How information is handled
People behind the enquiry
Zody AI’s corporate website introduces software-development services. The company is controller for its own publication and business correspondence, as identified in the registration details below. A first explanation of a user journey should use a description rather than real personal records.
Page requests and messages
Technical website requests are delivered through Cloudflare and can contain network identifiers, browser details, timestamps and resource paths. A sender separately decides what contact and project information to include in correspondence. Fonts are served locally and no advertising or audience-analysis script has been added.
Relevant purposes and lawful bases
Secure page delivery and dealing with a relevant business approach are legitimate interests under Article 6(1)(f), after considering the individual’s interests. Article 6(1)(b) can support steps that a person requests before a contract; Article 6(1)(c) covers applicable legal duties. Consent is used only for an explained purpose requiring that choice.
The application is a separate context
If commissioned work makes Zody AI a processor, the customer instructions and agreement must set out the data involved, permitted recipients, access controls and end-of-work handling. The corporate website notice does not itself authorise access to a customer system or establish terms for one.
Retention and geographical reach
An enquiry is kept in relation to its continuing purpose, a resulting engagement and justified legal or dispute needs. When no reason remains, information is removed or anonymised. International transfers connected with infrastructure need the relevant safeguards: recognised adequacy or approved contractual protection as appropriate.
Choices, correction and deletion
Use the registered office to seek access, correction, restriction or deletion of data relating to a Zody AI exchange. Objection and portability are available subject to their conditions. Identify the interaction and a means of reply; any identity checks must be proportionate. Requests ordinarily receive a response within one month.
Protection and accountability
A suspected data breach is assessed to contain harm and establish the notification duties, including the ICO’s 72-hour deadline where applicable and communication to people where required. The ICO also offers an independent complaint route. These company pages are designed for business enquiries, not children’s interaction.