1. Who We Are
Zanarc Limited (“Zanarc”, “we”, “us”, “our”) is a New Zealand-registered company providing independent cybersecurity assurance and advisory services specialising in blockchain and virtual asset security.
2. What Personal Data We Collect
When you use the contact form on our website, we collect the following personal data:
- First name
- Last name
- Email address
- Any additional information you choose to include in your message
We do not collect sensitive personal data, payment information, or any data from minors under the age of 16.
3. Why We Collect Your Data (Legal Basis)
We collect and process your personal data for the following purposes:
To respond to your enquiry, when you submit our contact form, we use your name and email address to respond to your message. The legal basis for this processing is our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).
To communicate with prospective clients, if you have enquired about our services, we may follow up with relevant information. The legal basis is legitimate interest (Article 6(1)(f) GDPR). You may opt out of further communication at any time.
4. How Long We Keep Your Data
We retain contact form submissions and associated correspondence for up to 3 years from the date of last contact, unless a longer retention period is required by law or necessary for the performance of a contract.
5. Who We Share Your Data With
We do not sell, rent or trade your personal data to third parties.
We may share your data with the following trusted service providers who assist us in operating our website and business:
- WordPress / website hosting provider — for website operation
- Email service provider — for sending and receiving email communications
- Cloudflare — for website security and content delivery
All third-party providers are required to handle your data in accordance with applicable privacy laws.
6. International Data Transfers
Zanarc Limited is based in New Zealand, which is recognised by the European Commission as providing an adequate level of data protection for transfers of personal data from the European Economic Area (EEA).
Where data is transferred to third-party service providers outside New Zealand or the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
7. Your Rights Under GDPR
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:
- Right of access — you may request a copy of the personal data we hold about you
- Right to rectification — you may request correction of inaccurate or incomplete data
- Right to erasure — you may request deletion of your personal data (“right to be forgotten”)
- Right to restrict processing — you may request that we limit how we use your data
- Right to data portability — you may request your data in a structured, machine-readable format
- Right to object — you may object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at marc@zanarc.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority. In the EU, this is your national supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO) at ico.org.uk.
8. Your Rights Under New Zealand Privacy Law
Under the New Zealand Privacy Act 2020, you have the right to:
- Access personal information we hold about you
- Request correction of your personal information
- Make a complaint to the Office of the Privacy Commissioner if you believe we have breached the Privacy Act
To exercise these rights, contact us at marc@zanarc.com.
9. Cookies
Our website uses cookies. For full details of the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
You can manage your cookie preferences at any time via the cookie banner on our website.
10. Website Analytics
Our website may use analytics tools to understand how visitors interact with our content. Any such tools are subject to your cookie consent and are detailed in our Cookie Policy.
11. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our website is protected by Cloudflare security services.
12. Links to Other Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The date of the most recent update is shown at the top of this page. We encourage you to review this policy periodically.
14. Contact Us
For any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us
Zanarc Limited Last updated: 26 June 2026