Privacy Policy

Posted Date: 8th October 2026
Effective Date: 9th October 2026

What this policy covers

This Zentum Privacy Statement (“Statement”) describes how Zentum Services Ltd. and our affiliated entities (“Zentum” or “we” or “us”) collect, use, process, and share the information of users of our Sites and Services (“you” or “your”), your rights and choices with respect to your information, and how you can contact us if you have any questions or concerns. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By using our Sites or Services, you agree to the collection, use, disclosure, and processing of your personal information as described in this Statement. Zentum are committed to protecting and respecting your privacy as outlined in this Statement.

This Statement explains the types of information we may collect from or about the visitors to our Sites and/or the Users (as defined below) of our Services. This Statement also describes Zentum’s practices for collecting, using, disclosing, maintaining and processing information.

In this Statement, the following definitions apply:

• “personal information” or “information” means any personally identifying information relating to an identified or identifiable individual. We may collect personal information about you from various sources described below.
• “Services” means Zentum’s cloud-based financial services platform or administration service available at app.zentum.co.uk after log-in, Zentum APIs and any updates, upgrades, modified versions, extensions, improvements, and derivative works of the foregoing, and any related support and professional services.
• “Sites” means www.zentum.co.uk, and any other Zentum website, blogs, social media accounts, communities, webpages, forms, promotions, surveys, or events that link to this Statement.
• “Users” or “User” means customers who have executed an agreement with Zentum and make use of our Services.

For certain individuals, one or more of the following supplemental notices may apply:
Services Supplemental Notice

Our Role as Data Controller and Data Processor

For the purposes of data protection laws, (“Data Protection Laws”), in the European Economic Area, United Kingdom and Switzerland, the data controller of any personal data uploaded by Users in connection with the Services (“User Personal Data”) is the relevant User and Zentum will, in connection with this personal data, be the data processor as defined in applicable Data Protection Laws. The appropriate terms have been entered into between the User and Zentum in connection with the User Personal Data. Notwithstanding the previous section, Zentum is the data controller of certain information provided by a User directly to Zentum and certain analytical information, which Zentum may collect about the visitors to our Sites.

Personal Information We Collect and Use

We collect one or more of the following categories of personal data about visitors to our Sites and the Users of our Services when these individuals (i) visit or interact with our Sites; (ii) use our Services; or (iii) otherwise contact or interact with us.

You do not have any legal obligation to provide any information to us; however, we require certain information in order to provide the Services. If you choose not to provide us with certain information, we may not be able to provide you with the Services. We will use your personal data to:

• carry out our obligations arising from any contracts entered into between you and us to provide you with the information, products and Services that you request from us;
• administer your account with us;
• provide you with information about Services we feel may interest you, if you have given your consent to receiving marketing material from us at the point when we collected the information you gave us;
• notify you about changes to our Services;
• contact you for the purpose of providing you with technical assistance and other related information about the Services;
• reply to your queries, troubleshoot problems, detect and protect against error, fraud or other criminal activity;
• ensure in our legitimate interests that content from our Sites is presented in the most effective manner for you and for your computer;
• administer our Sites under our terms and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• keep our Sites safe and secure;
• improve our Sites to ensure that content is presented in the most effective manner for you and for your computer;
• allow you to participate in interactive features of our Services, when you choose to do so;
• make other suggestions and recommendations to you and other Users of our Sites about Services that may interest you or them; and
• Security, through the processing of personal information to protect the integrity, availability, performance, and security of the Sites, Services, or third-party applications integrated with the Services, including preventing and prosecuting potentially prohibited or illegal activities or any uses of our Sites or Services in violation of our Acceptable Use Policy.

Legal Basis for Processing: To the extent we rely on our legitimate interests as a legal basis for processing of your personal data, we have considered the balance between our own interests (among other things, the lawful and efficient operation of our Services) and your interests and we believe that (a) you would reasonably expect us to carry out the kind of processing referenced above and (b) such processing will not cause you any harm and/or will not seriously impact your rights and freedoms with regard to data privacy. You have the right to withdraw any consent given to us for the processing of your personal data. At times, we may also collect your personal data where we have your consent to do so or as otherwise necessary for the performance of a contract to which you are a party, and in order to take steps (at your request) to enter into such contract. We may also collect your personal data as necessary for us to comply with our legal obligations, including to protect your vital interests or those of another.

Information Collected Automatically

• Technical, Device, and Connection Information. When you visit and interact with our Sites or use our Services, we automatically collect certain information. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, details about your browser, operating system or device, location information (including inferred general location based on your IP address), Internet service provider, pages that you visit before, during and after using the Sites or Services, and information about the links you click while using the Sites or Services. Information we collect may be associated with other accounts and devices.
• Usage Information. To help us understand how you use our Sites and Services and to help us improve them, we may collect data about your interactions with our Sites and Services. This includes information such as crash reports, session lengths and times, the pages or other content with which you engage, any searches you conduct on our Sites and Services, information about how you interact with the Sites or Services, including the frequency and duration of your activities, and other information about how you use the Sites or Services.
• Cookies and Similar Technology. We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Cookies”) to automatically collect information through the Sites or Services. Cookies are essentially small data files placed on your devices that allow us and our partners to record certain pieces of information whenever you visit or interact with our Sites or Services. This information may include IP addresses, location, device type, browser type, Internet service provider, referring/exit pages, operating system, date/time stamp, click data, and device-identifying data. We may combine this automatically collected information with other information that you provide us through other channels. You can learn more about these Cookies in the Zentum Cookie Notice.
• Advertising. In using the Sites or Services, we may allow select third-party advertising technology partners to place Cookies on the browser of your device to collect information about you as discussed above. These third parties (e.g., ad networks and ad servers) may use this information to serve relevant content and advertising to you as you browse the Internet and access their own Cookies on your browser to assist in this activity. If you are interested in more information about these online advertising activities and how you can generally control Cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative's Consumer Opt-Out link, the Digital Advertising Alliance's Consumer Opt-Out link, or Your Online Choices to opt out of receiving tailored advertising from companies that participate in those programs. We do not control these opt-out links or whether any particular company chooses to participate in these opt-out programs. We are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms. You can also opt out of certain online advertising activities by following the instructions in the “Your Choices” section below. Please note that if you use these mechanisms, you may still see advertising on our Sites or across the Internet, but it will not be tailored to you based on your online behaviour over time.

