GDPR Centre

Information for customers and visitors on our data practices under the UK GDPR and EU GDPR.

Data controller

ZypherLock® acts as data controller for account and marketing data. Contact: privacy@zypherlock.io.

Lawful bases

  • Contract, to provide and support the service
  • Legitimate interests, to secure and improve the platform
  • Consent, where required for marketing

Data subject rights

  • Access, rectification, erasure
  • Restriction and objection
  • Data portability

We respond to verified requests within one month. Complex requests may take longer, we will keep you informed.

International transfers

When data leaves the UK or EEA, we use approved safeguards, for example standard contractual clauses.

Retention

We keep data only as long as needed for the purposes above, or as required by law.

Security

Encryption in transit and at rest, RBAC, audit logging, and vendor due diligence. We align with ISO 27001 controls and NIST practices.

Make a request

Use the form to submit a data request. We may ask for additional proof of identity.

You can also email us at privacy@zypherlock.io.