiry, and Google Fonts, which serves the typefaces used across the site — necessarily receive technical data such as your IP address and browser information in order to respond to your device's request. This is explained further in section 13.

04 How we use personal information

Responding to enquiries

To read and review your enquiry, contact you about it, and discuss the services you have expressed an interest in.

Providing services

To communicate with you, manage projects, and deliver website design, Meta advertising, SEO and related services.

Processing payments

To facilitate payment for our services and maintain records of purchases, invoices and transactions.

Marketing

To send promotional emails about Zelos Marketing services, offers and marketing insights where you have actively opted in, or where another lawful basis clearly applies under UK law. For people who use our website enquiry form, the separate marketing checkbox is the primary mechanism for email marketing consent — see section 6.

Business administration

To maintain our records, prevent fraud or abuse, protect our website and operate our business.

Legal obligations

To keep information where we are required to for accounting, tax, regulatory or other legal purposes.

05 Our lawful bases

Data protection law requires us to have a lawful basis for each way we use your personal information. Consent is not the basis for everything we do — it applies specifically to marketing email.

Contract, or steps before entering into a contract

When you ask us about our services, we handle your enquiry so that we can respond and discuss working together. When you become a client, we process information in order to provide the services you have purchased.

Consent

We rely on your consent for promotional email marketing, where you have actively opted in. You can withdraw that consent at any time, and withdrawing it does not affect the lawfulness of any processing we carried out before you withdrew it.

Legitimate interests

We rely on our legitimate interests where it is reasonably necessary to operate and protect Zelos Marketing, improve how we work, prevent abuse of our website, and communicate with business contacts where the law permits. Before relying on this basis we consider the impact on you, and we do not rely on it where your rights and interests override our own.

Legal obligation

We rely on legal obligation where we must retain or process information to comply with applicable law, including accounting, taxation and regulatory requirements.

06 Marketing communications

Our enquiry form includes an optional checkbox with this exact wording:

To be clear about how that works:

• the checkbox is entirely optional
• it is never pre-ticked — you have to tick it yourself
• declining marketing does not stop you submitting an enquiry or purchasing our services, and does not affect the response you receive
• we record whether consent was given, the exact wording that was shown to you, and the date and time of your submission, so that we have an accurate record of what you agreed to
• you can withdraw your consent at any time

To unsubscribe or withdraw consent, you can:

• use the unsubscribe method contained in a marketing email, where one is available, or
• email us at info@zelosmarketing.com

Once you withdraw consent we will stop using your information for the marketing your withdrawal covers. We may still need to contact you about an active enquiry, project or transaction, as those messages are not marketing.

07 Formspree

Our website uses Formspree to process enquiry form submissions. Formspree is an independent company and is not owned or controlled by Zelos Marketing.

When you submit the enquiry form, the information you entered is transmitted to Formspree, may be stored within our Formspree account, and is delivered by email to info@zelosmarketing.com. Formspree acts as a service provider — a data processor — handling form submissions on our instructions.

You can read how Formspree handles information in their privacy policy, published on their website at formspree.io.

08 Stripe

We use Stripe to provide secure online payment checkout. When you choose to purchase a service from our pricing section, you are taken to Stripe's own hosted payment environment to complete the payment.

In the course of processing your payment, Stripe may collect information such as:

• payment card or other payment method information
• billing information
• transaction information
• device and security information, where applicable

We receive confirmation of the transaction and the information we need to identify the purchase and provide the service. Depending on the activity, Stripe may act as a controller in its own right and/or as a processor on our behalf. You can read Stripe’s Privacy Policy for details of how Stripe handles your information.

09 Email hosting and other service providers

We use a small number of trusted providers to run our business. Providers should only receive the information necessary for the service they provide to us, and are expected to protect it appropriately.

The providers involved in the data flows on this website are:

• Cloudflare — hosts and delivers this website, and provides the content delivery, DNS, security and performance services in front of it
• Formspree — processes enquiry form submissions (section 7)
• Stripe — provides hosted payment checkout (section 8)
• Namecheap Private Email — the email service behind info@zelosmarketing.com, which therefore handles the messages you send us and the enquiry notifications we receive
• Google Fonts — serves the typefaces used across our website (section 13)

Cloudflare is our website host. This website is published using Cloudflare Pages, and requests for it pass through Cloudflare’s network, which also provides content delivery, DNS, security and performance services for the site. As part of providing those services, Cloudflare may process technical information about your visit. This can include your IP address, information about the request your browser made — such as the page or file requested, the date and time, and the page you came from — information about your device and browser, and security and log data generated in the course of protecting the site against malicious traffic. This processing is a necessary part of delivering the website to your device and of keeping it available and secure.

We do not control precisely what Cloudflare records, or how long it keeps it. Cloudflare publishes its own privacy information, and that is the most reliable source for its current position: you can read Cloudflare’s Privacy Policy on their website.

We may also use professional advisers such as accountants where necessary. We do not sell your personal information, and we do not share it for other organisations’ marketing.

10 International transfers

Some of the technology providers we use may process personal information outside the United Kingdom. Where that happens, we will seek to use providers that implement the safeguards required by applicable data protection law.

Depending on the provider and the country involved, those safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or other approved contractual protections.

We are not able to state definitively where every provider stores or processes data at any given moment, as this can depend on their own infrastructure. Each provider publishes its own information about international transfers, and the links in sections 7, 8 and 9 are the most reliable source for their current position.

11 How long we keep information

Enquiries

Where an enquiry does not lead to us working together, we may keep the information for up to 24 months after our last meaningful contact with you, unless there is a reason to keep it longer — for example an ongoing conversation or a legal matter.

Client information

Information relating to clients and transactions may be kept for the duration of our working relationship, and afterwards where reasonably required for legal, tax, accounting, dispute or record-keeping purposes. Accounting and transaction records may be retained for up to 6 years where appropriate.

Marketing

Marketing contact information is used until you unsubscribe or withdraw consent. After you unsubscribe we may keep the minimum information necessary on a suppression, or do-not-contact, list — this exists precisely so that your preference continues to be respected and you are not added back by mistake.

Form submissions

Enquiry submissions stored in our Formspree account are periodically deleted in line with the retention periods above.

We cannot promise immediate deletion from backups. Third-party providers operate their own routine backup cycles, and information may persist in those backups for a period after deletion from the live system before being overwritten in the normal course.

12 How we protect information

We take reasonable technical and organisational measures to protect personal information, including:

• serving our website over HTTPS, so information submitted through it is encrypted in transit
• using reputable third-party processors for form handling and payments, rather than building our own
• never handling full card details ourselves — payment data goes directly to Stripe
• access controls, so information is only available to people who need it
• strong, unique passwords, and two-factor authentication on accounts where it is available
• limiting the information we collect to what we actually need

No website, email system or online service can be guaranteed completely secure, and we do not claim ours is. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will act in line with our obligations under UK data protection law.

13 Cookies and tracking

We want to be specific rather than vague about this. As at the date of this policy, our website contains no analytics software, no advertising or social media pixels, no tag manager, and no third-party tracking scripts. It does not write cookies, and it does not store anything in your browser’s local or session storage.

Necessary technical functionality may still be used to deliver the site — for example, our host and the providers named in section 9 receive your IP address and browser information in order to send your device the pages, fonts and responses it has requested. That is a normal and unavoidable part of how the web works.

One point deserves naming directly: our website loads its typefaces from Google Fonts. When a page loads, your browser requests those font files from Google’s servers, and Google therefore receives your IP address and basic request information. Google Fonts does not set cookies on your device for this purpose, which is why it does not require a consent banner, but it does involve your IP address being shared with Google. If you would prefer this not to happen, the fonts can be served from our own domain instead, and we are happy to hear from you about it.

If we introduce analytics, a Meta Pixel or other advertising and tracking technologies in future, we will update this Privacy Policy and put in place any cookie consent mechanism required by the Privacy and Electronic Communications Regulations (PECR) before those technologies are used.

Separately, when you click through to Stripe to complete a purchase, you are on Stripe’s own website, and Stripe’s cookies and privacy practices apply there. The same is true of any other website you reach through a link from ours.

14 Your data protection rights

Depending on the circumstances and the lawful basis we are relying on, you may have the right to:

• access the personal information we hold about you
• have inaccurate information corrected
• request deletion of your information
• request that we restrict how we use it
• object to certain processing
• receive certain information in a portable format
• withdraw consent, where our processing is based on consent

Not every right applies in every situation. Some depend on the lawful basis we are using or are subject to exemptions — for example, we may need to keep certain records to meet a legal or accounting obligation even if you ask us to delete them. If a right does not apply to your request, we will explain why.

To exercise any privacy right, email info@zelosmarketing.com. We do not charge for this in normal circumstances, and we aim to respond within one month, as required by UK data protection law.

15 Complaints

If you have a concern about how we have handled your personal information, please contact us first at info@zelosmarketing.com — we would rather hear about it and put it right.

You also have the right to complain to the UK data protection regulator, the Information Commissioner’s Office (ICO). You can do so at ico.org.uk/make-a-complaint. Contacting us first does not affect that right.

16 Automated decision-making

Zelos Marketing does not currently use personal information collected through this website to make decisions about individuals solely by automated means that produce legal or similarly significant effects.

Enquiries are read and answered by a person. The only automated step in the enquiry process is a basic spam check, which does not make any decision about you as an individual.

17 Changes to this policy

We may update this Privacy Policy from time to time, for example when:

• our services change
• the technology on our website changes
• we change or add service providers
• legal or regulatory requirements change

The latest version will always be published on this page, and the “Last updated” date at the top will be changed to reflect it. Where a change is significant — for example if we begin using analytics or advertising technology — we will take appropriate steps to make that clear rather than relying on a quiet edit.