Last updated: please refer to the date on which this page was most recently published.
This Privacy Policy explains how Zuzefu ("we", "us", "our") collects, uses, stores and shares your personal data when you visit our website and use the contact form on it. We are committed to handling your personal data lawfully, fairly and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
Zuzefu is the controller of the personal data described in this policy. We provide a mobile application that helps students track their expenses. Our contact details are:
The only way this website collects personal data directly from you is through the form on the site. When you submit the form, we may collect:
We use this information solely to receive, assess and respond to your enquiry, and to keep a record of our correspondence with you. We do not ask for more information than we need, and we ask that you do not include sensitive information (such as health details or financial account numbers) in your message.
We do not use your form submission for automated decision-making or profiling.
Under the UK GDPR we must have a lawful basis for processing your personal data. We rely on the following:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry submitted through the form | Our legitimate interests in communicating with people who contact us (Article 6(1)(f) UK GDPR), and, where your enquiry relates to using our services, steps taken at your request before entering into a contract (Article 6(1)(b)) |
| Storing your cookie consent choice | Your consent, as required by PECR for cookies that are not strictly necessary, and our legitimate interest in remembering your preference |
| Advertising measurement on the confirmation page | Your consent (Article 6(1)(a) UK GDPR and PECR) |
| Keeping records to meet legal obligations or to establish, exercise or defend legal claims | Legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)) |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms and have concluded that they are not. You may ask us for more detail about this assessment at any time.
This website sets only one cookie:
| Cookie name | Purpose | Duration |
|---|---|---|
cookie_consent |
Stores your cookie consent choice so that we do not ask you again on every visit | One year |
We do not use analytics tools on this website, and we do not set session cookies, security-token cookies or any other cookies beyond the one listed above.
Advertising measurement runs only if you have given consent, and only on the confirmation page shown after you submit the form. If you decline consent, no advertising measurement takes place. You can change your choice at any time by clearing the cookie_consent cookie in your browser settings, after which you will be asked again on your next visit.
When the retention period ends, we securely delete or anonymise the data.
We do not sell your personal data. We may share it only in the following limited circumstances:
If any of these recipients are located outside the United Kingdom, we will ensure that your data is protected by an appropriate safeguard, such as an adequacy decision or the UK International Data Transfer Agreement or Addendum.
Under the UK GDPR you have the following rights regarding your personal data:
To exercise any of these rights, email us at [email protected], write to us at 13 Wake Green Road, Birmingham, B32 0FZ, or call +44 121 739 1327. We may need to verify your identity before acting on a request. We will respond within one month of receiving your request; if your request is complex we may extend this by up to two further months, and we will tell you if this is the case. We do not charge a fee unless a request is manifestly unfounded or excessive.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. Access to the data you send us is limited to those who need it to respond to you. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we take our responsibilities seriously.
If you have a concern about how we handle your personal data, please contact us first at [email protected] so that we can try to put things right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, at ico.org.uk.
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The latest version will always be available on this page. We encourage you to review it periodically.
If you have any questions about this policy or how we use your personal data, please contact us: