Privacy Policy

Last Updated: March 30, 2025

1. Introduction

Zarro Technology (operated by AJRB Services Limited) (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Company Information

– Registered in England and Wales
– Company Number: 12297765
– ICO Registration Number: ZB686192
– D-U-N-S Number: 225477762
– Registered Office: Unit 29 Highcroft Industrial Estate, Enterprise Road, Waterlooville, United Kingdom, PO8 0BT

3. Information We Collect

a) Information You Provide:

– Contact information (name, email address, phone number)
– Postal address for billing and service delivery
– Billing information
– Account credentials (including usernames)
– Service preferences
– Communication records
– Installation location details (where required for service provision)
– Hosting account data and files
– Custom ISOs (for VPS services)
– Service configuration details
– Broadband service details

b) Automatically Collected Information:

– Usage data
– IP addresses
– Browser type
– Device information
– Server logs
– Analytics data through Google Analytics
– Cookie data
– Service uptime statistics
– Performance metrics

c) Service Usage and Communications:

– Call recordings for training and quality monitoring purposes
– Service usage metrics and patterns
– System logs and analytics for abuse prevention
– Performance monitoring data
– Security event logs
– Status and availability metrics
– Service deployment information

4. How We Use Your Information

We use collected information to:
– Provide and maintain our services
– Process payments and billing
– Facilitate service installations and site visits
– Deliver broadband and telecommunications services
– Monitor service performance
– Prevent service abuse
– Process broadband orders and availability checks
– Manage hosting services
– Provide technical support
– Ensure platform security
– Maintain service availability
– Communicate service updates
– Comply with legal obligations

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your data:
– All data transmission is secured using TLS encryption
– Backups are encrypted and stored in separate datacenters
– Mandatory two-factor authentication for staff access
– Web application firewalls
– Regular backups (every 4 hours for hosting services)
– Secure data centers within the UK and European regions
– Implementation of industry-standard security protocols
– Autonomous monitoring and status alerting systems
– Real-time service status monitoring

5a) Data Retention and Account Management

– Inactive accounts are automatically purged after 24 months
– Web hosting backups: 31 days retention with daily backups
– VPS backups: Optional 3-day rotation with 3 stored snapshots
– Backups are provided on a best-effort basis with no guarantee of completeness
– Self-service restoration available via JetBackup for web hosting

5b) Fraud Prevention and Transaction Security

We share necessary data with fraud prevention services to:
– Validate transactions
– Prevent fraudulent activities
– Ensure legal compliance
All data shared for fraud prevention purposes is transmitted securely using TLS encryption.

6. Data Sharing and Third Parties

We may share limited data with trusted partners for:
– Payment processing
– Essential service delivery and infrastructure maintenance
– Fraud prevention services
– Legal compliance
– Value-Added Services, such as Gravatar Profile Icons

In most cases, we do not share personally identifiable information (PII) with our service delivery partners unless strictly necessary for service provision. Any sharing of personal data is conducted in accordance with GDPR requirements and our data protection policies.

7. Your Rights

Under GDPR, you have the right to:
– Access your personal data
– Correct inaccurate data
– Request data deletion
– Object to processing
– Data portability
– Withdraw consent

8. Cookie Policy

We use cookies and similar technologies to:
– Maintain session information
– Improve user experience
– Analyse service usage
– Remember preferences
– Facilitate Google Analytics tracking
– Ensure platform security

Our website uses Google Analytics to understand user behavior and improve our services. You can opt-out of Google Analytics tracking through your browser settings or Google’s opt-out tools.

9. Age Restriction

Our services are strictly not available to individuals under the age of 18. By using our services, you confirm that you are at least 18 years old. We do not knowingly collect or process data from anyone under 18 years of age. If we become aware that we have inadvertently collected personal information from an individual under 18, we will take steps to delete such information from our records.

10. Changes to This Policy

We may update this policy periodically. Changes will be posted on this page with an updated revision date.

11. Contact Us

For privacy-related inquiries and data protection matters:
Email: data.protection@zarro.co.uk

For general support inquiries:
Email: support@zarro.co.uk
Address: Unit 29 Highcroft Industrial Estate, Enterprise Road, Waterlooville, United Kingdom, PO8 0BT

12. Legal Basis for Processing

We process personal data based on:
– Contractual necessity
– Legal obligations
– Legitimate interests
– Consent

13. Data Retention

We retain personal data only for as long as necessary to:
– Provide requested services
– Comply with legal obligations
– Resolve disputes
– Enforce agreements

14. International Data Transfers

Data may be transferred between our UK and European data centers, with appropriate safeguards in place.

15. Security Measures

We maintain comprehensive security measures including:
– Mandatory two-factor authentication for staff access
– Web application firewalls
– Encrypted data transmission using TLS
– Encrypted backup storage
– Regular security audits
– Automated threat detection
– Real-time monitoring systems
– Secure access controls
– Regular staff security training

16. Service-Specific Information

Our services include:
– Website Hosting
– Student Web Hosting
– Reseller Hosting
– Virtual Private Servers (VPS)
– Business and Residential Broadband
– Telephony Services
– IT Support Services

Each service may collect and process different types of data as necessary for service provision. Detailed service-specific privacy information is available upon request.