Privacy policy

1. Scope

This policy covers the ziro.vn website and the demo request form on it.

Data that customer companies enter into the Ziro Office software (staff records, contracts, documents…) belongs to those companies and is handled under the contract between us, not under this page.

2. What we collect

When you send the demo request form, we receive:

• Your name, work email, phone number and company name
• Company size and the deployment option you are interested in
• Anything you write in the notes box
• The language of the page you were reading
• When you gave consent and which version of the consent wording you read

We do not ask for or collect sensitive personal data. The website uses no tracking cookies or behaviour analytics. Your IP address is used on the spot to limit how often the form can be sent, to stop spam, and is not stored with your contact details.

3. What we use it for

• Calling or emailing you to advise and arrange a demo
• Sending the quote and documents you ask for
• Sending news about features and events, only if you tick the separate newsletter box (optional and recorded separately)

We do not sell your details or share them with anyone else for marketing.

4. Legal basis

We process your data on the basis of your consent, given when you tick the consent box on the form. The box is never pre-ticked. You can withdraw consent at any time; withdrawing does not affect processing that was lawful before.

5. How long we keep it

• If we don't sign a contract: your details are permanently deleted 24 months after the latest contact, update or exchange with you. The deletion runs automatically every day.
• If you become a customer: contact details are kept under the service contract.
• Newsletter consent: valid until you withdraw it.

Deleted means removed from the CRM database, not hidden. The one exception is the system's audit log, which records who did what so we can prove data was handled lawfully, and which nobody can edit: it may still hold your name and record id. Only internal control staff can see it, and it is never used to contact you or for marketing.

6. Who can see your details

Only Ziro Office sales and customer care staff, as part of their work. The details sit in our own CRM, which has role-based access and records who viewed or changed what. Our hosting provider only stores the data on our behalf under contract and may not use it for anything else.

7. Your rights

You can see, correct or ask us to delete your data, withdraw consent, ask us to restrict processing, and complain. Email [email protected] from the address you registered with. We reply within 2 working days and act within the deadlines set by Decree 356/2025/ND-CP:

• Providing or correcting data: within 10 days
• Withdrawing consent, restricting processing: within 15 days
• Deleting data: within 20 days

8. How we protect it

Data travels over an encrypted connection (HTTPS). Access is role-based, and every change to a lead record is logged.

9. Changes to this policy

When this policy changes, we update the date at the top. If the consent wording on the form changes, later requests record the new version; what you agreed to before stays as it was.

10. Contact

For any question about your personal data, email [email protected].