PRIVACY POLICY

Effective Date: February 10, 2026

Organisation: Zeno Edge Ltd

Company Number: 17000788

________________________________________

1. Introduction

Zeno Edge Ltd ("we," "us," or "our") is a UK-based IT service agency and software developer. We provide Managed IT Services, Cybersecurity Compliance, Corporate Due Diligence, and operate the Nexidoo CRM platform (nexidoo.co.uk).

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and look after your personal data when you visit our website, use our Nexidoo platform, engage with our automation tools on social media, or engage our services. It also tells you about your privacy rights and how the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 protect you.

Important Note on Recruitment: This policy covers the data processing activities of Zeno Edge Ltd. Recruitment activities managed through our partner channels (such as Fortisan Recruitment Solutions) are subject to their own separate privacy policies.

2. Controller and Contact Details

Zeno Edge Ltd is the Data Controller responsible for your personal data.

Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us using the details below:

● Full Name of Legal Entity: Zeno Edge Ltd

● Registered Office: Office 1, Izabella House, 22 Regent Place, City Centre, Birmingham, B1 3NJ, United Kingdom

● Telephone: +44 0121 751 57 85

● Email: [email protected]

● Website: https://zeno-edge.co.uk

3. The Data We Collect About You

We collect different types of personal data depending on your relationship with us:

· Identity Data: First name, last name, username, social media profile ID (e.g., Facebook PSID, TikTok OpenID, Discord User ID).

· Contact Data: Billing address, business email address, and telephone numbers.

· Technical Data: Internet Protocol (IP) address, login data, browser type and version, time zone setting, and operating system used to access zeno-edge.co.uk or the Nexidoo platform.

· Transaction Data: Details about payments to and from you and other details of services you have purchased from us.

· Usage Data: Information about how you use our website, Nexidoo CRM, and social media chatbots.

· Investigation Data: In the course of providing Corporate Due Diligence and Fraud Investigation services, we may process data relating to professional conduct, directorships, or other publicly available information required to verify legitimate business interests.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Purpose/Activity Lawful Basis for Processing

To register you as a new client Performance of a Contract

To provide IT Services or Nexidoo Platform access Performance of a Contract

To facilitate Social Media Automation (Chatbots/Messaging) Legitimate Interests (providing efficient customer support) or Consent

To manage our relationship with you (billing, support) Performance of a Contract; Legal Obligation

To administer and protect our business (troubleshooting, system maintenance) Legitimate Interests (network security)

To conduct Corporate Due Diligence & Fraud Investigations Legitimate Interests (prevention of fraud); Substantial Public Interest

To use data analytics to improve our website and services Legitimate Interests

5. Privacy and Electronic Communications (PECR) Compliance

In addition to the GDPR, we comply with the Privacy and Electronic Communications Regulations (PECR).

A. Cookies and Tracking Technologies

Our website and the Nexidoo platform use cookies to distinguish you from other users.

● Strictly Necessary Cookies: Required for the operation of the Nexidoo platform.

● Analytical/Performance Cookies: Set only with your Consent.

B. Direct Marketing (Email and Phone)

● Corporate Clients: We may send marketing emails to corporate email addresses based on Legitimate Interests.

● Sole Traders & Individuals: We will only send marketing communications if we have obtained your express Consent (opt-in).

● Opt-Out: You can ask us to stop sending you marketing messages at any time by following the "unsubscribe" links.

6. Social Media and Platform Automation (Meta, TikTok, X, YouTube & LinkedIn)

We use third-party automation tools to facilitate content publishing, analytics, and customer engagement across various platforms. This section details how we handle data from these specific ecosystems.

A. Meta (Facebook & Instagram)

· Meta Business Tools: We use the Facebook Pixel, Conversions API, and Lead Ads. Data (such as IP address and browser type) is shared with Meta Platforms, Inc. to measure ad performance.

· Automation: If you interact with our chatbots on Messenger or Instagram, we collect your public profile name and platform-specific user ID (PSID) to deliver automated responses. We do not access unrelated private messages.

· Data Deletion: You can revoke our access via your Facebook Settings > Apps and Websites.

B. TikTok for Business

· Device Data: We use TikTok's "Device Data Collection Tools" (DDCTs), including the Pixel and API, which may share hashed contact details or device identifiers for ad targeting.

· Lead Generation: If you submit a form via a TikTok Lead Ad, the data you provide (Name, Email, Phone) is transferred to Zeno Edge Ltd solely to contact you regarding your enquiry.

C. Google & YouTube API Services

Our application accesses Google API Services (including YouTube) to enable video scheduling and analytics.

· Data Access: We access your YouTube channel's public metadata (video titles, views, comments) and upload content on your behalf.

· Limited Use Disclosure: Zeno Edge Ltd's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

· No Third-Party AI Training: We do not transfer your Google user data to third-party AI models for training purposes outside of the specific features requested by you.

D. Messaging Platforms (Slack, Discord, Telegram, WhatsApp)

When you connect a messaging platform to our system:

· Scope of Access: We only process messages and metadata (timestamps, sender IDs) required to execute specific automation rules (e.g., "Auto-reply to keyword").

· Privacy of DMs: We do not store or human-review your private Direct Messages (DMs) unless they trigger a specific security or support automation you have configured.

· Retention: Chat logs processed for automation are retained for 30 days for troubleshooting and then automatically deleted.

7. Data Hosting and International Transfers

We are committed to UK Data Sovereignty.

All data processed by Zeno Edge Ltd, including data stored within our Nexidoo platform, is hosted exclusively on servers located within the United Kingdom.

Platform Exception: When you interact with us via Meta or TikTok, your data is processed by those platforms in accordance with their own global privacy policies, which may involve transfer to the USA. We ensure our use of these platforms complies with UK GDPR through the use of International Data Transfer Agreements (IDTAs) where we have control.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

● Nexidoo Security: Rigorous coding standards, encryption, and access controls.

● Access Control: Access is limited to employees and contractors with a business need to know.

9. Data Retention and Deletion

We will only retain your personal data for as long as reasonably necessary.

● Client Data: Retained for the duration of the commercial relationship plus 6 years.

● Social Media Interaction Data: Retained for 12 months from the last interaction, unless a commercial relationship is established.

10. Your Legal Rights (and Data Deletion Instructions)

Under the UK GDPR, you have rights in relation to your personal data.

How to Request Data Deletion (Meta/TikTok/Google/General)

To exercise your right to erasure ("Right to be Forgotten") or to request the deletion of data collected via our social media integrations:

1. Email Us: Send a request to our Birmingham office (details in Section 2) with the subject line "Data Deletion Request".

2. Platform Settings: You may also revoke our app's access directly via your social media settings:

o Facebook: Settings & Privacy > Settings > Apps and Websites > Remove [Zeno Edge App].

o TikTok: Settings and Privacy > Security > Manage App Permissions.

o Google/YouTube: Google Security Checkup.

We will process all valid deletion requests within 30 days.