Zoral Logo

Privacy Policy

Effective Date: April 1, 2026

Introduction

This Privacy Policy applies to Zoral Limited together with its affiliated entities operating in multiple jurisdictions worldwide (“Company,” “we,” “us,” or “our”). Our company information and contact details are shown at the foot of this Privacy Policy. Company respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website www.zorallabs.com, communicate with us, engage with our marketing content, or interact with us through digital platforms.

Scope

This Privacy Policy applies to:

  • Website visitors
  • Customers and prospective customers
  • Business partners
  • Vendors
  • Marketing subscribers
  • Individuals interacting with us via digital channels

This Privacy Policy does not apply to employee data.

Information We Collect

We may collect the following categories of personal data when you interact with our Website:

  • Technical Data such as IP address, device type, operating system, browser version, time zone, and platform.
  • Usage Data such as how you navigate the Website, including pages visited and interaction details.
  • Contact Data such as your name, email address, company name, phone number (if provided), and message content.
  • Cookie Data collected through cookies and tracking technologies (see below).

We do not intentionally collect special category (sensitive) personal data via the Website.

How We Collect Data

Personal data is collected directly when you fill out forms on the Website, such as the Contact Us form. We also collect data automatically through cookies, server logs, and tracking technologies. In some cases, we receive information from third-party services such as analytics tools.

How We Use Your Information

As a global organization operating through multiple affiliated entities across various jurisdictions worldwide, we use personal information in a manner that is consistent with applicable data protection and privacy laws in the countries where we conduct business. Under data protection legislation, we must always have a lawful basis for using personal data.

We process personal data to respond to inquiries, operate and maintain the Website, and improve user experience. Data is also used to analyse Website performance, manage cookie preferences in compliance with laws, and maintain security to prevent fraudulent use.

Cookies and Tracking Technologies

Our Website uses a consent management platform to handle cookie preferences.

Types of Cookies:

  • Strictly Necessary Cookies: Essential for the Website’s core functions.
  • Functional Cookies: Enhance features and personalization.
  • Performance Cookies: Track usage for performance insights.
  • Targeting Cookies: Used by advertising partners to deliver relevant ads.

You can manage or withdraw your cookie consent at any time through your browser settings. Disabling certain cookies may impact your Website experience.

Data Sharing and Subprocessors

We do not sell personal data.

We may share information with trusted subprocessors including Google Analytics (analytics), Cloudflare (security), Microsoft 365 and SendGrid (communications), AWS, Azure, and GCP (cloud hosting).

All subprocessors are subject to contractual data processing agreements in accordance with data protection legislation in your jurisdiction.

International Transfers

Because we operate globally your data may be transferred outside your home jurisdiction.

Where transfers occur, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs), Adequacy decisions, Binding Corporate Rules, or International Data Transfer Agreements (IDTAs).

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected or as required by law.

When no longer required, personal data is securely deleted or anonymized.

Your Rights

Depending on your jurisdiction, you may have rights including access, rectification, erasure, restriction or objection to processing, portability, withdrawal of consent, and the right to lodge a complaint with a data protection authority.

Requests can be sent to: compliance@zorallabs.com

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Measures include TLS encryption, firewalls, access controls, secure development practices, and regular security assessments.

Zoral undergoes annual independent external audits for SOC 2 Type II compliance to assess the effectiveness of security controls.

Third-Party Links

Our Website may contain links to third-party websites. Zoral is not responsible for the privacy practices or content of external sites.

Children’s Privacy

Our Website is not directed to individuals under the age of 16, and we do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted here and will take effect upon posting.

Contact Us

Zoral Limited

Company No: 04579626

Alexandra House, St Johns Street, Salisbury, Wiltshire, United Kingdom, SP1 2SB

Email: compliance@zorallabs.com

If you are a UK resident and your concern remains unresolved, you may contact the Information Commissioner’s Office: https://ico.org.uk