Privacy Policy

Introduction

zenithcorres Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website zenithcorres.pro or use our patient scheduling software guidance services.

Data Controller

zenithcorres Ltd is the data controller for the purposes of the General Data Protection Regulation (GDPR). Our company is registered in Cyprus with registration number HE358149 and VAT number CY35269817X. Our registered address is Poseidonos Avenue 50, Paphos, 8000, Paphos District, Cyprus.

Data Collection

The data we collect helps us provide better services and improve your experience. We may collect and process the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Practice type, professional role, healthcare facility details
• Communication Data: Messages, enquiries, and correspondence with our team
• Technical Information: IP address, browser type, device information, website usage data
• Marketing and Communications: Your preferences for receiving marketing communications

How We Use Your Information

We use the personal data we collect for the following purposes, based on legitimate business interests, contract performance, or your consent:

• To provide patient scheduling software guidance and consultation services
• To respond to your enquiries and provide customer support
• To improve our website and services through analytics and user feedback
• To send you relevant information about our services (with your consent)
• To comply with legal obligations and protect our legitimate interests
• To personalise your experience and provide tailored recommendations

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for specific processing activities
• Contract Performance: To fulfil our contractual obligations in providing services
• Legitimate Interests: For business operations, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (hosting, analytics, email services)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Protection: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with any merger, sale of assets, or acquisition

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally, we retain contact information for active business relationships and for up to 7 years after the last contact for legal and business purposes. Marketing data is retained until you withdraw consent or request deletion.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection.

International Data Transfers

As we are based in Cyprus (EU), your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you would like to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection if you believe that our processing of your personal data violates the GDPR or local data protection laws.