Customer Privacy Notice

ZIETARS

For customers, visitors, account holders, plan members and prospective users

1. Purpose and scope

This notice explains how Zietars Limited ("Zietars", "we", "us" or "our") collects and uses personal information when you browse, register for, book or pay for services through the Zietars digital marketplace, contact Zietars Administration, participate in promotions or use related customer features (the "Platform"). Zietars connects customers with independent service providers offering approved vehicle and cleaning services.

We use the lawful basis appropriate to each purpose. Using the Platform does not waive privacy or consumer rights, and continued use is not treated as consent where the law requires a specific choice.

2. Who is responsible for your information

Zietars is the controller where it decides why and how personal information is used to operate, secure and administer the Platform. An independent service provider may be a separate controller for the limited booking and service information it lawfully uses to assess, accept and perform a booking, comply with professional or legal duties, handle a service issue through Zietars Administration or maintain required records. Responsibility depends on the facts of each processing activity.

Payment, wallet, identity, fraud-prevention and other providers may also act as independent controllers for some processing. Where a supplier acts only on our instructions, it acts as our processor and is subject to contractual data-protection requirements.

3. Information we collect

Please do not provide unnecessary medical, criminal-record or other highly sensitive information in free-text fields or support communications. Where special category information is genuinely required for accessibility, safety or dispute handling, we apply the relevant lawful basis and additional safeguards.

4. Where information comes from

• You, through browsing, registration, bookings, payments, reviews, forms, complaints, support communications and device permissions.
• Service providers, including booking acceptance, service status and completion evidence, cancellations, complaints and evidence supplied to Zietars Administration.
• Payment, wallet, subscription, identity and fraud-prevention providers.
• People who invite you to a shared plan or submit your details for a referral, where permitted.
• Cookies, SDKs, devices, analytics, security logs and public or third-party sources where lawful.

If we receive your information from another source, we provide the privacy information required by law within the applicable period unless a lawful exception applies.

5. Why we use your information and our lawful bases

Where we rely on legitimate interests, we assess the purpose, necessity and impact and apply appropriate safeguards. Where we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

6. Bookings and information made available to service providers

When you request or make a booking, Zietars makes available to the selected service provider only the information reasonably necessary to assess, accept, prepare for and perform the booked service, confirm service status or completion, and assist Zietars Administration with a related issue. This may include your name or customer/booking identifier, service address or location, relevant vehicle or property details, service requirements and instructions, booking date and time, booking status, QR or completion information and other service-related information reasonably necessary to fulfil the booking.

Service providers are not provided with, and cannot view through the Platform, your email address or telephone number. Customers and service providers are not permitted to communicate directly; communications between them are managed through Zietars Administration. Service providers must not attempt to obtain, export, reuse or use customer information for direct contact, off-Platform solicitation or unrelated marketing, except where disclosure is required by law or expressly authorised by Zietars for a lawful purpose.

If another person will receive the service, you must have authority to provide the information needed for the booking and should direct that person to this notice.

7. Payments, Wallet credits and subscriptions

Payment and Wallet providers may collect card, bank, identity, device and transaction information under their own privacy notices and regulatory obligations. Zietars normally receives payment tokens, payment status, card type or last digits, transaction references and reconciliation data rather than full card details.

Wallet credits, discounts, subscription entitlements and refunds may be linked to your account and transaction history. We use these records to perform the contract, prevent duplicate or abusive redemption, reconcile balances and meet applicable accounting duties. The Customer Terms govern whether credits are withdrawable, transferable, refundable or subject to expiry.

8. Shared plans, referrals and information about others

If a shared plan or household/business feature is offered, the organiser may see limited membership, entitlement and usage information explained at sign-up. An organiser cannot consent to optional marketing or unrelated processing for another adult. We disclose no more than needed to administer the feature.

When you refer or invite someone, provide only details you are authorised to share. We use them to deliver and manage the invitation, prevent abuse and record any reward. We do not add the invitee to marketing merely because you supplied their details.

9. Reviews, photographs and public content

Reviews, ratings, display names and uploaded content may be public. Do not publish private contact details, precise location data, vehicle registration plates, faces or other personal information unless appropriate and authorised. We may moderate, redact, investigate or remove content under the Customer Terms.

10. Fraud prevention and Platform integrity

We may compare account, device, location, booking, referral, payment, Wallet and provider information to identify stolen accounts, false or duplicate bookings, collusion, incentive abuse, chargeback fraud, unauthorised resale, off-Platform circumvention or other breaches. Where lawful and proportionate, we may request evidence, restrict an account, preserve records, reverse a benefit where contractually permitted, or disclose relevant information to appropriate providers, payment partners, insurers, advisers or authorities. Risk indicators are not treated as conclusive proof, and materially adverse outcomes can be reviewed by a person where required.

