Privacy Policy

This Privacy Notice for Zebra B Ltd (doing business as Zebra EM) describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you visit zebra-em.com or use our mobile applications.

At Zebra EM, we prioritise the protection of your personal and business data across all our products and services. We are committed to ensuring transparency and compliance with global privacy standards such as GDPR, CCPA, and ISO 27001.

Questions or concerns? Contact us at system@zebra-em.com.

1. What Information Do We Collect?

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide when you register, express interest in our services, participate in activities, or contact us. This may include:

• Names
• Phone numbers
• Email addresses
• Job titles
• Usernames & passwords
• Contact preferences
• Debit/credit card numbers
• Billing and mailing addresses

Sensitive Information: We do not process sensitive information.

Payment Data: Payment data is handled and stored by Stripe. We do not store your card details.

Social Media Login Data: If you register using a social media account (Facebook, X, etc.), we will collect certain profile information from that provider as described in Section 7.

Application Data

If you use our mobile applications, we may collect:

• Geolocation Information — to provide location-based services (can be disabled in device settings).
• Mobile Device Access — camera, Bluetooth, calendar, contacts, microphone, storage, and other features (can be revoked in device settings).
• Device Data — device ID, model, OS version, browser type, IP address, and app usage details.
• Push Notifications — you may opt out via your device settings.

Information Automatically Collected

When you visit our Services we automatically collect device and usage information such as IP address, browser characteristics, OS, language preferences, referring URLs, and technical information. This includes:

• Log and Usage Data — IP address, device info, browser type, pages viewed, date/time stamps, and crash reports.
• Device Data — computer, phone, tablet, or other device information.
• Location Data — approximate or precise device location. You may opt out via device settings, though some features may be affected.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Process Your Information?

We process your personal information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. Specific purposes include:

• Facilitate account creation and authentication.
• Deliver and facilitate services requested by you.
• Respond to enquiries and provide user support.
• Send administrative information, policy updates, and service notices.
• Fulfil and manage orders, payments, returns, and exchanges.
• Enable user-to-user communications.
• Request feedback about our Services.
• Send marketing and promotional communications (you can opt out at any time).
• Protect our Services through fraud monitoring and prevention.
• Identify usage trends to improve our Services.
• Protect an individual's vital interests where necessary.

3. What Legal Bases Do We Rely On?

We only process your personal information when we have a valid legal basis. For users in the EU/UK, we rely on:

• Consent — you have given permission for a specific purpose. You may withdraw consent at any time.
• Performance of a Contract — processing is necessary to fulfil our contractual obligations to you.
• Legitimate Interests — processing is reasonably necessary for our business interests, including sending information about special offers, analysing usage, diagnosing problems, and improving user experience.
• Legal Obligations — to comply with laws, cooperate with regulatory agencies, or defend legal rights.
• Vital Interests — to protect your safety or that of a third party.

For users in Canada, we process with express or implied consent where required, or under legal exceptions such as fraud prevention, business transactions, or compliance with subpoenas and court orders.

4. When and With Whom Do We Share Your Personal Information?

We may share your personal information in the following situations:

• Business Transfers — in connection with any merger, sale of company assets, financing, or acquisition.
• Business Partners — to offer you certain products, services, or promotions.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months and will not do so in the future.

5. Do We Use Cookies and Other Tracking Technologies?

We may use cookies and similar tracking technologies (web beacons, pixels) to gather information when you interact with our Services — to maintain security, prevent crashes, fix bugs, save preferences, and assist with basic site functions.

We also permit third parties to use tracking technologies for analytics and advertising. For full details, see our Cookie Notice.

Google Analytics: We may share information with Google Analytics, including Demographics & Interests Reporting and Remarketing features. To opt out, visit Google Analytics Opt-out.

6. Do We Offer Artificial Intelligence-Based Products?

Yes. We offer products, features, and tools powered by artificial intelligence, machine learning, and similar technologies ("AI Products"), including AI automation capabilities. These are provided through third-party AI Service Providers including Amazon Web Services (AWS) AI and Google Cloud AI.

Your input, output, and personal information will be shared with and processed by these AI Service Providers as described in this Privacy Notice. You must not use our AI Products in any way that violates the terms of any AI Service Provider.

To opt out of AI data processing, please contact us using the details in Section 16.

