Privacy Policy
Last updated: 23/06/2026
Overview
Zoocha Limited ("Zoocha", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, share and protect personal data when you use our website, contact us, subscribe to communications, engage with us as a client, supplier or business contact, visit our premises, or otherwise interact with Zoocha.
This Privacy Policy also explains your rights under data protection law and how you can contact us about the way we process your personal data.
This notice relates primarily to personal data processed by Zoocha as a Data Controller. Where Zoocha processes personal data on behalf of clients as a Data Processor, that processing is governed by the relevant client contract, data processing agreement and documented client instructions.
Who We Are
Zoocha Limited is a company registered in England and Wales.
Company name: Zoocha Limited
Registered number: 07048429
Registered office: Second Floor, Seed Warehouse, The Wash, Hertford, Hertfordshire, SG14 1PX
ICO registration number: ZA159015
Zoocha is registered with the Information Commissioner's Office (ICO) as a Data Controller.
If you have any questions about this Privacy Policy or how we process personal data, please contact us using the details in Section 15.
Personal Data We Collect
We may collect and process the following categories of personal data.
| Category | Examples |
|---|---|
| Identity and contact data | Name, job title, organisation, email address, telephone number and postal address. |
| Enquiry and communication data | Information you provide when contacting us through our website, email, telephone, events, meetings or other communications. |
| Business relationship data | Information relating to prospective clients, clients, suppliers, partners and business contacts. |
| Marketing data | Newsletter subscriptions, marketing preferences, event registrations and interactions with our communications. |
| Website and technical data | IP address, browser type, device information, operating system, approximate location, referral source, pages visited and website usage data. |
| Analytics data | Information about how visitors use our website and interact with our content. |
| CCTV and visitor data | CCTV images and visitor information where you attend Zoocha premises. |
| Contract and service data | Information required to manage contracts, projects, support services, supplier relationships and business administration. |
We do not intentionally collect special category personal data through our website. Special category data includes information such as health data, biometric data, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or sexual orientation.
How We Collect Personal Data
We may collect personal data:
- Directly from you when you contact us, complete a form, subscribe to communications, attend an event, visit our premises or engage with our services.
- Through our website and related technologies, including cookies and analytics tools.
- From business contacts, clients, suppliers, partners or professional networks.
- From publicly available sources, such as company websites, Companies House, professional directories or social media platforms.
- Through contractual or service delivery activities.
How We Use Personal Data and Our Lawful Bases
We only process personal data where we have a lawful basis to do so.
| Purpose | Personal data used | Lawful basis |
| Responding to website enquiries, emails, calls and contact form submissions. | Identity, contact, enquiry and communication data. | Legitimate interests and, where relevant, steps prior to entering into a contract. |
| Managing prospective client, client, supplier and partner relationships. | Identity, contact, business relationship and communication data. | Legitimate interests and/or performance of a contract. |
| Providing services and managing contracts. | Identity, contact, contract, service and communication data. | Performance of a contract and legitimate interests. |
| Sending newsletters, updates, event information and marketing communications. | Identity, contact and marketing preference data. | Consent where required, or legitimate interests where permitted by law. |
| Managing events, meetings and business development activities. | Identity, contact, business relationship and communication data. | Legitimate interests. |
| Operating, securing and improving our website. | Website, technical and analytics data. | Legitimate interests and consent where required for non-essential cookies. |
| Monitoring website performance and understanding how users interact with our content. | Website, technical and analytics data. | Legitimate interests and consent where required. |
| Protecting our premises, personnel and visitors through CCTV. | CCTV and visitor data. | Legitimate interests in safety, security and crime prevention. |
| Maintaining business records, financial records and audit evidence. | Identity, contact, contract, service and business relationship data. | Legal obligation, legitimate interests and performance of a contract. |
| Complying with legal, regulatory, contractual or law enforcement obligations. | Relevant personal data depending on the request or obligation. | Legal obligation and legitimate interests. |
| Protecting Zoocha, our clients, systems and services from fraud, misuse, cyber threats or unauthorised activity. | Technical, security, communication and service data. | Legitimate interests and legal obligation where applicable. |
Where we rely on legitimate interests, we only do so where we have considered the impact on your rights and freedoms and where our interests are not overridden by your interests or fundamental rights.
Where we rely on consent, you may withdraw your consent at any time.
Marketing Communications
We may use your contact details to send you information about Zoocha services, events, insights, updates and related business activities where permitted by law.
You will receive marketing communications from us where:
- You have subscribed to receive them.
- You have requested information from us.
- You have engaged with us in a business context and we are permitted to contact you under applicable marketing rules.
- You have not opted out of receiving such communications.
You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.
We do not sell, rent or lease personal data to third parties for their own marketing purposes.
Cookies and Analytics
Our website uses cookies and similar technologies to support website functionality, improve user experience, understand website usage and support service improvement.
Some cookies are necessary for the website to operate. Other cookies, such as analytics or marketing cookies, will only be used where required consent has been obtained.
You can manage your cookie preferences through the cookie controls available on our website.
Further information about the cookies and similar technologies used on our website is available in our Cookie Declaration.
