Privacy Policy & GDPR
1. Introduction
ZenChords (“we”, “us”, or “our”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website (zenchords.com) and the ZenChords mobile applications across iOS and Android.
2. Data Controller
The Data Controller for your information is:
Hatfold Limited
Company Registration Number: 16695752
Registered Office: 3 Grantlands, Uffculme, Devon. EX15 3ED
Email: help@zenchords.com
3. The Information We Collect
We only collect the minimum amount of data necessary to provide our services:
Account Information
Your email address and name (to create your account, manage access, and sync purchases across devices).
Transaction Data
When you purchase audio packs, payments are processed by our secure third-party providers: Stripe, Apple Pay, and Google Pay. We do not store your credit card numbers or biometric data on our servers.
Usage & Technical Data
We collect IP addresses and device identifiers via Google Firebase to ensure app stability, platform security, and to fulfil digital rights management.
4. Lawful Basis for Processing
Under UK GDPR, we process your data based on:
- Contractual Necessity: To deliver the digital products and audio streams you have purchased.
- Legitimate Interests: To maintain the security of our platform, prevent fraud, and improve our services.
- Consent: For any marketing communications you explicitly opt into.
5. How We Share Your Data
We do not sell, rent, or trade your personal data. We share information only with the following essential “Sub-processors” to operate ZenChords:
- Google Firebase: For secure account authentication, cloud database hosting, and app stability analytics.
- Stripe / Apple Pay / Google Pay: To facilitate secure, encrypted payment processing.
- Regulatory Authorities: Only where required by UK law or legal compliance.
6. International Data Transfers
Our service providers (like Google) may store data on servers located outside the UK (e.g., in the United States). We ensure these transfers are protected by Standard Contractual Clauses (SCCs) or equivalent UK-approved safeguards to ensure your data remains protected to UK standards.
7. Data Retention & Your “Right to Erasure”
We retain your data only for as long as your account remains active.
Account Deletion ("Right to be Forgotten")
You can exercise your “Right to be Forgotten” at any time by using the “Delete Account” button within the App Settings (Help Page). This will permanently erase your personal data and purchase records from our active databases.
Backups: Residual data may remain in secure, encrypted backups for a limited period (typically up to 30 days) before being automatically overwritten.
8. Cookies & Session Tracking
We use essential session cookies to manage your login state and secure your checkout. You can disable cookies in your browser settings, but please note that the Web Store and account syncing will cease to function properly without them.
9. Your Data Rights
Under UK GDPR, you have the following statutory rights:
- Access: Request a copy of the personal data we hold about you.
- Rectify: Update inaccurate or incomplete information.
- Object: Withdraw consent for marketing at any time.
- Complain: If you are unhappy with how we handle your data, you have a formal right to complain.
10. Complaints Procedure (UK GDPR)
If you wish to make a formal complaint regarding your data handling:
- Email us directly at help@zenchords.com.
- We will acknowledge your complaint within 30 days.
- We will investigate and provide a full written response without undue delay.
You also have the right to contact the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
