Privacy notice

1. Who we are

Zamerio Limited (“we”) is responsible for your personal data (the controller). We are a private company limited by shares, registered in Ireland, company no. 829466, registered office: Jervis Place, Capel Street, Dublin 1, D01 EP97, Ireland. Email: hello@zamerio.com.

We have not appointed a data protection officer. Questions about your data go to hello@zamerio.com.

2. Summary

Scroll sideways to see the whole table.

3. Visitors, forms and clients

Website visitors

Our host, Cloudflare, records technical data such as your IP address and browser to deliver the site and protect it from attacks. We count visits with Cloudflare Web Analytics, which uses no cookies and does not track you across sites. Legal basis: our legitimate interest in a secure, working website.

Forms

When you ask for a free check, a quote, or to opt out, we receive what you type. It reaches us by email. We use it only to reply and do what you asked. Fields marked required are needed to reply; without them we can't. Legal basis: steps you ask for before a contract (Art. 6(1)(b)). If you tick the marketing box, we send occasional emails with your consent (Art. 6(1)(a)); untick it by replying “stop” at any time. We delete form data 12 months after our last contact, unless you become a client.

Free email check: the domain you type (anything before an @ is dropped), used once to read its public email settings and show you the result. We don't store or log it; it is held for up to a minute only to limit repeated checks. The lookups go through Cloudflare's public DNS resolver (1.1.1.1), which deletes its query logs within 25 hours and may keep counts of looked-up domain names with no link to you. Basis: legitimate interests (answering your request).

Clients

We use your contact, billing and project details to deliver the work and invoice you (contract, Art. 6(1)(b)), and keep accounting records as tax law requires (Art. 6(1)(c)).

When an order is complete we use your work contact details once to ask for a review on Trustpilot or Clutch and, if you agree, a reference letter or permission to name you in case studies and bids (legitimate interest, Art. 6(1)(f), or your permission). You can object or withdraw at any time.

When your website collects your customers' data (for example, a contact form), that data is yours. We process it only on your instructions, as your processor, under our B2B Terms of Sale.

We send client reports as a PDF attached to our email; we do not publish them online. We keep a copy with your order records for as long as we keep those records (see Client in the table above).

If you have our email protection watch, we read the reports email services send about your domain for you, as your processor (B2B Terms §16). They can include the network addresses of servers that sent email using your address. We delete each report 90 days after your monthly note, and the rest when the watch ends.

4. Outreach

This section is for businesses we contacted before they contacted us.

Where we got your details

Public sources only: the Irish companies register (CRO open data, CC BY 4.0), the UK companies register (Companies House, Open Government Licence v3.0) and your business's own website, plus the public DNS records of its domain. To find businesses and their websites we also use open listings: OpenStreetMap (© OpenStreetMap contributors, ODbL), Overture Maps places (CDLA-Permissive-2.0, Apache-2.0 or CC0, by source). We write only to an address published on your own website. We never guess email addresses and never use lists from Google Maps or LinkedIn.

What we hold

Your business name and number, status, sector code and registered office; the business contact details your website publishes (for example info@ or bookings@); and the results of public tests of your website's speed, accessibility and email settings (whether your domain is protected against fake emails in its name); the page where we found your address and the date; the emails we sent you and your replies.

Why

To offer our services to your business, with a free check of your website. If you don't reply, we send at most 3 emails, and the last one says so. If you reply “not now”, we write once more, around the date our reply gives you. If you reply “yes”, we send the fix plan you asked for.

Legal basis

Legitimate interests (Art. 6(1)(f)): offering relevant services to businesses, using contact details the business published itself. Before we contact any business we weigh this against your interests in a written assessment. We write only to companies, never to sole traders or individuals, and tell you where we found your details in our first email. Once you reply “yes”, we prepare the fix plan at your request before any contract (Art. 6(1)(b)). If you reply for your company as an employee, we use your details under legitimate interests, to answer your company's request.

Your right to object

You can stop all contact at any time, for any reason. Use Stop messages or reply “stop” to our email. We stop every message within 24 hours, on every channel. We sort replies automatically; a reply asking us to stop puts your address on our do-not-contact list at once.

How long

The check page we made for your business is private (an unguessable link, hidden from search engines) and is deleted automatically after 60 days. We delete our outreach record 12 months after our last contact (our last email or your last reply), unless you become a client. If you opt out, we keep only a one-way code (hash) of your email or domain on a suppression list, permanently, so we never contact you again unless you ask us to, for example by requesting a check. Copies in our mailboxes leave our reach within about 2 months of our monthly deletion run; Google then deletes them from its systems within 180 days at most.

Profiling

We score businesses for fit using the public data above. The score only decides whether we write to you. It has no legal or similar effect on anyone.

5. Sharing, transfers and cookies

Who else sees your data

We don't sell personal data. Service providers handle it for us, under contract:

• Cloudflare: website hosting, private check pages, form handling, email forwarding, visit counts.
• Google (PageSpeed Insights): receives your website's public address to test its speed and accessibility.
• Google (Workspace): our mailboxes, which send our emails and receive your replies and form messages.
• A second mailbox we control, for internal access to the same messages.
• Stripe: card payments, once paying online is available (not in use today).
• Our accountant and solicitor, when needed.
• Vetted subcontractors who help deliver your project, under written confidentiality and data terms.
• Authorities, when the law requires it.

Transfers outside the EEA

Some providers, such as Cloudflare and Google, are US companies and may process data outside the European Economic Area. Where they do, they rely on safeguards the GDPR allows, such as the EU-US Data Privacy Framework (with its UK Extension) or standard contractual clauses (with the UK Addendum for UK data). For a copy, email hello@zamerio.com.

Cookies

We don't use tracking or advertising cookies, so there is no cookie banner. Visit counts are cookieless.

If you turn on dark mode, your browser stores that choice in one setting on your device (local storage, key “theme”). It is set only when you use the dark mode button, never sent to us, and not used for tracking.

While you send a form, your browser keeps what you typed in this tab only (session storage), so the form comes back filled if sending fails. It is cleared when the form page or its confirmation page loads again, and at the latest when you close the tab. It is never sent to us or used for tracking.

6. Your rights

You can ask us to:

• give you a copy of your data (access);
• correct it;
• delete it;
• limit how we use it;
• send it to you or another company in a common format (portability);
• object to any use based on our legitimate interests (for outreach and marketing, we always stop);
• withdraw consent you gave, at any time.

Email hello@zamerio.com. We reply within one month. We may ask you to confirm who you are.

Complaints. You can complain to us at any time: email hello@zamerio.com. We confirm we have it within 30 days and tell you the outcome without undue delay. You can also complain at any time to the Data Protection Commission in Ireland (dataprotection.ie), or to the authority where you live or work (in the UK: the Information Commission, ico.org.uk).

We make no decisions about you by automated means that have legal or similar effects.

7. Changes

We update this notice when what we do changes, and change the date at the top. Big changes that affect clients are also sent by email.