Legal
Privacy policy
Last updated: 31 October 2026
This policy explains what personal information I collect through this website and when you work with me, why I collect it, how long I keep it and what your rights are. It’s written to be read, not just to tick a box. If anything is unclear, email hello@zdmedia.co.uk.
Who is responsible for your information
zdmedia is a trading name of ZD Wholesale Limited. ZD Wholesale Limited is the data controller for the personal information described here.
- Trading name: zdmedia
- Company: ZD Wholesale Limited, registered in England and Wales
- Email: hello@zdmedia.co.uk
What I collect
When you send an enquiry
Your name, email address, business name (if you give it), type of business, what you need and your rough budget (if you choose one).
When you become a client
Contact details, the information you share about your business and project, correspondence, and the billing details needed to invoice you.
When you visit the site
The site is hosted on Cloudflare, which processes technical information such as your IP address, browser type and the pages requested. This is used to deliver the site and protect it from attacks and abuse. I don’t use advertising or tracking cookies, and I don’t build profiles of visitors. See the cookie policy.
The interactive examples on this site run entirely in your browser. Anything you click or choose in them isn’t sent to me or stored.
Why I use it, and the legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Replying to your enquiry and preparing a quote | Taking steps at your request before entering a contract, and legitimate interests in responding to enquiries |
| Delivering and supporting the work you’ve asked for | Performance of a contract |
| Invoicing and keeping financial records | Legal obligation |
| Keeping the website secure and working | Legitimate interests |
I don’t sell your information, and I don’t use it for marketing unless you’ve asked to hear from me.
Who I share it with
I only share personal information with services that help me run the business, and only what they need:
- Cloudflare hosts this website and protects it from attacks.
- Resend delivers enquiries from the contact form to my inbox.
- My email, accounting and file-storage providers, for running the business day to day.
- My accountant and HMRC, where needed for tax and legal reasons.
Some of these providers process data outside the UK, including in the United States. Where that happens, the transfer is protected by safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework.
How long I keep it
- Enquiries that don’t lead to work: deleted after 12 months.
- Client project records and correspondence: kept for as long as I’m working with you, then for up to 6 years.
- Invoices and financial records: kept for 6 years, as required for tax purposes.
How I protect it
Information is stored with reputable providers that use encryption and access controls. Access is limited to me. Nothing online is ever completely risk-free, but I take reasonable steps to keep your information safe, and I’ll tell you and the ICO if a breach affects you where the law requires it.
Your rights
Under UK data protection law you can ask me to:
- give you a copy of the information I hold about you
- correct anything that’s wrong
- delete your information, where I don’t need to keep it for legal reasons
- restrict or stop using it, or object to how it’s used
- send your information to you or another provider in a usable format
Email hello@zdmedia.co.uk to make a request. I’ll reply within one month, and there’s normally no charge.
Complaints
If you’re unhappy with how your information has been handled, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
If this policy changes, the new version will be posted here with an updated date.