ZenithPrivacy policy
Data controller: Impulso Digital AM LLC (Zenith Webs brand · EIN 35-2884388) · Contact: info@zenith-webs.com · Version 1.0. We only process the data you give us in the form, to respond to your request, with your consent, and we never sell it.
1. Who is the controller of your data?
The data controller is Impulso Digital AM LLC (Zenith Webs brand · EIN 35-2884388), with registered address at 30 N Gould St, Ste R, Sheridan, WY 82801 (United States). For any question about your data or to exercise your rights, write to us at info@zenith-webs.com.
2. What data do we collect, and why?
We only collect the data you provide in the contact form, for the purpose of handling and responding to your request:
- First name and last name.
- Email address.
- Phone number / WhatsApp.
- Instagram handle (if you provide it).
- Minimal technical data from the submission: your IP address, the date and time of consent and the version of this policy, as proof of consent.
There is also one specific case in which part of this data is shared with a third party: if you accept the marketing cookie (see the cookie policy) and also submit the contact form, we also share this data with Meta —hashed via SHA-256 in the case of your first name, last name, email and phone number— together with your IP address and your device's user-agent (browser type), for the purpose of measuring the effectiveness of our advertising (Meta Conversions API). If you decline the cookie or do not respond to the banner, none of this is shared, even if you submit the form.
We also receive data through a different channel than this website's form: if you contact us via a Meta Instant Form (Facebook/Instagram) on an ad, Meta passes on to us the data you filled in there —name, email address and phone number— together with your answer to the question we use to see whether we're a good fit for you. That form is run entirely by Meta, outside this website, and shows you its own privacy/consent notice before you submit it. We use that data to enrol you in the same informational email sequence as someone who writes to us via the contact form.
3. What is the legal basis?
The legal basis is your explicit consent, which you give by ticking the acceptance box before submitting the form (art. 6.1.a of the GDPR, Regulation (EU) 2016/679). You can withdraw it at any time, without this affecting the lawfulness of processing carried out beforehand.
For the additional purpose of sharing data with Meta and measuring the effectiveness of our advertising (see section 2), the legal basis is likewise your explicit consent (art. 6.1.a GDPR), given when you accept the marketing cookie — distinct from the consent given via the form.
For leads that reach us through a Meta Instant Form (see section 2), the legal basis is likewise your explicit consent (art. 6.1.a GDPR) — but given on Meta's own form, before we receive any data, not on this website.
If you start filling in the contact form but don't finish it, we save what you've already written (and how far you got) so we can still get in touch about your enquiry, even if you never submit it. The legal basis here is our legitimate interest (art. 6.1.f GDPR) in being able to handle a request you had already started making to us — never used for advertising purposes.
4. Who else processes your data? (processors)
We rely on providers that act as data processors (art. 28 GDPR). We do not sell or share your data for commercial purposes.
| Processor | Purpose | More info |
|---|---|---|
| Cloudflare, Inc. | Website hosting, the form's database, CDN and anti-abuse protection. | Cloudflare privacy |
| Resend (Plus Five Five, Inc.) | Sending the confirmation email for your request. | Resend privacy |
| Meta Platforms Ireland Ltd. | Measuring the effectiveness of our advertising (Meta Conversions API), only if you accept the marketing cookie and submit the contact form; and the source of leads that reach us through Instant Form ads (Meta runs that form and its own consent notice before passing the data to us). | Meta's privacy policy |
| Vercel Inc. | Hosting of our internal lead management and follow-up platform, which receives the data you submit in the contact form. | Vercel privacy |
| YCloud International Pte. Ltd. | Sending follow-up WhatsApp messages when you leave your phone number in the form. | YCloud privacy |
| Zenith Ecosistema | Tracking progress through the form (which step you reach) and saving incomplete forms, so we can handle your enquiry even if you don't submit it. | — |
These providers, or their affiliates/subprocessors, may process data on servers outside the European Economic Area (e.g. in the US); in that case, the transfers are covered by GDPR safeguards (e.g. Standard Contractual Clauses).
5. How long do we keep your data?
For as long as necessary to handle your request and, at most, 24 months, after which it is deleted automatically — unless a legal obligation requires us to keep it longer.
Data shared with Meta is retained according to Meta's own retention policy (see the link in the previous section); we stop sharing new data as soon as you decline or withdraw your consent.
6. What rights do you have?
You can exercise at any time your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to us at info@zenith-webs.com. If you believe we are not processing your data in line with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).
7. Security
We apply reasonable technical and organisational measures: encryption in transit (HTTPS), validation and limitation of the form data, anti-abuse protection and database isolation.
This policy may be updated; the version in force is the one published on this page. See also legal notice and cookies.