Privacy Policy

1. Data we collect

• Name, company, and work email.
• Audit scope inputs such as monthly spend, markets, channels, and notes.
• Preferences you share in the request form.
• Basic usage data if you opt in to analytics cookies.

2. How we use data

• Qualify and respond to audit requests.
• Prepare scoping, timelines, and recovery support.
• Improve site performance and usability (with consent).
• Comply with legal or regulatory obligations.

3. Lawful basis

• Legitimate interests to respond to inquiries and run the business.
• Consent for analytics or marketing cookies.
• Contractual necessity if we enter an audit engagement.

4. Data sharing and subprocessors

We use vetted providers to host the site and deliver emails. Current subprocessors include hosting and infrastructure providers and an email delivery service. We do not sell personal data.

5. Retention

Inquiry data is retained only as long as needed to respond to your request and support potential engagement. We may retain records for up to 24 months unless a longer period is required by law or agreed in an engagement.

6. International transfers

If data is processed outside the EU or EEA, we rely on appropriate safeguards such as standard contractual clauses or equivalent measures.

7. Your rights (EU/EEA)

You may request access, correction, deletion, restriction, objection, or data portability. You can also withdraw consent for non-essential cookies at any time.

8. Contact

For privacy requests, contact privacy@zelstrom.io.