Privacy Policy

Version 1.1 — Last Updated: October 2025

1. Introduction

This Privacy Policy explains how Zig Stock Limited (“we”, “us”, “our”) collects, uses, and protects personal and business data when you use our website and platform available at https://zigstock.com/.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (GDPR)and the Data Protection Act 2018.

2. Eligibility and Intended Use

Zig Stock is a business-to-business (B2B) software platform designed exclusively for salon professionals and related businesses.
The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal data from minors. If we discover that we have inadvertently collected data from anyone under 18, we will delete it promptly.

3. Information We Collect

We collect and process the following categories of data:

3.1 Information You Provide

  • Name, email address, and password (when registering an account)

  • Business and salon details (e.g., name, address, and contact information)

  • Subscription and payment details (processed securely by Stripe)

  • Marketing preferences (if you opt in to receive updates or communications)

3.2 Automatically Collected Information

  • Log data, device information, and usage analytics

  • Cookies and tracking technologies (see Section 10)

4. How We Use Your Information

We use your data to:

  • Create and manage your Zig Stock account

  • Deliver our subscription-based services

  • Process payments and renewals through Stripe

  • Send transactional or administrative emails

  • Provide customer support

  • Improve functionality, performance, and security

  • Send marketing communications (only with your explicit consent)

  • Comply with legal or regulatory obligations

We never sell or rent your information to third parties.

5. Legal Basis for Processing

Our processing of your personal data relies on one or more of the following lawful bases:

  • Contractual necessity — to perform our obligations in providing the Zig Stock service;

  • Legitimate interests — to improve and secure our platform;

  • Legal obligations — to comply with tax, accounting, and regulatory requirements;

  • Consent — for optional marketing communications or cookies.

6. Marketing Communications

You may choose to receive marketing communications from us when you:

  • Tick an opt-in checkbox during registration or within your account settings; or

  • Subscribe through a promotional form or campaign.

You can withdraw consent at any time by:

  • Clicking the “unsubscribe” link in our emails, or

  • Updating your account preferences, or

  • Contacting us at [email protected].

We do not send marketing emails without your explicit consent.

7. Data Security and Encryption

We take appropriate technical and organisational measures to safeguard all personal and business data.

  • Passwords are hashed and encrypted using industry-standard algorithms.

  • Other sensitive data (e.g., account details, stock information, and salon records) is stored securely in an encrypted database hosted on AWS servers.

  • Data transmitted between your browser and our servers is protected by TLS (Transport Layer Security)encryption.

  • Regular security audits and access controls are in place to prevent unauthorised access.

8. Third-Party Service Providers

We work with carefully selected third-party providers who process data on our behalf to deliver functionality, hosting, analytics, payment, and AI-driven features.


Provider | Purpose | Data Location / Safeguards

  • Stripe, | Payment processing | EEA / U.S. (with SCCs)

  • Amazon Web Services (AWS) | Cloud hosting and storage | United Kingdom & EU

  • Google LLC (Google Cloud & Google Analytics) | Hosting, analytics, and performance tracking | EEA / U.S. (with SCCs)

  • OpenAI, L.L.C. | AI-assisted automation, natural language processing, and data analysis features | U.S. (Standard Contractual Clauses in place)

  • Google AI | Machine learning and data processing tools for insights and automation | EEA / U.S. (Standard Contractual Clauses in place)

  • AssemblyAI, Inc. | Speech-to-text and voice data transcription for voice-based features | U.S. (Standard Contractual Clauses in place)


Each provider processes data strictly under our instructions and in compliance with GDPR requirements.

All data shared with AI providers (such as OpenAI, Google AI, and AssemblyAI) is limited, encrypted in transit, and never used by them to train external models.

9. Data Retention

We retain your personal and business data only for as long as necessary to fulfil the purposes outlined in this Policy:

  • Account data: retained while your account is active and deleted or anonymised within 60 days of closure.

  • Financial and billing records: retained for up to 6 years in compliance with HMRC requirements.

  • Marketing consent data: retained until you withdraw consent or unsubscribe.

After these periods, your data is securely deleted or anonymised.

10. Cookies and Tracking Technologies

Zig Stock uses cookies and similar technologies to enhance your experience and analyse usage.

10.1 Types of Cookies

  • Essential cookies – Required for the platform to function (e.g. authentication).

  • Analytics cookies – Used to measure performance and usage trends.

  • Preference cookies – Save your settings and preferences.

10.2 Consent

A cookie banner appears on first visit to allow you to manage non-essential cookie preferences.
You can adjust cookie settings at any time in your browser or through the cookie banner.

11. International Data Transfers

Where data is transferred outside the UK or European Economic Area (EEA), we ensure it is protected through:

  • The use of Standard Contractual Clauses (SCCs) approved by the UK and EU authorities; or

  • Transfers to countries deemed to provide an adequate level of data protection by the UK Government.

12. Data Breach Notification

In the event of a personal data breach, we will:

  • Notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, if it poses a risk to individuals’ rights and freedoms; and

  • Notify affected users without undue delay, where there is a high risk of impact.

13. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data;

  • Request correction of inaccurate or incomplete data;

  • Request deletion (“right to be forgotten”);

  • Object to or restrict processing;

  • Request data portability;

  • Withdraw consent at any time.

To exercise any of these rights, please contact us at [email protected].

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

14. Changes to This Policy

We may update this Privacy Policy occasionally to reflect legal, operational, or service changes. The latest version will always be available on our website, with the “Last Updated” date shown at the top.

15. Contact Us

For any privacy-related questions, concerns, or data requests, please contact:
Email: [email protected]
Company: Zig Stock Limited (registered in England and Wales)



Save money. Cut waste. Stay stocked. Zigstock is the AI assistant your salon has been missing.

Contact

Follow

© Copyright 2025. Zigstock SALES. All rights reserved.