Privacy policy

Who we are

This website is operated by Zalo Design Studio, a founder-led studio based in Bergschenhoek, South Holland, the Netherlands. For the purposes of the General Data Protection Regulation (GDPR), Zalo Design Studio is the data controller. You can reach us at contact@zalodesignstudio.com for any privacy question or request.

What data we collect, and why

We keep data collection to a minimum.

• Analytics (with your consent). If you opt in, we use Google Analytics to understand how visitors use the site (pages viewed, approximate location, device and referral source) so we can improve it. Analytics cookies and identifiers are only set after you opt in.
• Advertising (with your consent). If you opt in, we may use advertising tools (such as Google Ads and Meta) to measure and improve our marketing campaigns. These are only loaded after you opt in.
• Contact. If you email us, we process the contents of your message and your email address to respond and to manage the enquiry.
• Technical logs. Our hosting and content delivery providers process limited technical data (such as IP address and user agent) to deliver the site securely and reliably.
• AI Opportunity Assessment. We process structured answers to provide and secure the requested assessment. If you request a personalised report, we separately collect the business contact details needed to prepare and deliver it. Marketing email and an AI-assisted follow-up call are separate, optional choices.

See our cookie policy for the specific cookies and how to change your choice.

Legal basis

• Consent (Article 6(1)(a) GDPR) for analytics and advertising. You can withdraw consent at any time.
• Legitimate interests (Article 6(1)(f) GDPR) for operating the site securely and responding to enquiries you initiate.
• Steps at your request (Article 6(1)(b) GDPR) to prepare and deliver the personalised report you ask for.
• Consent (Article 6(1)(a) GDPR) for optional marketing email and an optional outbound call, including a call using an AI voice assistant. Refusing either does not affect report delivery.

AI Opportunity Assessment privacy notice

Version assessment-privacy-notice@1.0.0. Zalo Design Studio is the controller. Anonymous assessment and security processing use our legitimate interest in providing and protecting the tool. Contact details used to prepare and email a report are processed to take the steps you request. Acknowledging this notice is not consent.

The report provider receives only identity-free structured assessment evidence. Names, organisation identity, email, telephone, website, free text, campaign data, cookies, IP addresses, credentials, and internal lead scores are excluded. Provider application storage is disabled. The provider may retain identity-free API data for abuse monitoring for up to 30 days.

Anonymous in-progress assessments are kept for 1 day, completed assessments and contact records for 365 days, consent and withdrawal evidence for 730 days, assessment analytics for 90 days, and operational logs and report records for 30 days. Contact retention runs from the report request or last substantive contact, whichever is later.

You may withdraw optional consent or exercise your GDPR rights by emailing contact@zalodesignstudio.com. Marketing messages also include an unsubscribe action. A verified deletion request removes live assessment, contact, report, delivery, and object records. Managed backup history expires under its service lifecycle and, if restored for recovery, stays isolated until the deletion is reapplied.

Privacyverklaring AI-kansenassessment

Versie assessment-privacy-notice@1.0.0. Zalo Design Studio is de verwerkingsverantwoordelijke. Voor de anonieme assessment en beveiliging gebruiken wij ons gerechtvaardigd belang om de tool aan te bieden en te beschermen. Contactgegevens voor het opstellen en e-mailen van een rapport verwerken wij om de door u gevraagde stappen uit te voeren. Bevestigen dat u deze verklaring hebt gelezen, is geen toestemming.

De rapportleverancier ontvangt uitsluitend gestructureerde assessmentgegevens zonder identiteit. Namen, organisatie-identiteit, e-mailadres, telefoonnummer, website, vrije tekst, campagnegegevens, cookies, IP-adressen, inloggegevens en de interne leadscore zijn uitgesloten. Opslag door de provider voor de applicatie is uitgeschakeld. De provider kan identiteitsvrije API-gegevens maximaal 30 dagen bewaren voor misbruikcontrole.

Een anonieme lopende assessment bewaren wij 1 dag, een afgeronde assessment en contactgegevens 365 dagen, bewijs van toestemming en intrekking 730 dagen, assessmentanalyses 90 dagen, en operationele logs en rapportgegevens 30 dagen. De bewaartermijn voor contactgegevens begint bij de rapportaanvraag of het laatste inhoudelijke contact, afhankelijk van wat later is.

U kunt optionele toestemming intrekken of uw AVG-rechten uitoefenen via contact@zalodesignstudio.com. Marketingberichten bevatten ook een afmeldmogelijkheid. Na een geverifieerd verwijderverzoek verwijderen wij de actieve assessment-, contact-, rapport-, bezorg- en objectgegevens. Beheerde back-uphistorie verloopt volgens de levenscyclus van de dienst en blijft bij herstel geïsoleerd totdat de verwijdering opnieuw is uitgevoerd.

