Privacy Policy

Zovrak ("Zovrak", "we", "us", or "our") helps skincare and beauty brands grow through Meta Ads. We take your privacy seriously. This policy explains what personal data we collect when you use our website or work with us, how we use it, who we share it with, and the rights you have over it.

1. Who we are

Zovrak is a Meta Ads management service for indie skincare and beauty brands. For the purposes of data protection law, including the UK General Data Protection Regulation (UK GDPR) and the EU GDPR, Zovrak is the "data controller" of the personal data described in this policy. If you have any questions, you can reach us at hello@zovrak.com.

2. The information we collect

Information you give us

We collect personal data you provide directly, for example when you book a call, request an ad audit, email us, or fill in a form. This may include:

• Your name and the name of your business or brand
• Your email address and phone number
• Your website, store, and social media handles
• Details about your business, ad accounts, and marketing goals that you choose to share
• Any other information contained in messages you send us

Information we collect automatically

When you visit our website, we and our service providers may automatically collect certain technical data, including:

• Your IP address and approximate location
• Your browser type, device type, and operating system
• The pages you view, links you click, and how you arrived at our site (referring URLs)
• Cookie identifiers and similar tracking data (see Section 3)

3. Cookies and tracking technologies

We use cookies and similar technologies to make the site work, understand how it is used, and measure the performance of our marketing. These generally fall into three groups:

• Essential cookies — required for the site to function properly.
• Analytics cookies — help us understand how visitors interact with the site (for example, through tools such as Google Analytics) so we can improve it.
• Advertising cookies — used to measure and improve our advertising, including tools such as the Meta Pixel, which may allow us and Meta to understand how visitors found us and to show relevant ads.

Where required by law, we will ask for your consent before placing non-essential cookies. You can also control cookies through your browser settings, although disabling some cookies may affect how the site works.

4. How we use your information

We use the personal data we collect to:

• Respond to your enquiries and provide the ad audit, strategy, and management services you request
• Communicate with you about your account, our services, and your campaigns
• Operate, maintain, secure, and improve our website
• Measure and improve the performance of our own marketing and advertising
• Send you marketing communications where you have agreed to receive them, or where we are otherwise permitted to do so
• Comply with our legal obligations and enforce our terms

5. Our legal bases for using your data

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases to process your personal data:

• Contract — to take steps at your request before entering into an agreement, and to provide our services.
• Consent — for example, for non-essential cookies and certain marketing communications. You can withdraw consent at any time.
• Legitimate interests — to run, protect, and grow our business, provided your rights do not override those interests.
• Legal obligation — where we are required to process data to comply with the law.

6. How we share your information

We do not sell your personal data. We may share it with:

• Service providers and processors that help us run our business — for example, scheduling tools (such as Calendly), email and hosting providers, analytics providers, and advertising platforms (such as Meta) — who are only permitted to use your data on our instructions.
• Professional advisers such as accountants or lawyers, where necessary.
• Authorities or third parties where we are required to do so by law, or to protect our rights, safety, or property.

7. International data transfers

Zovrak operates internationally and our team and some of our service providers are located outside the United Kingdom and the European Economic Area (EEA). This means your personal data may be transferred to, stored in, or accessed from countries whose data protection laws differ from those in your country. Where we transfer personal data internationally, we take steps to ensure it is protected by appropriate safeguards, such as standard contractual clauses or by working with providers that maintain adequate protections.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this policy — for example, for as long as you are a client, plus a reasonable period afterwards to meet legal, accounting, and record-keeping requirements. When we no longer need your data, we will delete or anonymise it.

9. Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate or incomplete data
• The right to request erasure of your data in certain circumstances
• The right to restrict or object to how we process your data
• The right to data portability
• The right to withdraw consent at any time, where we rely on it

To exercise any of these rights, email us at hello@zovrak.com. You also have the right to lodge a complaint with your local data protection authority — in the UK, this is the Information Commissioner's Office (ICO).

10. Data security

We use reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Third-party links

Our website may contain links to third-party sites and platforms (for example, our social media profiles). This policy does not cover those sites, and we are not responsible for their privacy practices. We encourage you to read their privacy policies.

12. Children's privacy

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to this policy

We may update this privacy policy from time to time. When we do, we will revise the "Last updated" date at the top of this section. Significant changes may be communicated to you directly where appropriate.