This Privacy Policy explains how Zerith Building Performance Limited collects, uses and protects personal data when you visit our website, contact us, work with us, or use ZECO AI and related digital services.
1. Who we are
Zerith Building Performance Limited ("Zerith", "we", "us" or "our") is a private limited company registered in England and Wales under company number 16835050. Our registered office is 35 The Crescent, Woodthorpe, Nottingham, England, NG5 4FX.
For most website, enquiry and direct client relationship activity, Zerith is the controller of the personal data we process. In some ZECO AI or client-project contexts, we may process personal data on behalf of a client as a processor. Where that applies, the relevant client agreement or data processing agreement will govern that processing.
Privacy enquiries can be sent to info@zerith.uk.
2. When this policy applies
This policy applies when personal data is processed in connection with the zerith.uk website, enquiries and marketing, consultancy proposals and projects, ZECO AI accounts and workspaces, technical support, business relationships with suppliers and partners, and recruitment or collaboration enquiries.
A separate client agreement, data processing agreement, employee notice, recruitment notice or project-specific privacy notice may apply to a particular activity. If a more specific notice or signed agreement applies, it will govern that processing to the extent of any inconsistency.
3. Personal data we may collect
The information we collect depends on how you interact with Zerith. It may include the following categories.
- Contact and professional information, such as your name, job title, organisation, work email address, telephone number and professional profile details you choose to provide.
- Account and access information for ZECO AI, including user role, organisation, workspace permissions, authentication and security events, support requests and audit logs.
- Business and project information, such as enquiries, meeting notes, proposal and contract records, project responsibilities, approvals, comments and communication history.
- Technical and operational project data that can identify an individual, for example named site contacts, evidence contributors, responsible officers, approvers, photographs containing people, or annotations linked to named users.
- Website and device information, including IP address, browser or device type, pages visited, referring pages, cookie identifiers and security or analytics data where enabled.
- Billing and commercial records, including purchase orders, invoices, payment status, tax records and business contact details. Zerith does not intend to store full payment-card details where payment services are provided by a third party.
- Recruitment information, such as a CV, employment history, qualifications, portfolio, references, right-to-work information and interview notes where you provide them.
- Marketing preferences, including subscriptions, event interests and records of consent, objection or unsubscribe requests.
Most energy, meter, building, asset, engineering, carbon and compliance data is business or technical information rather than personal data. This policy applies to that information only where it identifies, or can reasonably be linked to, an individual.
Zerith does not intentionally collect special category personal data through the public website or ZECO AI as part of its standard service. If a client chooses to provide sensitive personal data for a particular project, the client must ensure that it has an appropriate lawful basis and that any additional safeguards required by law are in place.
4. How we collect personal data
We collect personal data directly from you when you contact us, submit a form, attend a meeting, create or use an account, upload content, request support or take part in a project. We may also receive business contact details from your employer, client, project sponsor, supplier or professional adviser.
Some information is collected automatically through website logs, security tools, cookies, analytics or platform telemetry. We may also obtain professional contact information from public business sources, procurement systems, event organisers, partners or other lawful third-party sources.
5. Why we use personal data and our lawful bases
We process personal data only where we have a lawful basis. Depending on the activity, this may be necessary to take steps at your request before entering into a contract, to perform a contract, to comply with a legal obligation, for our legitimate interests, or on the basis of consent where consent is required.
Our main purposes
- Responding to enquiries, arranging meetings, preparing proposals and managing client or partner relationships.
- Providing energy, compliance, building-performance, Net Zero, engineering and related consultancy services.
- Operating ZECO AI, including account administration, user permissions, project workspaces, document and evidence handling, support, security and auditability.
- Carrying out energy and compliance analysis, quality assurance, product improvement, service development and research, using personal data only where necessary for those purposes.
- Sending relevant B2B communications, service updates, event information or marketing where permitted by law and respecting your marketing choices.
- Protecting the security and integrity of our website, systems, accounts, client data and services.
- Managing suppliers, subcontractors, advisers, recruitment, finance, tax, legal claims and regulatory obligations.
6. Client data and our role as processor
Where a client uses ZECO AI or another Zerith service to store or process personal data for which that client determines the purpose and means of processing, the client will normally be the controller and Zerith will act as a processor. In that situation, Zerith processes the data on the client's documented instructions and subject to the applicable data processing terms.
