E-ZU Solutions Ltd – Privacy Statement
Last Updated: 15th September 2026
1. About This Privacy Statement
E-ZU Solutions Ltd (“E-ZU”, “we”, “us” or “our”) is committed to protecting your privacy and handling personal data responsibly and in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and other applicable UK data protection legislation.
This Privacy Statement explains how we collect, use, store and protect personal data and the rights individuals have in relation to their information.
This Privacy Statement applies where E-ZU acts as a data controller and determines how and why personal data is processed.
Where E-ZU processes personal data on behalf of a customer as a data processor, that processing is governed separately by the relevant contractual and data processing arrangements with that customer.
2. Who We Are and How to Contact Us
E-ZU Solutions Ltd is a company registered in England and Wales.
E-ZU Solutions Ltd
Matrix House
16 Mill Green
Congleton
Cheshire
CW12 1JG
Telephone: 01260 715 021
Email: [email protected]
Website: www.e-zu.co.uk
Company registration number: 04478226
If you have any questions about this Privacy Statement or how E-ZU processes your personal data, please contact us using the details above.
3. Personal Data We May Collect and Hold
The personal data we collect and hold depends on your relationship and interactions with E-ZU.
This may include:
Identity and Professional Information
• Name;
• Job title or professional role;
• Department;
• Organisation; and
• Other information relating to your professional role.
Business Contact Information
• Business email address;
• Business telephone number; and
• Business address.
Organisation Information Associated With a Business Contact
• Organisation name;
• Industry sector;
• Organisation size; and
• Information relating to an organisation’s IT infrastructure, cyber security requirements or business technology needs.
Enquiry, Sales and Customer Information
• Information provided when making an enquiry;
• Correspondence with E-ZU;
• Records of meetings or conversations;
• Quotations, opportunities and sales information;
• Customer relationship information;
• Information necessary to provide products or services; and
• Relevant CRM records and notes.
Marketing Information
• Marketing preferences;
• Records of opt-outs or objections;
• Engagement with marketing communications, where recorded; and
• Information relating to relevant marketing interactions, enquiries or campaigns.
Events and Webinars
Where you register for or participate in an event or webinar, we may collect information such as:
• Name;
• Job title;
• Organisation;
• Business contact details;
• Registration information;
• Attendance information; and
• Information you choose to provide during the event.
Website and Technical Information
When you use our website, we may collect certain technical information through cookies and similar technologies, subject to your cookie choices where required.
This may include:
• IP address;
• Browser and device information;
• Pages visited;
• How visitors arrive at and navigate our website;
• Interactions with website content; and
• Other website usage information.
E-ZU does not intentionally collect special category personal data for the purposes of its business-to-business marketing activities.
4. Where We Obtain Personal Data
We may obtain personal data from a number of sources.
Directly From You
We may collect information directly from you when you:
• Contact E-ZU;
• Make an enquiry;
• Request information, a quotation, demonstration or consultation;
• Purchase or use our products or services;
• Register for an event or webinar;
• Complete a website form;
• Communicate with our sales, marketing or support teams; or
• Otherwise interact with E-ZU.
Business-to-Business Data Providers
E-ZU may purchase or otherwise obtain professional business contact information from third-party business-to-business data providers. E-ZU currently holds business-to-business contact data obtained from providers including Corpdata Ltd and Data HQ Ltd.
These datasets consist of professional business contacts identified as having responsibility for, involvement in or influence over IT and technology purchasing decisions within their organisations.
Information obtained from these sources may include:
• Name;
• Job title or professional role;
• Business email address;
• Organisation;
• Industry sector;
• Organisation size;
• Business address; and
• Business telephone number.
Where we obtain personal data from a third-party source, we process that information in accordance with the UK GDPR and other applicable data protection legislation and provide appropriate privacy information to individuals.
Other Sources
We may also obtain professional business information from:
• Our customers, suppliers, technology partners and other business contacts;
• Publicly available professional or business sources;
• Events and webinars;
• Social media and professional networking platforms; and
• Other legitimate business sources where appropriate
5. How and Why We Use Personal Data
E-ZU processes personal data only where there is an appropriate purpose and lawful basis under the UK GDPR.
We may use personal data for the following purposes:
Responding to Enquiries and Managing Business Relationships
To:
• Respond to enquiries and requests;
• Provide quotations, information, demonstrations or consultations;
• Communicate with prospective and existing customers;
• Manage sales opportunities and business relationships; and
• Maintain appropriate records of our interactions.
Providing Products and Services
To:
• Set up and administer customer services;
• Provide products, licences and services;
• Manage customer accounts and relationships;
• Provide support and service communications;
• Process transactions; and
• Meet our contractual obligations.
