Who we are. The controller for the personal data described in this policy is Marc Romans Roca, self-employed, trading as Zipfixy, Antoni Kyriakou 7, Ypsonas, 4187 Limassol, Cyprus. Contact: hello@zipfixy.com.
Visitors of this website
| What | Detail |
|---|---|
| Data we collect | What you send through the contact or demo-request form (name, business, type of business, email, phone, preferred language, message), and the technical logs our hosting provider keeps (IP address, browser, pages requested). We use no visitor analytics and no advertising. |
| Why and legal basis | To answer your request and, if you ask for it, prepare a proposal (steps prior to a contract); to run and secure the website (legitimate interest). |
| Who receives it | Our website hosting provider (Hostinger, EU), which also delivers the form to our mailbox; Google Fonts (Google Ireland), which receives your IP address when the page loads its fonts. |
| How long we keep it | Form messages for 12 months if they do not lead to a contract; hosting logs for the period set by the hosting provider. |
Zipfixy accounts (businesses and their staff)
| What | Detail |
|---|---|
| Data we collect | Name, email, phone, business name and address, country, language and role; sign-in records; how you found us (for example a search engine or a flyer); plan, billing details and invoices; support messages; how the panel is used. |
| Why and legal basis | Providing the Service and the free trial (performance of a contract); billing and tax records (legal obligation); security, abuse prevention, reviewing new sign-ups, service emails during the trial, plan recommendations and product improvement (legitimate interest); news and offers about Zipfixy (consent, which you can withdraw at any time with the link in each email). |
| Who receives it | The service providers listed in the Data Processing Agreement, our subscription payment provider (Stripe), Google if you choose to sign in with your Google account, our accountant, and public authorities when the law requires it. We never sell your data. |
| International transfers | Our database and application run in the EEA. Where a provider stores data outside the EEA (our email provider, in the United States) or may access it from outside the EEA, we rely on an adequacy decision (including the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses. |
| How long we keep it | While your account is active. After closure, 90 days so you can export your data, then deletion. Invoices and billing records for 7 years, as required for tax purposes in Cyprus. |
If you booked with a business that uses Zipfixy
That business decides how your data is used and is responsible for it; Zipfixy only processes it on the business's behalf, under the Data Processing Agreement. To exercise your rights, contact the business directly. If you write to us, we will forward your request to the business and help it answer. Every booking page shows a short notice with who the business is, why your data is used (managing your booking and, unless you refuse them there or in any email, the business's own offers), how long it is kept and how to contact the business.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability and to withdraw consent at any time, by writing to hello@zipfixy.com. We answer within one month. You may also complain to the Office of the Commissioner for Personal Data Protection, Cyprus (www.dataprotection.gov.cy).
Changes
We may update this policy. The date of the current version is shown on this page; account holders are told by email about material changes.
Version 1.0, in force since 2026-09-26. Questions: hello@zipfixy.com. See also: Terms of service · Cookie policy.