Skip to main content

Zomzey

USD
  • GBP
  • USD
  • EUR
  • CAD
  • AUD
  • INR
  • SGD

Privacy Policy

Last updated: 5th of July 2026

1. Introduction

This Privacy Policy explains how ITXL LTD (“we”, “us”, “our”, or “Zomzey™”) collects, uses, stores, and protects personal data when you use the Zomzey™ platform at zomzey.io (the “Platform”).

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Who we are

The data controller responsible for your personal data is:

ITXL LTD
Registered in England and Wales
Company number: 17060034
Registered office: 167–169 Great Portland Street, London W1W 5PF, United Kingdom

For privacy enquiries, please contact: privacy@zomzey.io

3. Data

Depending on how you use the Platform, we may collect the following categories of personal data:

3.1 Account information

  1. Name
  2. Email address
  3. Phone number (optional)
  4. Password (stored encrypted; we never see it in plain text)
  5. Profile photo or organisation logo (optional)
  6. User type (Pioneer, Influencers, or Hub)

3.2 Profile information

  1. Biographical or organisational description
  2. Niche tags, categories, and subject areas
  3. Audience or reach metrics
  4. Sample work links and rate guides
  5. Geographical location at country and region level

3.3 Transaction information

  1. Briefs you post or receive
  2. Offers you submit or accept
  3. Order history and payout records
  4. Reviews and ratings (yours and about you)
  5. Messages exchanged through the Platform

3.4 Payment information

Payment is processed by Stripe and Stripe Connect; we do not directly store your full card or bank details. We receive limited information from Stripe such as the last four digits of cards, payout status, and transaction references for accounting purposes.

3.5 Technical information

  • IP address
  • Device type, browser, and operating system
  • Pages viewed, features used, and time spent
  • Cookies and similar technologies (see Cookie Policy)

3.6 Communications

  1. Emails you send to us
  2. Support tickets and chat messages
  3. Survey responses and feedback

3.7 Signing in with third-party services

Signing in with third-party services. If you choose to register or sign in using a third-party service such as Google, Facebook or X, we receive limited information from that service, typically your name, email address and profile picture, which we use to create and operate your ZOMZEY account. We do not receive your password for that service, and we do not post to, read from or access anything else on your account with that service. Our lawful basis for this processing is the performance of our contract with you (providing your account). You can stop using a third-party sign-in at any time and access your account instead with your registered email address via password reset.

4. How we collect your data

We collect data:

  • Directly from you when you register, complete a profile, post a brief, submit an offer, or contact us
  • Automatically as you use the Platform (technical information, usage data, cookies)
  • From third-party services where you have authorised them (e.g. Stripe Connect, social login if enabled)
  • From publicly available business sources for ZBeacon outreach activity (see Section 12)

5. Lawful bases for processing

We process your personal data under the following lawful bases under UK GDPR:

  • Contract: to provide the Platform services you have signed up for, including matching, transactions, payouts, and communications
  • Legitimate interests: to operate, secure, and improve the Platform, prevent fraud, enforce our Terms of Service, understand how the Platform is used, develop new features, and conduct outreach to relevant businesses via ZBeacon (see Section 12)
  • Legal obligation: to comply with tax, accounting, anti-fraud, and other legal duties
  • Consent: for non-essential cookies, marketing communications, and where we have asked you specifically for permission

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. How we use your data

We use your personal data to:

  • Create and manage your account
  • Provide marketplace functions including matching, messaging, offers, payments, and reviews
  • Operate the Zomzey™ AI matching engine which analyses Pioneer briefs against Influencer and Hub profiles to suggest relevant matches (see Section 11)
  • Operate ZBeacon, our off-platform outreach feature, which contacts publicly-listed UK businesses where on-platform supply is thin (see Section 12)
  • Process payments and payouts via Stripe and Stripe Connect
  • Send service emails (account confirmations, transaction notifications, payout confirmations, security alerts)
  • Send marketing emails where you have opted in (you may opt out at any time)
  • Provide customer support
  • Improve the Platform, fix bugs, and develop new features
  • Detect and prevent fraud, abuse, and breaches of our Terms of Service
  • Comply with legal obligations

7. Who we share your data with

We share data only where necessary and with appropriate safeguards:

  • Other Platform users: limited profile information visible on your public profile, and information necessary to fulfil transactions you participate in (such as messages, offers, and reviews)
  • Stripe and Stripe Connect: payment processing, payout delivery, and identity verification (Stripe acts as an independent data controller for payment data)
  • Anthropic (Claude API) and OpenAI (GPT API): for the Zomzey™ AI matching engine, ZBeacon email composition, and related Platform AI features. Data sent to these providers is processed under their commercial terms and is not used to train their models
  • Companies House: for verification of recipient eligibility under PECR for ZBeacon outreach (see Section 12)
  • Hosting and infrastructure providers: to operate the Platform
  • Analytics providers (such as Google Analytics 4): to help us understand how the Platform is used (anonymised or pseudonymised where possible)
  • Email service providers: to deliver transactional, marketing, and ZBeacon outreach emails
  • Customer support tools: to handle support enquiries
  • Professional advisors: lawyers, accountants, and auditors bound by confidentiality
  • Law enforcement and regulators: where legally required

We do not sell your personal data to third parties.

8. International transfers

Some of the third parties listed above are based outside the United Kingdom (for example Stripe, Anthropic, and OpenAI in the United States). When we transfer personal data outside the UK, we use appropriate safeguards including the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or transfers to countries with UK adequacy decisions.

