Privacy policy
Last updated 17 August 2026
This policy explains what this website collects, why, and what you can do about it. It covers thezenithdigital.com and the enquiry forms on it. It is written to be read, not to be survived.
Who is responsible for your data
Zenith Digital is the trading name of MILORAD MAODUS PR RACUNARSKO PROGRAMIRANJE ZENITH DIGITAL KANJIZA, registered in Serbia. We decide what happens to the personal data described here, which makes us the data controller for it.
For anything in this policy, including any request about your own data, write to hello@thezenithdigital.com and a person will answer.
What we collect, and when
We collect the following, and nothing else. There is no account system, no newsletter, and no advertising or profiling on this site.
| When | What | Why |
|---|---|---|
| You send the contact form | Name, email, message, and optionally phone and website | To answer your enquiry |
| You request a free website audit | Website address, email, and an optional note | To review your site and send you the audit |
| You apply to partner with us | Agency name, your name, email, website, the track you want, and an optional note | To assess and answer the application |
| You book a call | Whatever you enter in the Cal.com booking form | To schedule the call. Cal.com handles this under its own policy |
| You submit any form | Your IP address, held in memory for up to one hour | To rate-limit submissions and block spam |
| You accept analytics cookies | Pages viewed, approximate location, device and browser, referring site | To see which pages earn their place |
| Any visit | Standard server logs, including IP address, kept by our host | Security and keeping the site running |
Cookies and analytics
This site sets no analytics cookies until you accept them. Google Analytics loads with consent defaulted to denied, which means it sends anonymous, cookieless signals only. If you accept, it sets its usual cookies. If you decline, it never does.
Advertising and personalisation storage stay switched off permanently, whatever you choose, because this site runs no ad products.
Your answer is remembered in your browser's local storage under the key zd-analytics-consent. Clearing your browser storage for this site makes the banner ask again.
Who else touches your data
We use a small number of established providers. They process data on our instructions and for no purpose of their own.
| Provider | What it does | Where |
|---|---|---|
| Vercel | Hosts the site and keeps server logs | Global edge network |
| Supabase | Stores form submissions in a Postgres database | Frankfurt, Germany (EU) |
| Resend | Delivers the notification email to us | EU and US |
| Google Analytics | Website analytics, only after you accept | Google infrastructure, EU and US |
| Cal.com | The booking calendar embedded on the book a call page | EU and US |
We do not sell your data, share it with advertisers, or pass it to anyone else. Serbia sits outside the EEA and the UK, so data reaching us is transferred to a third country. Where that happens we rely on the appropriate safeguards available under the relevant law, and the volume involved is limited to the enquiry data above.
Why we are allowed to hold it
- Enquiry and application data: we process it to take steps at your request before entering a contract, and because we have a legitimate interest in answering people who contact us.
- Analytics: your consent, given through the banner and withdrawable at any time.
- Server logs and rate limiting: our legitimate interest in keeping the site available and free of spam.
How long we keep it
- Enquiries, audit requests and partner applications: kept while the conversation is live, and for up to 24 months afterwards so we can pick up where we left off. Ask us to delete yours sooner and we will.
- Rate-limiting records: up to one hour, and they are lost whenever the site redeploys.
- Analytics: retained by Google under the retention period set on the property.
- Server logs: retained by our host under its own schedule.
Your rights
If you are in the UK or the EU, the GDPR gives you the rights below. If you are in Serbia, the Law on Personal Data Protection gives you equivalent ones. We apply them to everyone who asks, wherever you are, because maintaining two standards is not worth anyone's time.
- Ask what we hold about you, and get a copy.
- Have anything wrong corrected.
- Have it deleted.
- Object to processing, or ask us to restrict it.
- Receive your data in a portable format.
- Withdraw consent for analytics at any time, without affecting anything processed before.
Email hello@thezenithdigital.com and we will action it within 30 days. If you think we have handled your data badly, you can complain to your national data protection authority, or in Serbia to the Commissioner for Information of Public Importance and Personal Data Protection.
Children
This site sells business services and is not intended for children. We do not knowingly collect data from anyone under 16.
Changes
If this policy changes, the date at the top changes with it. Material changes to how we use existing data will be told to anyone affected directly, not buried here.