Privacy Policy

Framework: UK GDPR / DPA 2018
Effective Date: 1 January 2026
Last Revised: 16 February 2026
Document Reference: NZ-PRV-2026-V3

Privacy Commitment: Neon Zinsik respects your fundamental rights to personal data protection. This Privacy Policy details our procedures regarding the collection, handling, safeguarding, and disclosure of information gathered during your use of our digital platforms.

1. Data Controller Information

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Neon Zinsik ("we", "us", or "our"). We are committed to maintaining the confidentiality, integrity, and availability of all personal records entrusted to our custody.

2. Categories of Personal Data Collected

We collect and process personal data strictly in connection with your technical engagement with our services. The data collected may include:

3. Lawful Grounds for Processing

In accordance with Article 6 of the UK GDPR, we process personal data under one or more recognized legal bases:

4. How We Utilize Your Information

We process the personal information we collect for specific, legitimate business purposes, including:

5. Data Sharing and Third-Party Disclosures

Neon Zinsik does not sell, rent, or lease personal records to unaffiliated marketing brokers. Data transfers occur strictly under confidential, regulated circumstances:

6. International Data Transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area, we implement robust safeguard mechanisms. Such transfers rely on UK Adequacy Regulations or standard International Data Transfer Agreements (IDTA) approved by the UK Information Commissioner's Office (ICO), ensuring your personal data benefits from an equivalent standard of security.

7. Data Retention and Safeguarding

We retain personal information only for the duration necessary to satisfy the objectives outlined in this Privacy Policy, or to adhere to statutory accounting and regulatory compliance mandates. When records are no longer required, they are permanently expunged or anonymized using cryptographic data erasure standards.

We employ administrative, physical, and advanced technical security safeguards—such as TLS encryption in transit and AES-256 encryption at rest—to shield your information from unauthorized access, accidental alteration, disclosure, or destruction.

8. Your Statutory Data Subject Rights

Under the UK GDPR and the Data Protection Act 2018, you possess several actionable rights regarding your personal records:

To exercise any of these statutory rights, please submit an electronic request to our Data Protection Liaison at [email protected]. We endeavor to resolve verified inquiries within 30 days without fee.

9. Cookie Practices and Tracking

Our website utilizes necessary technical cookies for session integrity, operational load balancing, and secure authentication. Optional statistical telemetry cookies are deployed solely with your explicit consent, managed via your web browser preference controls.

10. Regulatory Supervision and Complaints

If you consider that our personal data practices infringe upon applicable United Kingdom data protection frameworks, you maintain the right to register a formal complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk