Welcome to ZOFAX Marketplace ("we," "our," or "us"). Your privacy is our priority. This Privacy Policy details how we collect, use, share, and safeguard your personal data when you visit https://www.zofax.co.uk or use our services. It applies to all users, including those in the European Economic Area (EEA), the United Kingdom, and worldwide.
1. Who We Are
ZOFAX is a marketplace platform that facilitates the sale of both physical and digital products. As the data controller, we are responsible for handling your personal information in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR).
2. Information We Collect
Account Information: Name and email address.
Communication: Support messages, survey responses, newsletter opt-ins.
Technical Data: IP address, browser type, device type, pages visited.
Usage Data: Clicks, page views, access times, and referring URLs.
Cookies: We use cookies and similar technologies (see section 7).
3. Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data according to the following legal grounds:
Consent: For marketing emails and optional cookies.
Contractual necessity: To provide services (e.g., account creation, payment processing).
Legal obligation: To comply with tax, anti-fraud, and other regulatory laws.
Legitimate interest: To improve our services, prevent abuse, and secure our platform.
4. How We Use Your Information
Provide and operate the ZOFAX Marketplace.
Facilitate payments and payouts via major payment processors.
Monitor usage and improve our platform.
Send important updates and marketing communications (with your consent).
Enforce our Terms of Service and prevent fraudulent activity.
5. Who We Share Your Data With
We may share your personal data with:
Payment processors
Service providers (hosting, analytics, support)
Legal authorities: Where required by law or in legal proceedings.
Buyers/Sellers: To fulfil transactions and communication between parties.
We do not sell your personal data.
6. Your Data Protection Rights
If you are in the EEA or UK, you have the following rights under GDPR:
Right to access – Request a copy of your personal data.
Right to rectification – Request corrections to inaccurate or incomplete data.
Right to erasure – Request deletion of your data ("right to be forgotten").
Right to restrict processing – Limit how we use your data.
Right to object – Object to certain uses of your data.
Right to data portability – Receive your data in a portable format.
Right to withdraw consent – At any time, without affecting past processing.
You can exercise these rights by contacting us at: contact@zofax.co.uk
You may also lodge a complaint with your local Data Protection Authority (DPA).
7. Cookies & Tracking
We use cookies and similar technologies for:
Session management and authentication
Analytics (e.g., Google Analytics)
Marketing (with consent, including retargeting)
You can adjust your cookie preferences or disable cookies at any time through your browser settings or by using our cookie banner.
8. Data Security
We apply industry-standard security measures, including:
HTTPS encryption
Secure server environments
Role-based access control
Encrypted payment data via payment processors.
9. Data Transfers Outside the EU
We may transfer your data outside the EEA (for example, to the United States) if our service providers are based there. Such transfers are safeguarded by appropriate legal mechanisms:
Standard Contractual Clauses (SCCs)
Data Processing Agreements (DPAs)
Adequacy decisions (where applicable)
10. Data Retention
We retain your data only for as long as necessary to fulfill the purposes described in this policy or to meet legal requirements. You may request deletion of your account and personal data at any time.
11. Children’s Privacy
We do not knowingly collect data from children.
12. Changes to This Policy
We may update this policy to reflect changes in laws or our services. If we make significant changes, we will notify you by email or through our platform.
13. Contact Us
For questions or data rights requests:
If you're in the EU or UK, you may also contact your local Data Protection Authority.