Privacy Policy

1. Who we are and how to contact us

The data controller is ZUS Software (hereinafter 'we', 'us' or 'ZUS Software'), with its registered office in Com. Gramești, Suceava County, Romania.

If you have any questions about this policy or the processing of your data, you can contact us:

• Email: contact@zussoftware.ro
• Alternative email: zus.software@gmail.com
• Phone: +40 749 969 334
• Address: Com. Gramești, Suceava County, Romania

2. What personal data we collect

We collect personal data in the following situations:

2.1 The contact form

When you complete the contact form on the site, we collect:

Field	Required	Purpose
Full name	Yes	Identification and personalised communication
Email address	Yes	Responding to your request
Phone number	No	Optional telephone contact
Subject	Yes	Classifying the request
Message	Yes	The content of the request
IP address	Automatic	Proof of consent (Art. 7 UK GDPR) and security against abuse. Stored for a maximum of 2 years.
Date and time of consent	Automatic	Recording the moment you ticked the UK GDPR consent box (Art. 7 UK GDPR)

2.2 Technical data collected automatically

When you access our site, our servers automatically collect certain standard technical information, including:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Referring page (source URL)
• Date and time of access
• Pages visited on the site

This data is collected solely for technical purposes (security monitoring, error diagnosis) and is not used for profiling.

2.3 Cookies

We use cookies as described in our Cookie Policy. By using the site, you accept the use of the essential cookies required for it to function.

3. How we use your data

We use the personal data collected for the following purposes:

• Responding to requests: Processing and responding to messages sent through the contact form
• Business communication: Discussing potential projects and collaborations, if you have requested this
• Security: Preventing unauthorised access and fraudulent activity
• Legal obligations: Complying with applicable legal requirements
• Improving our services: Analysing how the site is used (aggregated, anonymised data)

We do not use your data for automated decision-making or profiling with legal effects.

4. Legal basis for processing

We process your personal data on the following legal grounds set out in the UK GDPR and the Data Protection Act 2018:

Processing activity	Legal basis (UK GDPR Art.)
Processing the contact form	Art. 6(1)(b) – Performance of a contract / pre-contractual measures
Site security and operation	Art. 6(1)(f) – Legitimate interests (security)
Essential cookies	Art. 6(1)(f) – Legitimate interests (functionality)
Non-essential cookies	Art. 6(1)(a) – Consent
Complying with legal obligations	Art. 6(1)(c) – Legal obligation

5. Data retention period

We store your personal data only for as long as necessary for the purpose for which it was collected, in accordance with the storage minimisation principle:

• Contact messages: A maximum of 2 years from the date of sending, or until the request is resolved, whichever comes first
• Technical data (server logs): A maximum of 90 days
• Cookies: As specified in our Cookie Policy

Once the retention period expires, the data is securely deleted or anonymised.

6. Recipients and international transfers

We do not sell, rent or disclose your personal data to third parties for marketing purposes.

We may share your data with:

• Technical service providers: Hosting/server services for operating the site (data processors acting on our instructions and contractually obliged to protect the data)
• Public authorities: Where we are legally obliged to provide the data (e.g. judicial requests)

6.1 Third-party services used on the site

The site does not use third-party services that process personal data. All resources are hosted locally on our servers.

Front-end libraries: Font Awesome (icons) and AOS (animations) are hosted locally on our servers. No data transfers are made to external CDNs for these resources.

Web fonts: The site uses the Inter and JetBrains Mono fonts hosted locally on our servers. No data transfer is made to Google or other external services to load fonts.

Data transfers outside the UK and the European Economic Area (EEA) are protected by appropriate safeguards (Standard Contractual Clauses or adequacy regulations).

7. Your rights under the UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access (Art. 15): You can request a copy of the personal data we process about you
• Right to rectification (Art. 16): You can request the correction of inaccurate data or the completion of incomplete data
• Right to erasure (Art. 17): You can request the deletion of your data in certain circumstances
• Right to restriction of processing (Art. 18): You can request that the use of your data be limited
• Right to data portability (Art. 20): You can receive your data in a structured, commonly used and machine-readable format
• Right to object (Art. 21): You can object to the processing of your data based on legitimate interests
• Right to withdraw consent: You can withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand
• Right to lodge a complaint: You can lodge a complaint with the supervisory authority

8. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure, including:

• Encrypted data transmission via the HTTPS (TLS) protocol
• Restricted access to personal data through secure authentication
• Regular software updates and security patches
• Internal procedures for managing security incidents

In the event of a security incident affecting your data, we will notify the competent authority and, where necessary, you personally, in accordance with the requirements of the UK GDPR.

9. Cookies

Our site uses cookies. For detailed information about the types of cookies used, their duration and how you can manage them, please see our Cookie Policy.

10. Processing of minors' data

Our site is not intended for persons under the age of 16. We do not knowingly collect personal data from minors. If we become aware that we have collected such data without verifiable parental consent, we will delete it immediately.

If you are the parent or guardian of a minor whose data has been collected, you can contact us at contact@zussoftware.ro.

11. Changes to this policy

We reserve the right to update this Privacy Policy periodically, to reflect legislative changes or changes in our data processing practices.

The updated version will be published on this page with the new effective date. We recommend that you check this page periodically. Significant changes will be communicated through visible notices on the site.

Last updated: 26 July 2026

12. Contact

For any question, request or concern regarding the processing of your personal data or the content of this policy, you can contact us:

• Email: contact@zussoftware.ro
• Phone: +40 749 969 334
• Address: Com. Gramești, Suceava County, Romania

We are committed to responding to your requests as soon as possible and in accordance with legal requirements.