What we collect, and what we don't.

Zeravon Ltd, 128 City Road, London, EC1V 2NX, United Kingdom, registered in England and Wales under company number 16649870, is the data controller for the personal data described here. For any privacy question or request, email contact@zeravonltd.com.

• Contact form: your name, email address, company or project name, the budget band you select, the services you tick and the message you write.
• Email, WhatsApp or phone contact: whatever you send us, plus the address or number you sent it from.
• Client engagements: the business and billing details needed to quote, invoice and deliver — and any credentials you share so we can do the work.
• Server logs: our host records standard request data, including IP address and user agent, to serve pages and defend against abuse.

We do not use cookies for tracking, advertising or analytics. We do not build profiles, we do not run A/B tests on you, and we do not sell, rent or share your data with anyone for marketing.

Our contact form stores a short list of timestamps in your own browser (local storage, under the key zeravon_form_submissions) so the form can rate-limit repeat submissions from the same browser. It holds no personal data, never leaves your device, and is not used to identify or track you. Clearing your browser storage removes it.

• Legitimate interests — to answer an enquiry you sent us and to protect the site from spam and abuse.
• Performance of a contract — to quote, deliver and invoice work you have engaged us for.
• Legal obligation — to keep accounting and tax records as UK law requires.
• Consent — only if you explicitly opt in to something, which you can withdraw at any time.

We keep the supplier list deliberately short. Each of these acts as a processor for us and is bound to use the data only to provide its service:

• Vercel Inc. — hosting and content delivery for this website, including server logs.
• FormSubmit — delivers contact form submissions to our studio inbox. Form data passes through their service when you press send.
• Google LLC (Gmail / Google Workspace) — the studio email inbox where enquiries arrive and are kept.
• Meta Platforms (WhatsApp) — only if you choose to message us on WhatsApp.
• Wise Payments Ltd and our banking providers — to issue invoices and take payment. Card details are entered with the payment provider, never with us; we never see or store your full card number.

Web fonts are served from our own domain, so loading this site makes no request to Google Fonts or any other third-party font service.

Some of these providers operate outside the UK. Where data is transferred abroad, it is protected by UK adequacy regulations or by standard contractual clauses.

• Enquiries that do not become projects: up to 24 months, then deleted.
• Client project records: for the engagement and 12 months after, so we can support the work.
• Invoices and accounting records: 6 years after the end of the financial year, as UK tax law requires.
• Credentials you share: deleted or returned at handover, or at your request, whichever comes first.

Under UK GDPR you can ask us to confirm what we hold about you, give you a copy, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent where consent was the basis for processing.

Email contact@zeravonltd.com and we will respond within 30 days. There is no charge. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk, or call their helpline on 0303 123 1113.

The site is served over HTTPS only. Studio accounts are protected with two-factor authentication and a password manager, client credentials are stored in an encrypted vault, and access is limited to the people working on your project. No system is perfect — if a breach ever affected your data, we would tell you and the ICO within 72 hours of becoming aware of it.

Our services are sold to businesses and adults. We do not knowingly collect data from anyone under 18.

If we add a tool that changes what we collect — analytics, for example — we will update this page and change the date at the top before switching it on.