Privacy Policy

ABZN LIMITED (“we”, “our”, or “us”) is the controller for personal data collected through the abzn.io website and direct enquiries. Our contact details are support@abzn.io, London, United Kingdom. For work carried out for a client, the client may be the controller and ABZN may process data on their documented instructions. This policy explains how we handle information when you use our services or contact us about business work.

When you create an account, contact us, or work with ABZN, we may collect:

• Name and email address
• Account credentials
• Company name and project contact details
• Information you share in support requests or project briefs

When you use the app or website, we may automatically collect:

• Device information (device type, operating system)
• App and site usage statistics
• Crash reports and performance data

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Respond to your enquiries and support requests
• Scope, deliver, maintain, and support business services you request
• Diagnose and fix technical issues

We use information to take steps at your request before entering a contract, to perform a contract with you or your organisation, and for our legitimate interests in running, securing, and improving the service. Where we ask for consent, you can withdraw it at any time.

Where a project uses an AI provider, we agree the provider, the fields sent to it, and the retention and training settings before it goes live. We connect only the specific systems and data a workflow needs, keep a human approval step where the output affects your customers, and document the data flow for the project.

We do not sell personal information. Depending on the service, we may use hosting, email, analytics, form, cloud, error-reporting, and AI providers. We share only the information needed for that provider to perform its role. For client projects, the suppliers and data categories are documented in the project agreement or data-flow record.

The enquiry form stores your brief, contact details and reply preference in Cloudflare D1 and sends an internal notification to ABZN. We also record the referring website or campaign tags attached to your enquiry so we can understand which content led to it. This attribution stays in page memory before submission; it does not use tracking cookies or local storage. Cloudflare processes network information to deliver and secure the site. Short-lived salted hashes help limit form abuse; our enquiry database does not store your raw IP address.

The separate email-notes form records your email, signup source, consent wording version and signup time. Subscribing is optional and is not required to download the worksheet or enquire about work. We use that consent to send AI notes and occasional service updates. To unsubscribe, email support@abzn.io; every update will explain how to opt out. Contacting us about a project does not subscribe you.

Agreed consulting fees are collected on a Stripe-hosted checkout. Stripe processes your billing and payment details; ABZN receives payment status and the details needed to identify and deliver your engagement. Card details are not submitted to or stored by this website. See Stripe’s privacy policy.

For paid book downloads, Stripe confirms payment to our Cloudflare service. We keep a hashed purchase-session reference, payment reference, edition and access status so we can deliver the files and withdraw access after a refund. We do not store card details in this service. An essential secure cookie remembers download access for up to 30 days; browser session storage keeps the return reference while the tab is open. Neither subscribes you to marketing. Short-lived salted network hashes limit download abuse.

New enquiries are removed from the website database after 12 months. If we continue a conversation, we review the related correspondence and keep it for up to 12 months after our last contact. Newsletter details are kept until you unsubscribe; a minimal suppression record is retained to prevent further mail. Contract, invoice, and project records are kept for as long as needed to provide the service and meet legal, accounting, and dispute-resolution obligations. We then delete or anonymise data where it is practical to do so. You may ask us to review or delete information where there is no lawful reason for us to keep it.

Under UK GDPR you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for processing
• Export your data in a portable format
• Ask us to restrict or object to certain processing

To exercise any of these rights, email support@abzn.io.

You can also complain to the Information Commissioner’s Office, the UK data-protection regulator.

Some suppliers may process data outside the United Kingdom. Where that happens, we use an appropriate transfer mechanism and safeguards required by UK data-protection law. The provider and transfer details for a client workflow are recorded before that workflow goes live.

Our services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will remove it.

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date above.

Questions about this policy? Email support@abzn.io.