9. How long we keep your data

We keep your personal data only as long as necessary:

  • Account data: while your account is active, plus up to 6 years after closure for tax, accounting, and legal record-keeping
  • Transaction data: 6 years after the transaction (UK statutory minimum for financial records)
  • Marketing communications data: until you unsubscribe, plus up to 12 months for suppression list purposes
  • ZBeacon outreach data: 24 months from last contact. Suppression of opted-out addresses is permanent and applies across all future ZBeacon activity
  • Support communications: up to 3 years
  • Technical and analytics data: typically up to 26 months in aggregated form

When data is no longer needed, we delete it or anonymise it.

10. Your rights

You have the following rights under UK GDPR:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: ask us to correct inaccurate or incomplete data
  • Right to erasure: ask us to delete your personal data (subject to legal exceptions)
  • Right to restrict processing: ask us to limit how we use your data
  • Right to data portability: ask for your data in a machine-readable format
  • Right to object: object to processing carried out under legitimate interests, or to direct marketing (including ZBeacon outreach)
  • Right to withdraw consent: where processing is based on consent
  • Right not to be subject to fully automated decisions having legal or similarly significant effects (see Section 11)

To exercise any of these rights, contact privacy@zomzey.io. We respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.

11. Automated decision-making and AI

The Zomzey™ AI matching engine uses your profile data and brief data to suggest matches between Pioneers and Influencers or Hubs. This is automated processing.

These suggestions are advisory; they do not produce legal or similarly significant effects on you, and a human (you) makes the final decision on which matches to engage with. You can choose to ignore the AI suggestions and browse matches manually at any time.

If you have concerns about how the Zomzey™ matching engine uses your data or how it has scored a match, contact privacy@zomzey.io.

12. ZBeacon Outreach Activity

Zomzey™ operates a feature called ZBeacon that occasionally contacts businesses outside the Zomzey platform when a paying Pioneer’s posted opportunity has not received offers from on-platform Influencers or Hubs within a defined window. ZBeacon is designed to surface relevant opportunities to relevant businesses whose audiences match the opportunity’s subject matter.

Who we contact

ZBeacon contacts publicly-listed business contact addresses at UK limited companies, Limited Liability Partnerships, and Scottish partnerships only. We do not contact individuals or sole traders through ZBeacon.

What information we use

We process publicly available business contact information — typically the business email address and, where applicable, the name of an identifiable contact at that business. We obtain this information from public sources (such as the business’s own website, Companies House, professional directories, or comparable public-facing channels).

Why we contact you (lawful basis)

Where the contact address identifies a named individual, our lawful basis under UK GDPR Article 6(1)(f) is legitimate interests, supported by a documented Legitimate Interests Assessment that balances our interests against your rights and reasonable expectations. Where the address is a generic organisation address, we rely on PECR Regulation 22 which permits direct marketing by electronic mail to corporate subscribers.

How to opt out

Every ZBeacon email includes a one-click unsubscribe link. Clicking it permanently adds the address to our suppression list, and we will not contact you again. You may also email us directly at privacy@zomzey.io to request suppression.

Your rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to complain to the Information Commissioner’s Office (ico.org.uk). To exercise any of these rights, contact us at the address in our Contact section.

13. Social Account Connection and Validation

Zomzey™ offers Influencers and Hubs the option to connect their social media accounts (including Instagram, Facebook, TikTok, and YouTube) to validate the audience and engagement figures shown on their profile and to earn a Zomzey™ verified badge.

How the connection works

You connect an account by authorising Zomzey™ through that platform’s own secure login (OAuth). You never share your password with us. The platform issues Zomzey™ a secure access token that permits read-only access to the specific data described below. Connecting an account is entirely optional; until you connect, your figures are shown as self-declared.

What data we access

With your authorisation, we read from the connected platform only the data needed to validate your profile, which may include: your account name and handle, follower or subscriber count, reach and impressions, audience demographics, and engagement metrics (such as likes, comments, and views) on your own content. We access this data on a read-only basis. We do not post, message, or take any action on your account, and we do not access your private messages.

How we use it

We use this data solely to verify the accuracy of the figures on your Zomzey™ profile, to award and maintain your verified badge, and to rank validated profiles. We do not sell this data, do not use it for advertising, and do not share it with other Platform users beyond the resulting validated figures and badge shown on your public profile.

How long we keep it and how to disconnect

You can disconnect a social account at any time from your profile settings or by contacting privacy@zomzey.io. When you disconnect, we stop accessing the platform and delete the data obtained through that connection within 30 days, except where we must retain limited records to meet legal obligations. Our use of data from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

14. Security

We use industry-standard security measures to protect your personal data, including encrypted transmission (HTTPS), encrypted storage of sensitive fields, restricted access controls, and regular security review. No system can be guaranteed perfectly secure; if a personal data breach occurs, we will notify the ICO within 72 hours where required and notify affected users where the breach is likely to result in high risk to their rights and freedoms.

Bot protection. We use Cloudflare Turnstile to protect our forms from automated abuse. Turnstile may process limited technical data (such as your IP address and browser characteristics) to distinguish humans from bots. This processing is governed by Cloudflare’s Turnstile Privacy Addendum and Cloudflare’s privacy policy.

15. Children

The Platform is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a child, contact privacy@zomzey.io and we will delete it.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects when material changes were made. Significant changes will be notified by email or through Platform notification.

17. Cookies

The Platform uses cookies and similar technologies. For full details, see our Cookie Policy.

18. Contact

For privacy questions, requests, or complaints, contact:

ITXL LTD
Email: privacy@zomzey.io
Postal: 167–169 Great Portland Street, London W1W 5PF, United Kingdom

ICO complaints: ico.org.uk

Sign In

Don't have an account yet? Register

Forgot password?

Register

Reset Password

Please enter your username or email address, you will receive a link to create a new password via email.