Business-to-Business Marketing
To:
• Send relevant marketing communications about E-ZU’s IT infrastructure and cyber security products and services;
• Provide information about relevant events, webinars, guides and other content;
• Manage marketing preferences;
• Record relevant engagement with our marketing communications, where applicable;
• Use relevant interactions and engagement to help us tailor our communications to professional interests that an individual has demonstrated; and
• Develop and maintain appropriate business relationships.
Events and Webinars
To:
• Administer registrations;
• Provide joining information;
• Manage attendance;
• Communicate about the event; and
• Follow up appropriately following an event or webinar.
Website Operation and Analytics
To:
• Operate and maintain our website;
• Understand how visitors use our website; and
• Improve website performance, content and user experience.
Legal, Regulatory and Administrative Purposes
To:
• Meet legal and regulatory obligations;
• Maintain appropriate business and financial records; and
• Establish, exercise or defend legal rights.
6. Our Lawful Bases for Processing
Under Article 6 of the UK GDPR, E-ZU must have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on:
Legitimate Interests – Article 6(1)(f) UK GDPR
We may process personal data where this is necessary for our legitimate business interests and those interests are not overridden by the rights and interests of the individual.
Our legitimate interests may include:
• Promoting relevant E-ZU products and services to professional business contacts;
• Developing and maintaining business relationships; and
• Responding to and managing business enquiries.
Where we rely on legitimate interests, we consider the necessity and proportionality of the processing, the nature of the information involved, the context in which it is used, the individual’s reasonable expectations and the potential impact on their rights and freedoms.
Contract
We may process personal data where this is necessary to enter into or perform a contract with you.
Legal Obligation
We may process personal data where this is necessary to comply with a legal or regulatory obligation.
Consent
Where appropriate, we may rely upon your consent for specific processing activities.
Where processing is based on consent, you may withdraw that consent at any time.
Note: Where we require personal data to enter into or perform a contract, comply with a legal obligation or provide a requested product or service, we will make this clear where appropriate. If the required information is not provided, we may be unable to provide the relevant product or service or fulfil the request.
7. Business-to-Business Direct Marketing
E-ZU markets IT infrastructure and cyber security products and services to professional business contacts identified as having responsibility for, involvement in or influence over IT and technology purchasing decisions within their organisations. This may include individuals whose primary job role is not specifically an IT role but who have relevant IT decision-making responsibilities within their organisation.
Where permitted under the UK GDPR and the Privacy and Electronic Communications Regulations (“PECR”), E-ZU may rely on its legitimate interests under Article 6(1)(f) UK GDPR to process professional business contact information for business-to-business direct marketing.
When considering whether legitimate interests is appropriate, E-ZU takes account of factors including:
• The business-to-business nature of the communication;
• The individual’s professional role and their relevance to IT or technology decision-making within their organisation;
• The relevance of E-ZU’s products or services to that role;
• How the information was obtained;
• The nature and amount of personal data involved;
• The individual’s reasonable expectations; and
• The potential impact of the processing on the individual.
Marketing communications are intended to be relevant to the professional roles and organisations to which they are sent.
E-ZU does not sell personal data or disclose personal data to third parties for their own direct marketing purposes.
Marketing emails include a clear way to opt out.
Your Right to Object to Direct Marketing
You have the right to object at any time to the use of your personal data for direct marketing purposes.
If you object to E-ZU using your personal data for direct marketing, we will stop processing your personal data for that purpose.
We may retain the minimum information necessary on a suppression record to ensure that your preference continues to be respected.
8. How Long We Keep Personal Data
E-ZU retains personal data only for as long as it is necessary for the purposes for which it is held, in accordance with the storage limitation principle under the UK GDPR, and taking account of applicable legal, contractual and operational requirements.
Different categories of personal data may therefore be retained for different periods.
Business-to-Business Marketing Data
Business-to-business marketing data is reviewed at least once every 12 months to help ensure that it remains accurate and valid.
This may include identifying:
• Bounced or invalid email addresses;
• Contacts who are known no longer to work for their recorded organisation; and
• Information known to be inaccurate or no longer valid.
Where an individual business-to-business marketing contact has been held for five years without meaningful engagement, E-ZU carries out an enhanced review to determine whether continued retention remains necessary, relevant and proportionate for its business-to-business marketing purposes.
Relevant factors may include whether the individual’s business contact information remains valid, whether their professional role remains relevant, whether they have engaged or otherwise interacted with E-ZU, and whether there is another documented and proportionate reason for continued retention.
Relevant engagement with the individual’s organisation may also be considered where this genuinely supports the continued relevance of retaining that particular professional contact.
Where there is no sufficient justification for continued retention, the contact will be removed from active marketing.