AI Opportunity Call privacy notice

Version booking-privacy-policy@0.1.0. If you book an AI Opportunity Call, Zalo Design Studio uses the business contact details from your report request to show availability, create and manage a 30-minute Google Meet appointment, and send transactional calendar updates. We process this requested service under Article 6(1)(b) GDPR. Security, replay prevention, delivery, and recovery records use our legitimate interest in providing the service safely and reliably under Article 6(1)(f) GDPR.

Google Calendar receives the attendee email and controlled meeting details. Your primary calendar is queried only for free and busy time. Event details are not read or stored. Calendar data is not used for advertising or AI training, and Step 3 does not provide it to OpenAI, ElevenLabs, CM.com, or another AI agent. Zalo's use of Google Workspace information adheres to Google's User Data Policy, including Limited Use.

Core booking records and the dedicated calendar event are kept for no more than 365 days, unless you request earlier erasure or a specific recorded legal obligation requires retention. Owner-notification state and operational logs are kept for 30 days. Short-lived booking, management, session, lock, and OAuth credentials expire earlier according to their security purpose.

You can request access, correction, or erasure by emailing contact@zalodesignstudio.com. A verified erasure request revokes booking access, suppresses recreation, removes the Step 3 records, and deletes the dedicated Calendar event unless a recorded legal hold applies. Provider and managed backup copies expire under their applicable recovery lifecycles. Zalo Design Studio, Bergschenhoek, the Netherlands, is the controller. AWS in eu-north-1 hosts the application records. Provider and support processing may involve international transfers under their applicable safeguards.

Privacyverklaring AI-kansengesprek

Versie booking-privacy-policy@0.1.0. Als u een AI-kansengesprek boekt, gebruikt Zalo Design Studio de zakelijke contactgegevens uit uw rapportaanvraag om beschikbaarheid te tonen, een Google Meet-afspraak van 30 minuten te maken en te beheren, en transactionele kalenderupdates te versturen. Wij verwerken deze gevraagde dienst op grond van artikel 6(1)(b) AVG. Voor beveiliging, bescherming tegen herhaling, bezorging en herstel gebruiken wij ons gerechtvaardigd belang om de dienst veilig en betrouwbaar aan te bieden op grond van artikel 6(1)(f) AVG.

Google Calendar ontvangt het e-mailadres van de deelnemer en gecontroleerde afspraakgegevens. Uw primaire agenda wordt alleen op vrije en bezette tijd gecontroleerd. Afspraakdetails worden niet gelezen of opgeslagen. Agendagegevens worden niet gebruikt voor advertenties of het trainen van AI en worden in Stap 3 niet verstrekt aan OpenAI, ElevenLabs, CM.com of een andere AI-agent. Het gebruik van Google Workspace-informatie door Zalo voldoet aan het Google User Data Policy, inclusief de Limited Use-vereisten.

De belangrijkste boekingsgegevens en de afspraak in de speciale agenda worden maximaal 365 dagen bewaard, tenzij u eerder om verwijdering vraagt of een specifieke vastgelegde wettelijke verplichting bewaring vereist. De status van eigenaarsmeldingen en operationele logs bewaren wij 30 dagen. Kortlevende boekings-, beheer-, sessie-, vergrendelings- en OAuth-gegevens verlopen eerder volgens hun beveiligingsdoel.

U kunt via contact@zalodesignstudio.com inzage, correctie of verwijdering aanvragen. Na een geverifieerd verwijderverzoek trekken wij boekingstoegang in, voorkomen wij dat gegevens opnieuw worden aangemaakt, verwijderen wij de Stap 3-gegevens en verwijderen wij de afspraak uit de speciale agenda, tenzij een vastgelegde wettelijke bewaarplicht geldt. Kopieën van providers en beheerde back-ups verlopen volgens hun toepasselijke herstelcyclus. Zalo Design Studio, Bergschenhoek, Nederland, is de verwerkingsverantwoordelijke. AWS in eu-north-1 host de applicatiegegevens. Verwerking door providers en ondersteuning kan internationale doorgifte omvatten onder de toepasselijke waarborgen.

Who processes data on our behalf

We use a small number of service providers (processors), including Google (analytics and advertising), Meta (advertising), Amazon Web Services (hosting, storage, monitoring, and email delivery), and OpenAI (identity-free report analysis). Some of these providers are based outside the European Economic Area. Where data is transferred internationally, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses or an equivalent mechanism.

How long we keep data

Assessment-specific periods are listed in the bilingual notice above. Other analytics data is retained according to the settings of the analytics provider and is not kept longer than necessary. Email correspondence is retained for as long as needed to handle your enquiry and to meet our legal and administrative obligations, then deleted.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, email contact@zalodesignstudio.com.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Changes to this policy

We may update this policy as the site or our tools change. The date at the top reflects the latest version.

Contact

Questions about this policy or your data: contact@zalodesignstudio.com.