# Zenda | Privacy Policy

> How Shockoe.com, LLC collects, uses, and protects personal information on the Zenda website (zenda.cx), including UK/EU GDPR and California (CCPA/CPRA) rights.

https://zenda.cx/privacy

# Privacy Policy

Effective date: August 30, 2026

## 1. Who we are

This website, zenda.cx (the “Site”), is operated by Shockoe.com, LLC (“Shockoe”, “we”, “us”), a company based in Richmond, Virginia, USA. Shockoe is the controller of personal information collected through the Site. Zenda is a product of Shockoe. You can reach us about privacy at website@shockoe.com.

## 2. Scope of this policy

This policy explains how we handle personal information collected through this marketing Site — for example when you request a demo or contact us. It does not cover personal data that Shockoe processes on behalf of a customer inside a live Zenda deployment; that data is processed under the customer’s agreement with Shockoe and the customer’s own privacy notices, where Shockoe acts as a processor / service provider.

## 3. Information we collect

### Information you give us

When you submit the demo-request form or otherwise contact us, we collect your work email address and any information you choose to include in your message.

### Information collected automatically

When you visit the Site, we and our providers collect technical information through cookies and similar technologies, including your IP address, browser and device type, operating system, referring page, the pages and links you interact with, approximate location derived from your IP address, and the date and time of your visit. Our forms provider also records technical metadata with each submission (such as IP address and the page the form was submitted from).

### Sensitive information

We do not ask for and request that you do not send us special-category or sensitive personal information through the Site.

## 4. Cookies and analytics

We use a small number of cookies and similar technologies:

You can control or delete cookies through your browser settings, and you can opt out of Google Analytics using Google’s opt-out browser add-on. Blocking cookies may affect how parts of the Site work.

## 5. How we use information and our legal bases

Where UK or EU data protection law applies, our legal bases are: your consent (for analytics and marketing cookies); our legitimate interests in responding to your enquiry, running and securing the Site, and understanding and growing our business; and compliance with a legal obligation.

## 6. How we share information

We share personal information with service providers who process it on our behalf and under contract:

We may also disclose information where required to comply with law or legal process, to enforce our terms, to protect the rights, property, or safety of Shockoe or others, or in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

## 7. International transfers

We are based in the United States and process personal information there. Where information is transferred from the United Kingdom or the European Economic Area, we rely on appropriate safeguards with our providers, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

## 8. How long we keep information

We keep demo-request and contact information for as long as needed to act on your request and, after that, for a reasonable period for follow-up, record-keeping, and legal purposes, after which it is deleted or anonymized. Analytics information is retained according to our providers’ retention settings.

## 9. Your rights

### United Kingdom and European Economic Area

You have the right to access, correct, delete, or receive a portable copy of your personal information; to restrict or object to certain processing; and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).

### California (CCPA/CPRA)

You have the right to know what personal information we collect and how we use and disclose it, to request access to and deletion or correction of that information, and to not be discriminated against for exercising your rights. Because we do not sell or share personal information as defined by California law, no opt-out of sale/sharing is required.

### How to exercise your rights

Email website@shockoe.com. We may need to verify your identity before acting on a request, and you may use an authorized agent where permitted by law.

## 10. Children

The Site is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children.

## 11. Security

We use reasonable technical and organizational measures to protect personal information. For more detail, see our Security & Compliance page. No method of transmission or storage is completely secure.

## 12. Third-party links

The Site links to other websites, including shockoe.com and our providers’ sites. We are not responsible for the privacy practices of sites we do not operate.

## 13. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice.

## 14. Contact

Shockoe.com, LLC · Richmond, Virginia, USA · website@shockoe.com