7. How Do We Handle Your Social Logins?

Our Services allow you to register and log in using third-party social media accounts (Facebook, X, etc.). When you do, we receive certain profile information from your social media provider — typically your name, email address, friends list, and profile picture.

We use this information only for the purposes described in this Privacy Notice. We are not responsible for other uses of your personal information by third-party social media providers and recommend reviewing their privacy notices.

8. How Long Do We Keep Your Information?

We retain your personal information only as long as necessary to fulfil the purposes outlined in this notice, unless a longer period is required by law (e.g., tax, accounting, or legal requirements).

We will not keep your personal information for longer than six (6) months past the termination of your account. When we have no ongoing legitimate need to process your information, we will delete or anonymise it — or, if this is not possible (e.g., backup archives), securely store and isolate it from further processing until deletion is possible.

9. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organisational security measures to protect your personal information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

While we will do our best to protect your information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. Do We Collect Information from Minors?

We do not knowingly collect data from or market to children under 18 years of age. By using our Services, you represent that you are at least 18 years old.

If we learn that personal information from users under 18 has been collected, we will deactivate the account and promptly delete the data. If you become aware of any such data, please contact us at david@zebra-em.com.

11. What Are Your Privacy Rights?

Depending on your location — particularly the EEA, UK, Switzerland, and Canada — you may have the following rights:

• Request access to and obtain a copy of your personal information.
• Request rectification or erasure of your personal information.
• Restrict the processing of your personal information.
• Data portability (where applicable).
• Not be subject to automated decision-making.
• Object to the processing of your personal information.

To exercise these rights, contact us using the details in Section 16.

EEA/UK users: If you believe we are unlawfully processing your data, you may complain to your Member State data protection authority or the UK Information Commissioner's Office.

Withdrawing consent: You may withdraw consent at any time by contacting us. This does not affect the lawfulness of processing carried out prior to withdrawal.

Opting out of marketing: Click the unsubscribe link in our emails, reply 'STOP' to SMS messages, or contact us directly. You will still receive necessary service-related communications.

Cookies: You can set your browser to remove or reject cookies, though this may affect some features. See our Cookie Notice for more information.

12. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ('DNT') feature. As there is currently no uniform technology standard for recognising and implementing DNT signals, we do not currently respond to them. California law requires us to disclose this — we do not respond to DNT browser signals at this time. If a standard is adopted that we must follow, we will update this Privacy Notice accordingly.

13. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have specific rights regarding your personal information, including:

• Right to know whether we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies in your personal data.
• Right to request deletion of your personal data.
• Right to obtain a copy of previously shared personal data.
• Right to non-discrimination for exercising your rights.
• Right to opt out of targeted advertising, sale of personal data, or profiling.

We have collected only geolocation data (Category G) in the past 12 months. We have not disclosed, sold, or shared personal information to third parties for commercial purposes in the past 12 months and will not do so in the future.

To exercise your rights, submit a data subject access request, email us at enquiries@zebra-em.com, or visit zebra-em.com/contactus.

Appeals: If we decline your request, you may appeal by emailing system@zebra-em.com. If your appeal is denied, you may submit a complaint to your state attorney general.

California 'Shine The Light' Law: California residents may request information about personal information disclosed to third parties for direct marketing once per year, free of charge. Submit requests in writing using the contact details in Section 16.

14. Do Other Regions Have Specific Privacy Rights?

Australia and New Zealand

We collect and process personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You have the right to request access to or correction of your personal information at any time. If you believe we are unlawfully processing your data, you may contact the Office of the Australian Information Commissioner or the Office of New Zealand Privacy Commissioner.

Republic of South Africa

You have the right to request access to or correction of your personal information at any time. Complaints may be directed to the Information Regulator (South Africa):

• General enquiries: enquiries@inforegulator.org.za
• POPIA complaints: POPIAComplaints@inforegulator.org.za

15. Do We Make Updates to This Notice?

Yes, we may update this Privacy Notice from time to time to stay compliant with relevant laws. The updated version will be indicated by a revised date at the top of this page. If we make material changes, we may notify you by posting a prominent notice or sending you a direct notification. We encourage you to review this Privacy Notice periodically.

16. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, please contact our Data Protection Officer (DPO):

17. How Can You Review, Update, or Delete Your Data?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, request correction of inaccuracies, or request deletion of your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To submit a request, please email us at enquiries@zebra-em.com or contact us using the details provided in Section 16 above.