1. Who we are

Zesst (“Zesst”, “we”, “us”, “our”) is a company incorporated in Jersey, Channel Islands, with registered number 165961 and registered office at Le Clos Fromont, St Peter Jersey JE3 7 ED We are the data controller for the personal data described in this policy.

2. Our approach to data protection

We process personal data in accordance with the Data Protection (Jersey) Law 2018, which sets out data protection standards equivalent to the UK/EU GDPR. Where we process data of individuals in the UK or EEA (for example, prospective clients or contacts of clients based there), we also apply UK GDPR / EU GDPR standards.

3. What data we collect

Depending on how you interact with us, we may collect:

• Contact details you provide via our website, email, or in person (name, job title, company, email address, phone number)

• Information you submit through contact or enquiry forms

• Technical data collected automatically (IP address, browser type, device information, pages visited) — see our Cookie Policy for detail

• Information shared with us in the course of a client engagement, which is governed separately by the relevant client contract and any applicable data processing agreement

4. Why we process it and our legal basis

• To respond to enquiries and provide quotations — legitimate interests / steps taken at your request prior to a contract

• To perform a contract with you or your organisation — contractual necessity

• To operate and improve our website — legitimate interests

• To send marketing communications, where you have opted in — consent (you may withdraw this at any time)

• To comply with legal, tax, and regulatory obligations, including anti-money laundering obligations relevant to our regulated-sector consultancy work — legal obligation

5. Who we share it with

We may share personal data with:

• Sub-processors and service providers who support our operations (e.g., hosting, email, CRM providers), under appropriate data processing agreements

• Professional advisers (legal, accountancy) where necessary

• Regulators or authorities where we are legally required to do so

We do not sell personal data.

6. International transfers

Where personal data is transferred outside Jersey, the UK, or the EEA, we ensure an appropriate transfer mechanism is in place (such as Standard Contractual Clauses or an adequacy finding) before the transfer takes place.

7. Retention

We retain personal data only for as long as necessary for the purposes it was collected, including to satisfy legal, accounting, or reporting obligations. Enquiry data not converted into a client relationship is deleted after [12 months] unless you ask us to keep it longer.

8. Your rights

Under the DPJL (and, where applicable, UK/EU GDPR), you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request erasure, in certain circumstances

• Object to or restrict certain processing

• Request data portability

• Withdraw consent at any time, where processing is based on consent

• Lodge a complaint with the Jersey Office of the Information Commissioner (jerseyoic.org), or with the relevant supervisory authority in your own jurisdiction

To exercise any of these rights, contact us at [privacy email address].

9. Cookies

See our Cookie Policy for details of the cookies and similar technologies used on this site.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.

11. Contact us

Zesst Limited

Registered office address: Le Clos Fromont, St Peter Jersey JE3 7 ED

Contact email: hello@zesst.io