Legal
Privacy policy
Last updated: 26 September 2026
This policy explains what personal data INTZERO LTD ("intzero", "we", "us") processes when you visit intzero.com or contact us, why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Cyprus data protection law.
It covers this website only. Personal data processed while delivering our software and services to clients is governed by the relevant client agreement.
1. Who is responsible
The controller of your personal data is:
- Company
- INTZERO LTD
- Registered office
- Kavafi 12, Office 205, 4044 Germasogeia, Limassol, Cyprus
- Registration no.
- HE 378861 (Registrar of Companies, Cyprus)
- VAT no.
- CY10378861F
- info@intzero.com
- Phone
- +357 25 550013
For any privacy question or request, email info@intzero.com with "Privacy" in the subject line.
2. What we collect and why
a) When you browse the website
Our web server automatically records technical information with each request: IP address, date and time, the page requested, HTTP status, referring page and browser/device type (user agent). We use it only to deliver the website, keep it secure, detect and prevent abuse, and fix errors.
Legal basis: our legitimate interest in operating a secure and reliable website (Art. 6(1)(f) GDPR).
b) When you use the contact or free-trial form
We collect the details you enter: your email address and, where you provide them, your name, company, the solution you are interested in and your message. We also record the page the form was sent from, the time, your IP address and browser type, to handle your request and protect the form from abuse.
Your submission is delivered to our support system (support.intzero.com), where our team handles and answers it. We use this information to answer your enquiry, set up a trial you asked for, and follow up on it.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Where you contact us on behalf of a company, our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).
You do not have to give us your personal data, but without an email address we cannot reply.
c) When you email or call us
We process your contact details and the content of your message to respond, on the same legal bases as above.
d) Website statistics (Cloudflare Web Analytics)
To understand how the website is used (for example, which pages are visited and which sites refer visitors to us), we use Cloudflare Web Analytics, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. It records the page viewed, the referring page, browser and device type, country and page-load performance. It does not use cookies or local storage, does not fingerprint your device, and does not track you across websites. We only see aggregated statistics, not individual visitors.
Legal basis: our legitimate interest in understanding and improving our website (Art. 6(1)(f) GDPR). You can object at any time, for example by blocking the script static.cloudflareinsights.com in your browser.
3. Spam protection
We protect our forms against automated spam with measures that run on our own server: a hidden field that only bots fill in, a check on how quickly the form was completed, and limits on how many messages can be sent from one IP address. No third-party service is involved.
Legal basis: our legitimate interest in protecting our forms and mailbox from abuse (Art. 6(1)(f) GDPR).
4. Cookies
This website does not set cookies and does not use advertising or social-media tracking. Our website statistics are cookieless (see 2d). For details, see our cookie policy.
5. Who receives your data
We do not sell your personal data or share it for marketing. We share it only with service providers who help us run the website and our email, under data processing agreements and only as far as necessary:
- Contabo GmbH (Munich, Germany): hosting of this website and our support system, on servers in the EU.
- Google Ireland Limited (Dublin, Ireland), as part of Google Workspace: delivery and storage of our business email, including messages sent through our forms.
- Cloudflare, Inc. (USA): website statistics, as described above.
We may also disclose data where the law requires it, or where it is necessary to establish, exercise or defend legal claims.
6. International transfers
Our website runs on servers in the European Union. Google may process email data outside the EU, including in the United States, and so may Cloudflare. Such transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
7. How long we keep it
- Server and security logs: up to 30 days, unless needed longer to investigate a specific security incident.
- Enquiries and trial requests: up to 24 months after our last contact with you. If you become a client, we keep correspondence for as long as the business relationship lasts plus any period required by law (for example, for tax and accounting).
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- receive your data in a portable format (data portability);
- object at any time to processing based on our legitimate interests;
- withdraw any consent you have given, without affecting processing that took place before.
To exercise any of these rights, email info@intzero.com. We will respond within one month. We may ask you to confirm your identity first.
You also have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Commissioner for Personal Data Protection. You may also complain to the authority in the EU country where you live or work.
9. Security
We protect personal data with appropriate technical and organisational measures. These include encrypted connections (HTTPS), access controls, rate limiting and protection against automated abuse.
10. Automated decisions
We do not make decisions about you based solely on automated processing, including profiling.
11. Children
Our website and services are intended for businesses and are not directed at children. We do not knowingly collect data from anyone under 16.
12. Changes to this policy
We may update this policy, for example when we change how the website works. The current version is always published on this page, with the date of the last update at the top.