PRIVACY POLICY

Operated by Zalth

Effective Date: 10 November 2026

Data Controller: Zalth, 1 St Cross Lane, Isle of Wight, PO30 5PZ

Contact Email: info@zalth.co.uk

1. Introduction and Compliance

This Privacy Policy explains how Zalth (“we,” “us,” or “our”) collects, uses, processes, and protects your personal data. We are fully committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Data We Collect

We believe in data minimisation. We strictly collect and hold only the personal information absolutely necessary to fulfill your order, process your billing, and manage your account within our web application. We collect:

  • Identity Data: First name and last name.
  • Contact Data: Physical delivery/billing address, telephone number(s), and email address.
  • Financial Data: Bank card or payment method details.
  • Emergency Contact Data: Names, phone numbers, and designated priority order of the third-party responders (family, friends, or caregivers) entered into our web application dashboard by you.
  • Location Data: Encrypted real-time GPS, Wi-Fi, and LBS location tracking coordinates transmitted by the device during alert states to assist your designated responders.
  • What we do NOT collect: We do not collect or store medical history, health records, or personal lifestyle data. Because our personal alarm services are completely unmonitored by us, we do not log or track live emergency event descriptions or situational triage notes.

    3. How We Collect Your Data

    You provide this data to us directly when you:

  • Register an account on our web application.
  • Purchase an Eview EV-04 hardware device.
  • Input or edit your family/emergency contact names and telephone numbers within your account dashboard.
  • Set up your recurring monthly cellular service subscription.
  • 4. Legal Basis for Processing Your Data

    Under the UK GDPR, we rely on the following lawful bases to process your information:

  • Performance of a Contract: We need your name, address, email, telephone number, and payment details to deliver your physical device within 7 working days, set up your cellular line, and handle your monthly service billing.
  • Legitimate Interests: Processing emergency contact details and location data is necessary to provide the core safety functionality of the unmonitored family alert system you have purchased.
  • Legal Obligation: We may process your data to comply with statutory accounting, tax, or corporate legal obligations in the UK.
  • 5. How We Use and Share Your Data

    5.1 Internal Use: We use your data to manage your 12-month minimum contract, handle webapp updates, and contact you if an automated monthly payment fails.

    5.2 Payment Processing (Financial Data Security): We do not directly store raw, unencrypted bank card numbers on our servers. All financial transactions are securely handled by our third-party payment gateway provider. Your payment details are tokenised and encrypted to the highest industry standards.

    5.3 Cellular Network Infrastructure: Your device's cellular line is provisioned through our third-party network provider (1pMobile/EE). We pass only the technical profile data required to maintain your SIM card’s network connectivity.

    5.4 No Third-Party Marketing: We will never sell, rent, swap, or distribute your personal details to any third-party companies for marketing, advertising, or profiling purposes.

    6. Data Retention: How Long We Keep Your Data

    6.1 Active Subscriptions: We retain your name, address, phone number, email, and tokenised payment details for the entire duration of your active subscription contract.

    6.2 Location Data Retention: Real-time tracking coordinates transmitted by the EV-04 pendant are treated with strict confidentiality. This data is encrypted both in transit and at rest, and is automatically overwritten or purged on a short rolling schedule.

    6.3 Account Cancellation or Deletion: If your service is cancelled or your line is permanently deleted due to non-payment following your 7-day grace period, we will securely archive or permanently delete your account data. Under UK tax law, financial transaction history records must be retained for six (6) years following the transaction date.

    7. Your Legal Rights Under UK GDPR

    You hold the following rights regarding the personal information we maintain:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can instantly correct or update your name, address, or phone number directly at any time via our web application dashboard.
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your data, subject to our legal obligations to retain billing histories or contractual balances during an active 12-month minimum term. Emergency contacts who have been designated by a customer also hold an independent right to request immediate erasure of their contact details from our systems.
  • Right to Restrict or Object to Processing: You have the right to limit how we use your data under specific statutory conditions.
  • To exercise any of these rights, please contact our administration team at info@zalth.co.uk. We will respond to all valid requests within thirty (30) days.