Privacy Policy
Last updated: 2026
Zeph Desk is the data controller for personal data processed through the Service. We are committed to protecting your privacy and complying with the UK GDPR and the Data Protection Act 2018.
What we collect
Waitlist/account data (name, email, self-selected experience level, sign-up source); academy and product data (progress, quiz answers, written submissions, replay/behaviour activity, display name — some stored locally on your device); support messages; and privacy-light, aggregated analytics. We do not store your payment card details (handled by Stripe), and we never ask for your broker credentials or balances.
Why we process it
Consent (waitlist and product emails — withdrawable any time); contract (to provide what you signed up for); and legitimate interests (to run, secure and improve the Service, using privacy-light aggregate analytics).
Who we share it with
Trusted processors under contract: Vercel (hosting, private sign-up storage, cookieless Web Analytics), FormSubmit (waitlist email relay), Stripe (payments, once live), and our email provider. We do not sell your data. Any transfers outside the UK/EEA rely on appropriate safeguards.
How long we keep it
Account/waitlist data while active and for a limited period after, then deleted or anonymised; academy data for the life of your account; analytics in aggregate only. You can request earlier deletion.
Your rights
You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. Email zepphouk@gmail.com to exercise any right. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Security & children
We use access controls, HTTPS, and private storage of sign-up data; no system is perfectly secure but we act promptly on any issue. The Service is not intended for anyone under 18.
Contact: zepphouk@gmail.com.