Marketing Objections and Opt-Outs
Where an individual opts out of or objects to direct marketing, E-ZU will cease using their personal data for that purpose.
We may retain the minimum information necessary on a suppression record for as long as necessary to ensure that the individual’s preference continues to be respected.
Other Personal Data
Personal data relating to customers, enquiries, transactions, contracts and other business activities is retained for periods appropriate to the purpose for which it is processed and any applicable legal, contractual, regulatory or legitimate business requirements.
Where personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of as appropriate.
9. Who We Share Personal Data With
E-ZU does not sell personal data or disclose it to third parties for their own direct marketing purposes.
Where necessary for the purposes described in this Privacy Statement, personal data may be shared with or processed using:
• Cloud hosting and IT infrastructure providers;
• Email and communications service providers;
• CRM and business technology providers;
• Technology vendors and manufacturers where necessary to respond to enquiries, provide quotations, licences, products or services;
• Event and webinar platforms;
• Professional advisers;
• Regulators, law enforcement agencies or other authorities where required by law; and
• Other service providers acting on E-ZU’s behalf where necessary to operate our business.
E-ZU’s core CRM systems and business-to-business marketing contact database are hosted using cloud infrastructure located in the United Kingdom.
Where a third party processes personal data on E-ZU’s behalf, we take appropriate steps to ensure that the information is handled securely and in accordance with applicable UK data protection requirements.
10. Cookies and Website Analytics
E-ZU’s website uses cookies and similar technologies to operate the website, provide certain website features and understand how visitors use it.
We use Google Analytics and other analytics technologies associated with website services and embedded content to help us understand website usage and performance.
These technologies may collect information such as:
• Pages visited;
• How visitors arrive at and navigate our website;
• Interactions with our website or embedded content;
• Approximate location;
• Device and browser information; and
• Other technical information relating to website usage.
Analytics cookies are optional and are not used unless you choose to accept them through our cookie consent mechanism. You can reject analytics cookies or change your cookie preferences at any time.
We use analytics information to understand website performance and usage and to help us improve our website, content and services.
Google Analytics is provided by Google. Website usage and technical information processed through Google Analytics, such as IP address, device and browser information, may be processed by Google outside the United Kingdom, including in the United States. Where this involves an international transfer of personal data, appropriate safeguards are used in accordance with applicable UK data protection law.
Further information about the cookies and similar technologies used on our website, including their providers, purposes and duration, is available through our Cookie Settings.
Our use of cookies, analytics and similar technologies is governed by applicable requirements under PECR and the UK GDPR.
11. How We Protect Personal Data
E-ZU takes appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration or disclosure.
Our security measures may include:
• Appropriate access controls;
• Authentication and account security measures;
• Network and system security controls;
• Encryption where appropriate;
• Backup and recovery arrangements;
• Security monitoring;
• Staff access restrictions and responsibilities; and
• Appropriate arrangements with service providers that process personal data on our behalf.
Our security measures are reviewed and updated where appropriate to reflect changes in technology, risk and our processing activities.
E-ZU is also currently certified to Cyber Essentials Plus, which includes independent technical verification of the cyber security controls covered by the scheme.
12. Your Data Protection Rights
Depending on the circumstances and the lawful basis on which we process your personal data, you may have rights under the UK GDPR and Data Protection Act 2018, including:
• Right of access – to request a copy of the personal data we hold about you;
• Right to rectification – to request that inaccurate personal data is corrected or incomplete personal data is completed;
• Right to erasure – to request deletion of your personal data in certain circumstances;
• Right to restriction – to request restriction of the processing of your personal data in certain circumstances;
• Right to object – to object to certain processing of your personal data; and
• Right to data portability – where applicable, to receive certain personal data in a structured, commonly used and machine-readable format.
Where we rely on your consent, you also have the right to withdraw that consent at any time.
Direct Marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes.
If you exercise this right, E-ZU will stop using your personal data for direct marketing.
We may retain the minimum information necessary on a suppression record to ensure that your preference continues to be respected.
To exercise your rights or ask a question about how we use your personal data, please contact:
Email: [email protected]
Telephone: 01260 715 021
13. Complaints
If you have concerns about how E-ZU has handled your personal data, we encourage you to contact us first so that we can investigate and respond.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information about how to contact the ICO and make a complaint is available from the ICO’s website.
14. Changes to This Privacy Statement
E-ZU may update this Privacy Statement from time to time to reflect changes in our processing activities, services, technology or legal and regulatory requirements.
When we make changes, we will update the “Last updated” date at the top of this Privacy Statement.
We recommend reviewing this Privacy Statement periodically to remain informed about how E-ZU uses and protects personal data.