11. Direct marketing and preferences

We may send marketing by email or text where you consent or where applicable law permits us to contact existing customers about similar services and all required conditions are met. You may unsubscribe using the link or instructions in a marketing message or change available preferences in your account. We keep a minimal suppression record to honour opt-outs. Opting out of marketing does not stop necessary booking, security, legal or account messages. We do not sell personal information for third-party direct marketing.

12. Cookies, SDKs and similar technologies

Our Customer Cookies Policy explains our use of cookies and similar technologies and how you can manage your choices. Technologies that require consent are not used before valid consent. Some storage or access technologies may be used without consent where an applicable legal exception is available and its conditions are met. Refusing optional technologies does not prevent access to core services, although related optional features may not work.

13. Automated decisions and profiling

We may use rules or scores to recommend providers, personalise ordering, detect suspicious activity or prioritise review. If Zietars uses solely automated decision-making that produces legal or similarly significant effects, we will provide the additional information and safeguards required by law, including applicable rights to human intervention and challenge.

14. Who receives personal information

• The selected service provider and its authorised staff, limited to the booking/service information reasonably necessary for their role; customer email addresses and telephone numbers are not made available to service providers through the Platform.
• Payment, Wallet, subscription, fraud-prevention and identity providers.
• Hosting, communications, mapping/location, customer support, analytics, security and IT suppliers.
• Insurers, accountants, auditors, lawyers, debt-recovery providers and other professional advisers.
• Advertising or referral partners where lawful and consistent with your choices.
• A prospective buyer, investor or reorganised entity under appropriate confidentiality and due-diligence safeguards.
• Courts, regulators, tax authorities, law enforcement, emergency services or other parties where disclosure is required or legally justified.

Processors may act only on documented instructions and are subject to data-processing terms. Independent controllers are responsible for their own use of personal information.

15. International transfers

Some recipients may process personal information outside the United Kingdom. Where required, we use a lawful UK transfer mechanism and appropriate safeguards. You may contact us for information about safeguards relevant to a transfer, subject to lawful redactions.

16. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including service delivery, accounting and tax obligations, fraud prevention, complaints, legal claims and consent evidence. We consider the nature and sensitivity of the information, legal and contractual requirements, limitation periods, fraud and security needs and whether the purpose can be achieved through anonymisation. Closing an account does not automatically delete every record. When information is no longer needed, we securely delete it or irreversibly anonymise it in accordance with our retention processes.

17. Security and personal-data breaches

We use proportionate organisational and technical measures designed to protect personal information. These may include access controls, multifactor authentication, encryption, logging, supplier checks, secure development practices, vulnerability management, staff training, backups, testing and incident response. No system is completely secure, so please keep your credentials confidential and report suspected account compromise promptly. We investigate personal-data breaches and notify the Information Commissioner’s Office and affected people where required by law.

18. Your rights

• Be informed about our processing.
• Request access to your personal information, subject to applicable rules and exemptions.
• Ask us to correct inaccurate or incomplete information.
• Request erasure where the legal conditions apply.
• Ask us to restrict processing in applicable circumstances.
• Receive certain information you provided in a structured, commonly used, machine-readable format where the legal conditions apply.
• Object to direct marketing at any time and, where applicable, to processing based on legitimate interests.
• Withdraw consent at any time where consent is the basis, without affecting earlier lawful processing.
• Exercise applicable safeguards relating to significant solely automated decisions.
• Raise a concern with us and complain to the Information Commissioner’s Office (ICO).

We normally respond to valid rights requests within the period required by law. We may ask for proportionate evidence of identity or authority. Legal exemptions, obligations, claims or the rights of others may limit what we can provide or do.

19. Privacy requests and complaints

You can contact Zietars using the Contact Us or privacy contact options available on the Platform, or write to the registered office above, to make a privacy request or raise a complaint. Please describe the issue and any relevant account or booking details without sending unnecessary sensitive information. You also have the right to complain to the UK Information Commissioner’s Office using its current published contact channels; you do not have to contact Zietars first.

ICO Website: www.ico.org.uk

20. Children

Customer accounts and bookings are intended for people aged 18 or over. We do not knowingly permit children to open customer accounts or make bookings. If we learn that a child’s information was submitted improperly, we will investigate and take appropriate action in accordance with applicable law.

21. Third-party sites and services

The Platform may link to third-party sites, apps or services. Their privacy notices apply when they independently collect or use personal information. A link or marketplace listing does not mean Zietars controls that processing. Please review the relevant third party’s privacy information before providing personal information.

22. Changes to this notice

We may update this notice when our processing, suppliers or the law changes. We will publish the revised version with a new effective date and provide proportionate notice of material changes where appropriate. We will request fresh consent where legally required; continued use of the Platform is not treated as consent where a specific choice is required.

23. Contact details

Controller: Zietars Limited, company number 14093701.

Registered office: 124 City Road, London, EC1V 2NX, United Kingdom.

Online contact: use the Contact Us or privacy contact options available on the Zietars Platform.