Clients are responsible for ensuring that personal data they provide to Zerith has been collected and disclosed lawfully, and for giving appropriate information to their own personnel, contractors or other data subjects where required.
7. Cookies and analytics
Our website may use cookies, local storage and similar technologies to operate the site, maintain security, remember preferences and understand how the site is used. Essential technologies may be used where necessary for the site to function. Non-essential analytics or marketing technologies will be used only where permitted by law and, where required, after consent.
Where a cookie preference control is available on the website, you can use it to change or withdraw your choices. You can also control cookies through your browser settings, although disabling essential cookies may affect site functionality.
8. AI-assisted and analytical processing
ZECO AI and Zerith workflows may use artificial intelligence, statistical analysis, document intelligence and other computational methods to support data structuring, anomaly detection, analysis, opportunity development, evidence handling and drafting.
Where personal data is involved, we seek to minimise it, restrict access and use de-identification or aggregation where practical. Client confidential information and personal data are not intended to be used to train general-purpose models unless this has been expressly agreed and is lawful.
AI-generated or AI-assisted outputs are designed to support professional and operational workflows. Compliance-critical, engineering or other material decisions remain subject to appropriate human review. Zerith does not intend to make solely automated decisions about individuals that produce legal or similarly significant effects unless this is lawful and suitable safeguards are in place.
9. Sharing personal data
We may share personal data with service providers and professional partners where this is necessary to operate our business or deliver services. This may include cloud hosting, authentication, security, analytics, email, CRM, document management, accounting, payment, collaboration, customer-support and AI technology providers.
We may also share data with authorised client users, consultants, subcontractors, auditors, professional advisers, insurers, banks, regulators, courts or public authorities where required for the relevant purpose or by law. If Zerith is involved in a merger, financing, restructuring or sale, information may be disclosed to prospective or actual counterparties subject to appropriate confidentiality controls.
Zerith does not sell personal data.
10. International transfers
Some suppliers, partners or clients may be located outside the United Kingdom or the European Economic Area. Where personal data is transferred internationally and data protection law requires safeguards, Zerith will use an appropriate lawful transfer mechanism, such as an adequacy decision or regulation, approved contractual clauses or another permitted safeguard.
11. How long we keep personal data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain project and audit records, comply with legal, tax and accounting obligations, resolve disputes and enforce agreements.
Retention periods vary by data type and contractual context. When information is no longer required, we will delete, anonymise or securely archive it in accordance with our legal and operational requirements.
12. Security
Zerith uses technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Measures may include role-based access controls, authentication, encryption in transit, secure cloud infrastructure, logging, backup, vendor due diligence, confidentiality obligations and incident-response procedures.
No internet-connected service can be guaranteed to be completely secure. We therefore continually review controls proportionate to the nature of the information and the services being provided.
13. Your privacy rights
Subject to applicable law, you may have the right to request access to your personal data, ask us to correct inaccurate data, request deletion or restriction, object to certain processing, withdraw consent where consent is the basis for processing, and request data portability where applicable.
You also have the right to object to direct marketing at any time. To exercise a privacy right, contact info@zerith.uk. We may need to verify your identity before acting on a request.
If you are unhappy with how we use your personal data, you can also complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
14. Marketing communications
You can unsubscribe from marketing emails using the unsubscribe link in the message or by contacting us. We may still send non-marketing communications that are necessary for an account, contract, project, security matter or service you use.
15. Children and third-party services
The Zerith website and services are intended for business and professional users and are not directed at children. We do not knowingly collect children's personal data through our website or ZECO AI as part of our standard services.
Our website or platform may link to third-party websites, tools, datasets or services. Their privacy practices are governed by their own notices, and Zerith is not responsible for those third-party practices.
16. Changes to this policy and contact
We may update this Privacy Policy from time to time to reflect changes to our services, technology, suppliers or legal obligations. The date at the top of this page shows when the policy was last updated.
Questions or privacy requests can be sent to:
35 The Crescent
Woodthorpe
Nottingham
England
NG5 4FX
Email: info@zerith.uk
Website: https://www.zerith.uk/