Sharing Personal Data
We may share personal data where necessary with:
- Technology, hosting and cloud service providers.
- Website, analytics and cookie management providers.
- CRM, email, collaboration and business administration platforms.
- Professional advisers, including legal, accounting, insurance and audit advisers.
- Suppliers, subcontractors and delivery partners who support our services.
- Clients, where necessary for service delivery or contractual purposes.
- Regulators, law enforcement agencies, public authorities or courts where required or permitted by law.
- Prospective purchasers, investors or advisers in connection with a business reorganisation, merger, acquisition or similar corporate transaction.
Where third parties process personal data on our behalf, we require appropriate contractual, security and confidentiality controls.
We will not share personal data unless there is a lawful basis for doing so.
International Transfers
Zoocha operates internationally and uses cloud-based services and technology providers. This means that personal data may be accessed from, or transferred to, countries outside the United Kingdom where required for business, operational, support or service delivery purposes.
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with applicable data protection law. These safeguards may include:
- UK adequacy regulations.
- International Data Transfer Agreements (IDTAs).
- The UK Addendum to the European Commission Standard Contractual Clauses.
- Contractual, technical and organisational controls.
- Supplier due diligence and security review processes.
Where Zoocha processes personal data on behalf of clients, international transfer arrangements will be managed in accordance with the relevant contract, data processing agreement and documented client instructions.
You may contact us for further information about international transfer safeguards.
Security of Personal Data
Zoocha takes the security of personal data seriously.
We maintain technical, organisational and operational controls designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.
These controls may include:
- Access controls and least-privilege access arrangements.
- Secure authentication and account management.
- Encryption and secure transfer methods where appropriate.
- Supplier and third-party security governance.
- Monitoring, logging and incident management processes.
- Staff training and awareness.
- Confidentiality obligations.
- Secure retention and disposal processes.
Zoocha maintains certified management systems for information security and privacy, including ISO 27001 and ISO 27701. Zoocha is also Cyber Essentials Plus certified.
No system or transmission method can be guaranteed to be completely secure, but Zoocha applies appropriate safeguards proportionate to the nature of the data and the risks involved.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected.
Retention periods depend on the nature of the personal data, the purpose of processing and any applicable legal, regulatory, contractual, operational or audit requirements.
For example:
- Enquiry records may be retained for as long as necessary to respond to and manage the enquiry.
- Client and supplier records may be retained for the duration of the relationship and for an appropriate period afterwards for legal, contractual, accounting and audit purposes.
- Marketing preferences may be retained to ensure we respect opt-out requests.
- CCTV footage is retained only for as long as necessary for safety, security and crime prevention purposes, unless a longer period is required for investigation or legal reasons.
- Website analytics data is retained in accordance with the settings of the relevant analytics and cookie management tools.
When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of.
Automated Decision-Making and AI
Zoocha does not use personal data collected through this website to make decisions that produce legal or similarly significant effects based solely on automated processing.
Where Zoocha uses AI-enabled tools to support business activities, we apply appropriate governance, information security and privacy controls. Personal data must not be used with AI-enabled tools unless this is authorised, lawful and subject to appropriate safeguards.
Where AI-enabled services are used in relation to client work, this will be governed by the relevant contractual arrangements, client instructions and Zoocha's internal governance processes.
Your Legal Rights
Under data protection law, you may have the following rights in relation to your personal data.
| Right | What this means |
| Access | You can request a copy of the personal data we hold about you. |
| Correction | You can ask us to correct incomplete or inaccurate personal data. |
| Erasure | You can ask us to delete personal data where there is no lawful reason for us to continue holding it. |
| Restriction | You can ask us to restrict processing in certain circumstances. |
| Objection | You can object to processing where we rely on legitimate interests or where we process personal data for direct marketing. |
| Portability | You can ask us to provide certain personal data in a structured, commonly used and machine-readable format. |
| Withdraw consent | Where we rely on consent, you can withdraw that consent at any time. |
| Complain to a regulator | You can complain to the Information Commissioner's Office if you are unhappy with how we process your data. |
These rights may be subject to limitations or exemptions under applicable law.
You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply where a request is manifestly unfounded, excessive or repetitive.
We may need to request information from you to confirm your identity before responding to a request. This helps ensure that personal data is not disclosed to someone who is not entitled to receive it.
We aim to respond to valid requests within one month. Where a request is complex or where you have made multiple requests, we may extend the response period where permitted by law and will let you know if this applies.
Third-Party Websites
Our website may contain links to third-party websites, services or resources.
We do not control those third-party websites and are not responsible for their privacy practices, content or security. When you leave our website, we encourage you to read the privacy notice of any website you visit.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact:
Zoocha Limited
Second Floor, Seed Warehouse, The Wash, Hertford, Hertfordshire, SG14 1PX
Email: [email protected]
Telephone: 01992 256700
You can also contact us through the contact form on our website.
Complaints
You have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters.
ICO website: www.ico.org.uk
We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technologies, legal obligations or business operations.
The latest version will be published on our website and the "Last updated" date will be amended accordingly.