Privacy Policy

Last updated: 12 September 2026

This policy explains how Zolvra Solutions Ltd ("Zolvra", "we", "us") collects and uses personal data when you visit zolvra.co.uk or contact us about our services. We are the data controller for that data and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Scope

This policy covers this website and enquiries made to us by email. Software products we build and operate, such as Letfolio, have their own privacy policies published within those products (for example letfolio.app/privacy). Where we build software for a client, the client is the data controller for their users' data and their privacy policy applies; we act as a processor under a written contract.

2. What we collect and why

• Enquiries. When you email us we receive your name, email address, and anything you include in your message. We use this to reply, to prepare a proposal, and to keep a record of our correspondence. Lawful basis: our legitimate interest in responding to enquiries and, where a contract follows, the performance of that contract.
• Client records. If you become a client we hold contact details, contract documents, invoices and project correspondence. Lawful basis: performance of the contract and our legal obligations (for example, accounting records).
• Technical data. Our hosting provider records standard server logs (IP address, browser type, pages requested, timestamps) needed to serve the site securely and detect abuse. Lawful basis: legitimate interest in running a secure website. We do not combine these logs with any other data about you.

3. Cookies and tracking

This website does not set cookies and does not use analytics, advertising or social-media tracking. Fonts are loaded from Google Fonts, which means Google receives your IP address when the font files are requested; no cookies are set by that request.

4. Who we share data with

We do not sell personal data. We share it only with service providers who help us run the business, under contracts that require them to protect it:

• Vercel Inc. hosts this website.
• Microsoft 365 provides our email and document storage.
• Our accountants and, where required, HMRC or other authorities.

Some providers process data outside the UK. Where they do, transfers are protected by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

5. How long we keep data

• Enquiries that do not lead to work: up to 12 months, then deleted.
• Client contracts, invoices and related correspondence: 6 years after the end of the engagement, as required for tax and legal purposes.
• Server logs: retained by our hosting provider for a short rolling period, typically no more than 30 days.

6. Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability. To exercise any of these rights, email info@zolvra.co.uk. We will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

7. Security

This site is served over HTTPS only. Email and documents are held in Microsoft 365 with multi-factor authentication. Access to client data is limited to the people working on that engagement.

8. Children

Our services are for businesses. We do not knowingly collect data from anyone under 18.

9. Changes

We will post any changes to this policy on this page and update the date at the top. Material changes affecting existing clients will be notified by email.