Disclosures of Personal Data

In order for us to provide our Services, we may share your personal data with the following categories of recipients:

(1) Members of our Group

Any member of our group, which means our affiliates, our ultimate holding company and its subsidiaries, who support our processing of personal data under this Privacy Statement.

(2) Third Parties

Our selected third parties may include:

• analytics and search engine providers that assist us in the improvement and optimisation of our Sites and subject to the 'Cookies' section of this Privacy Statement (this will not identify you as an individual);
• data processors who process your personal data on our behalf and in accordance with our instructions and applicable data protection law.

We will disclose your personal data to third parties:

• in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets subject to the terms of this Privacy Statement;
• if Zentum or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets; and
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of supply terms and other agreements with you; or to protect the rights, property, or safety of Zentum, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction and to prevent cybercrime.

Cross-Border Transfers

To facilitate our global operations, we may transfer and access such personal data from around the world, including to and from the European Economic Area (EEA), and other countries in which Zentum has operations. Therefore, your personal data may be processed in those other countries. We may transfer your personal data to members of our group and selected recipients in the EEA. In these circumstances, the governments, courts, law enforcement, national security, or regulatory agencies of such jurisdictions may be able to obtain access to your personal information through their local laws. Where your information is transferred outside of the jurisdiction in which it is collected, we will take all steps reasonably necessary to ensure that your information is subject to appropriate safeguards, such as relying on a recognised legal adequacy mechanism, and that it is treated securely and in accordance with this Privacy Statement.

Security of Your Personal Data

The security of all personal data provided to us is important and we take reasonable steps designed to protect your personal data. We maintain reasonable administrative, technical, and physical safeguards designed to protect the personal data that we receive against accidental, unlawful, or unauthorised destruction, loss, alteration, access, disclosure or use. If you have created an account with us, you are responsible for keeping confidential any usernames and passwords you use to access our Services. Do not share this password with anyone else and do not use this password for other services or products. If you have reason to believe that your personal data is no longer secure, please immediately contact us as set forth below in the “Contacting Zentum” section.

Your Choices & Rights

Depending upon where you reside, certain choices and rights may be available to you under applicable data protection laws. If you have questions about what rights may apply to you, please contact us as set forth below in the “Contacting Zentum” section.

For Individuals Located in the European Economic Area (EEA), the United Kingdom (UK) or Switzerland:

You have a number of rights under applicable data protection laws in relation to your personal data. Under certain circumstances, you have the right to:

• Have access to your personal data by submitting a request to us;
• Have your personal data deleted;
• Have your personal data corrected if it is wrong;
• Have the processing of your personal data restricted;
• Object to further processing of your personal data, including to object to marketing from us;
• Make a data portability request;
• Withdraw any consent you have provided to us;
• Restrict any automatic processing of your personal data; and
• Complain to the appropriate Supervisory Authority.

Third-Party Links

We may provide links to other websites or resources provided by third parties. These links are provided for your convenience only. We have no control over the contents of those websites or resources, and accept no responsibility for them or for any loss or damage that may arise from your use of them. If you decide to access any of the third-party links on the Sites, you do so entirely at your own risk and subject to the terms and conditions of those websites.

Children

We do not knowingly collect personal data from children under the age of 13 through our Sites. If you are under 13, please do not give us any personal data. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce our Privacy Statement by instructing their children never to provide us personal data. If you have reason to believe that a child under the age of 13 has provided personal data to us, please contact us, and we will endeavour to delete that personal data from our databases.

Dispute Resolution

You may direct any questions or complaints about this Statement to us by contacting us through the channel indicated below. Any disputes arising out of or related to this Statement will be handled in accordance with the dispute resolution process indicated in your contract with Zentum that refers to this Statement, if applicable. In the case of users of our Services, that means a signed Enterprise Agreement.

Notice of Changes

The Services, the Sites, and our business may change from time to time. As a result, we may make changes to this Statement. We reserve the right to update or modify this Statement at any time and from time to time. If we make changes to this Statement, we will post the changes on this page and will indicate at the top of this page that a change has been made and the date the Statement was last revised. Your continued use of the Site or Services after the date any such notice constitutes your acceptance of the modifications. We encourage you to read this Statement periodically to stay up to date about our privacy practices.

Contacting Zentum

If you have any questions (or comments) concerning this Privacy Statement, you are welcome to send us an email or otherwise contact us at hello@zentum.co.uk.

E.U. citizens have the right to lodge a complaint with a supervisory authority (Data Protection Authority in your jurisdiction) in case of a breach of any E.U. data protection and privacy regulations. If the supervisory authority fails to deal with a complaint or inform you within the time frame set under applicable Data Protection Laws, you have the right to an effective judicial remedy.

Please do not hesitate to contact us: hello@zentum.co.uk.