Privacy Policy

Last updated: April 2026

Zyvra Studio Ltd ("Zyvra", "we", "us") is committed to protecting your personal data. This policy explains what we collect, why we collect it, and your rights under UK GDPR.

1. Who we are

Zyvra Studio Ltd is a company registered in England and Wales, company number 17180795. You can contact us at hello@zyvra.studio.

Zyvra Studio Ltd is the data controller for personal data submitted through this website. We have not appointed a Data Protection Officer as we are not required to do so under UK GDPR Article 37. The controller's day-to-day data protection contact is the founder, reachable at hello@zyvra.studio.

2. What data we collect

When you use the contact form on this website we collect:

• Your name
• Your company name
• Your email address
• The content of your enquiry
• Your selected starting budget

We do not collect payment information, sensitive personal data, or data about children.

3. How we use your data

We use the information you submit solely to respond to your enquiry and to communicate with you about potential or ongoing projects. We do not use it for marketing without your explicit consent.

4. Legal basis

We process your data on the basis of legitimate interests, specifically, responding to a business enquiry you have initiated, under UK GDPR Article 6(1)(f).

5. How long we keep your data

We retain enquiry data for up to 24 months. If no engagement results from an enquiry, data is deleted after this period. You can request deletion at any time.

6. Who we share data with

We do not sell or share your personal data with third parties for their own purposes. We use the following service providers (data processors) who handle data on our behalf:

• Cloudflare, Inc. (USA, with UK presence via Cloudflare London Ltd), content delivery, DNS, and edge security for zyvra.studio
• Railway Corp. (USA), application hosting for the contact-form endpoint
• Google Ireland Limited (Ireland, part of Google LLC, USA), Workspace email hosting, used to send the contact-form notification and to receive your enquiry

Each processor is bound by a written data-processing agreement and is required to handle personal data in accordance with UK GDPR.

7. International transfers

Cloudflare and Railway are established in the United States. Where personal data is transferred to the USA, the transfer is made under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (the "UK IDTA") together with the EU Standard Contractual Clauses (Module 2, controller-to-processor), as published by the Information Commissioner's Office. Google Workspace data is processed by Google Ireland Limited within the European Economic Area, with onward transfers to Google LLC in the United States made under the EU to US Data Privacy Framework and the UK Extension to it.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, email us at hello@zyvra.studio.

9. Cookies

This website uses minimal cookies. See our Cookie Policy for details.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent update.