Legal

Privacy Policy

Last updated: 27 August 2026

Who we are

The data controller is a UK sole trader trading as Z3nith (website: https://z3nith.ai). We do not publish a personal name or a postal address. For privacy purposes the controller is identified by the trading name Z3nith and these emails: hello@z3nith.ai (general and privacy requests) and outreach@z3nith.ai (B2B outreach and opt-outs).

What we collect

Company website URL you submit for assessment.
Companies House number when you link it during the free scan (used to pull public filing data).
Email address if you choose to share it (for report delivery and product updates only).
Questionnaire answers when you complete a Standard or Premium assessment.
Anonymised analytics (page views, click events, viewport size) to improve the product.
Public company details for B2B outreach — a UK limited company or LLP's name, public Companies House records, and a corporate mailbox published on that company's own website. See “B2B outreach” below.

What we don't collect

We do not collect financial card data on z3nith.ai — payments run through Stripe's hosted checkout, and Z3nith never receives card numbers. We do not collect special-category data (race, religion, health, etc.).

How we use it

To produce your AI Readiness assessment and report.
To send you the report and, if you opted in, occasional product updates. You can unsubscribe at any time from any email.
To email relevant UK companies about Z3nith's AI readiness scan, as described under B2B outreach below.
To improve our scoring methodology — only ever in aggregate.
To detect and prevent abuse of the service (rate-limiting, spam detection).

B2B outreach (direct marketing)

We may email UK limited companies and LLPs at corporate mailboxes published on their website (for example info@ or enquiries@) about Z3nith's AI readiness scan.

We do not email sole traders, personal Gmail or Hotmail addresses, or anyone who has opted out.

Sources are the company's own public website and public Companies House records. We do not buy mailing lists.

The lawful basis is UK GDPR legitimate interests: marketing a relevant B2B tool to a corporate subscriber. PECR's electronic-mail consent rule does not apply to corporate subscribers. We still identify ourselves as Z3nith and include an opt-out in every message.

To opt out, reply “unsubscribe” to outreach@z3nith.ai or use https://z3nith.ai/unsubscribe. Opt-outs are honoured and suppressed, not deleted, so we do not email that address again.

We do not use tracking pixels or open-tracking in outreach emails. We measure whether the unique results link is opened and whether a paid report is purchased.

Recipients can object to this processing at any time. If you object, we stop.

Who we share it with

We use a small set of UK / EU / US sub-processors: Cloudflare (hosting + DDoS protection), Google (Gemini API for report generation), Companies House API (public filings), Resend (transactional email), Stripe (payments). We never sell your data to anyone.

Your rights (UK GDPR)

You have the right to access, correct, or delete the personal data we hold about you, and to object to processing based on legitimate interests (including direct marketing). Sign in to your dashboard to download all of your data or erase it instantly under “Your data”. You can also email hello@z3nith.ai and we will action your request within 30 days. For outreach opt-outs, email outreach@z3nith.ai or use the unsubscribe page; we will stop contacting you.

Data retention

Assessment results are kept so you can return to your dashboard, until you delete them or erase your account. Email addresses on the marketing list are kept until you unsubscribe. Outreach opt-outs are kept as a suppression record so we do not email that address again. Records of payments are retained for six years after the relevant financial year, as required by UK tax law — when you erase your account, these are anonymised (your email is removed) rather than deleted. Anonymous analytics is retained for 26 months.

Cookies

We use a small number of essential cookies (beta access, session persistence) and may add analytics cookies in future — we'll update this page and surface a consent prompt when we do.