1. Who this policy covers
ZH Digital is a Barbados-based digital business and technology service. In this policy, “ZH Digital”, “we”, “us” and “our” refer to ZH Digital. You can contact us about privacy at info@zhdigital.net.
For information collected for our own enquiries, client relationships, website, PreviewByZH and Client Portal, ZH Digital generally determines why and how that information is used. For systems we build or operate for a client, the client may instead determine the purposes of processing and ZH Digital may act as a service provider or data processor under the applicable agreement.
2. Information we collect
Depending on how you interact with us, we may collect:
- Enquiry and contact information such as your name, email address, business or organisation, location, website, project goals, workflow notes, timeline, package interest, budget range and referral source.
- PreviewByZH information such as business details, contact information, website and social links, requested improvements, brand direction, uploaded logos or other brand assets, and your confirmation that you are authorised to request work for the business.
- Client and project information such as proposals, approvals, project actions, messages, documents, delivery files, service requests, support records and account-access information.
- Finance and commercial records such as invoices, receipts, payment status, payment references, pricing, taxes or levies, and other records needed to administer the client relationship. Card or bank credentials are not intended to be stored directly by ZH Digital when a third-party payment provider is used.
- Technical and security information such as IP-derived request information, browser/user-agent information, session and authentication events, request identifiers, security logs and other technical records needed to operate and protect the service.
- Communications such as emails sent to or from ZH Digital and delivery/status records for transactional messages.
3. How we use information
We use personal information only for purposes connected with operating ZH Digital and serving clients, including to:
- respond to enquiries and prepare discovery, proposals, quotes or PreviewByZH concepts;
- create and administer client accounts, projects and secure Client Portal access;
- deliver agreed services, receive approvals, share files and provide support;
- issue invoices, record payments and maintain appropriate business, accounting and audit records;
- send transactional messages about enquiries, projects, security, documents, approvals, invoices and support;
- secure our website and systems, investigate errors or misuse, maintain backups and recover service after an incident;
- improve our services, workflows and internal operations using appropriately limited operational information; and
- comply with legal, regulatory, accounting or contractual obligations.
Depending on the context, processing may be necessary to respond to a request, take steps toward or perform a contract, comply with law, protect legitimate operational or security interests, or rely on consent where consent is required.
4. PreviewByZH and AI-assisted work
PreviewByZH is a human-reviewed service. ZH Digital may use internal automation and third-party AI technology to assist with research, drafting, layout exploration or concept generation. Information supplied for a PreviewByZH request may therefore be processed by service providers used to support that work. We do not present automated output as an automatically approved final deliverable; ZH Digital reviews the work before it is presented or used operationally.
Please submit only information and assets you are authorised to provide. Avoid including confidential, sensitive or special-category personal information unless it is genuinely necessary and has been agreed with us.
5. Service providers and international processing
We may use reputable third parties for hosting, email delivery, security, infrastructure, AI-assisted functionality, file or document processing and, when enabled, payment processing. Those providers may process information outside Barbados depending on where their systems and personnel are located.
Where personal data is transferred or processed outside Barbados, ZH Digital will seek to use appropriate contractual, technical or other safeguards required for the circumstances. Barbados’ Data Protection Act, 2019-29 contains specific rules for transfers of personal data outside Barbados.
6. Client systems and processor relationships
Where ZH Digital processes personal data on behalf of a client, the client remains responsible for determining the lawful business purpose and instructions for that processing. Where required, the relationship should be documented in the client agreement or an appropriate Data Processing Agreement. Barbados’ Data Protection Act, 2019-29 requires controller-processor arrangements to address the nature and purpose of processing, categories of data, instructions, confidentiality, security and related obligations.
7. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, the client relationship, security and recovery needs, accounting or tax requirements, dispute handling, and other legal obligations. Different records therefore have different retention periods.
Unsuccessful enquiries, PreviewByZH requests and inactive operational records are reviewed periodically and may be deleted or anonymised when they are no longer needed. Backups may retain information for a limited additional period until normal backup rotation or replacement occurs.
8. Security
We use technical and organisational safeguards appropriate to the service, including HTTPS, access controls, multi-factor authentication for supported accounts, private runtime storage, file validation, request and session protections, logging, verified backups and guarded recovery procedures. No internet service can guarantee absolute security, but we design security into the operating workflow and review it as the platform changes.
9. Cookies and similar technology
ZH Digital uses essential technical storage and cookies where needed for secure sessions, account access and basic site operation. We do not currently enable advertising cookies or non-essential behavioural advertising on the public site. If we later introduce non-essential analytics, advertising or similar tracking that requires additional notice or consent, we will update this policy and the relevant preference controls.
10. Your privacy rights
Subject to applicable law and any lawful exceptions, you may have rights to ask whether we hold personal data about you, obtain access to it, correct inaccurate or incomplete data, request erasure or restriction, receive certain data in a portable form, and object to certain processing including direct marketing. Barbados’ Data Protection Act, 2019-29 sets out these and related data-subject rights.
To make a privacy request, email info@zhdigital.net with enough information for us to identify the relevant record and understand your request. We may need to verify your identity before acting on a request.
11. Complaints and the Barbados Data Protection Commission
If you have a concern, we would like the opportunity to address it first. You may also have the right to raise a complaint with the Barbados Data Protection Commission, the public authority responsible for administering the data-protection framework in Barbados.
12. Children
ZH Digital’s public services are directed primarily to businesses and adult decision-makers. We do not intentionally solicit personal information from children through the public enquiry or PreviewByZH forms. If a client project involves information about minors, the appropriate responsibilities and safeguards must be addressed in that project’s scope and data-processing arrangements.
13. Changes to this policy
We may update this policy as ZH Digital’s services, technology or legal obligations change. The current version will be published on this page with its updated date. Material changes will be communicated where appropriate.
14. Contact
Privacy questions and requests can be sent to info@zhdigital.net. ZH Digital is based in Barbados.