Privacy Policy.
What zeroevoke.com processes when you read it or contact us, who else can see it, how long it is kept, and how to have it removed.
Last updated 23 August 2026This policy covers the website zeroevoke.com and the contact channels on it — the message form. It does not cover systems we design, build or operate for clients; those are governed by the data processing agreement in the relevant contract.
The Short Version
- There is no account, no login and no payment anywhere on this site. We never ask who you are in order to let you read it.
- We do not sell or rent personal data, we run no advertising and no ad networks, and nothing collected here is used to train machine-learning models.
- The site offers two analytics tools, one of which records how pages are used — but nothing loads until you accept it. Decline, or simply ignore the bar, and no analytics script runs and no analytics cookie is set. How that works.
- Your consent choice and your theme preference stay in your browser. A declining visit leaves this site with no cookies at all.
- Sending a message gives us what you type — nothing more, and never to a mailing list.
Who We Are
Zero Evoke is the data controller for everything described here, within the meaning of Article 4(7) of Regulation (EU) 2016/679 (the GDPR). Zero Evoke Ltd, registered in Cyprus under HE 456996, registered office at Koumandarias 34, Apsiou, 4542 Limassol, Cyprus, is the controller for the processing described here, and can be reached at [email protected].
We have not appointed a Data Protection Officer: our processing is neither large-scale systematic monitoring nor large-scale processing of special-category data, so Article 37 does not require one. Everything in this policy is answered directly at [email protected].
What We Process and Why
Article 6 of the GDPR requires a lawful basis for each purpose. Ours are stated per activity.
Reading the Site
Serving a page means our hosting provider sees the request: IP address, user agent, the URL, a timestamp and the response status. That is inherent to how the web works, and it is used to deliver pages, cache them and absorb abuse. We build no profiles from it. Lawful basis: legitimate interest in operating and securing the site (Art. 6(1)(f)).
Analytics — Only If You Accept
On top of that the pages offer two services, neither of which runs unless you have said yes:
- Google Analytics 4, loaded through Google Tag Manager — aggregate audience measurement: which pages are read, which links bring people here, roughly which country, which device and browser. IP addresses are truncated before storage, and Google Signals and ad personalisation are switched off.
- Microsoft Clarity — heatmaps and session replay: it records clicks, scrolling and pointer movement so a page that confuses readers can be found and fixed. Clarity masks text typed into form fields by default and we have not turned that off, so what you write in the message form is not part of a recording.
Lawful basis: your consent (Art. 6(1)(a)), obtained before anything loads as Article 5(3) of the ePrivacy Directive requires, and withdrawable at any time from the footer of any page.
Writing to Us
Your name, reply email, optional company name and the message body, which arrives in our mailbox. There is no CRM, no ticketing system and no mailing list behind that form — you will never be added to one. Lawful basis: Art. 6(1)(b), and Art. 6(1)(c) where correspondence must be retained for tax and accounting purposes.
Please do not paste credentials, production data or anything about your customers into the form.
Cookies and How to Refuse Them
Nothing non-essential is set before you agree. On your first visit a bar at the bottom of the page asks, with two equally weighted buttons:
- Allow all — both tools load and set the cookies listed below.
- Decline all — nothing loads and nothing is set. That is also what happens if you ignore the bar, close the tab, or browse with JavaScript disabled.
- Customise — the two are separate consents and you can allow either on its own. Ticking usage analytics does not start session replay; each has its own tag and its own cookies, and withdrawing one leaves the other alone.
| Choice | What it turns on |
|---|---|
| Strictly necessary — always on | Your theme preference and this cookie decision, kept in your browser. No cookies, nothing transmitted to us. |
| Usage analytics | Google Tag Manager and Google Analytics 4 — page views counted in aggregate. |
| Session replay | Microsoft Clarity — heatmaps and a recording of clicks, scrolling and pointer movement. |
Your choice is remembered in your browser under zeroevoke-consent in local storage, not in a cookie — so a declining visit leaves this site with no cookies whatsoever. You are asked once; “Cookie settings” in the footer of every page reopens the bar whenever you want to change your mind. Withdrawing consent expires the first-party analytics cookies immediately and reloads the page so nothing keeps running.
We set no cookies of our own. Everything below belongs to the analytics services and appears only after you accept:
| Cookie | Set by | Purpose | Expires |
|---|---|---|---|
| _ga, _ga_* | Google Analytics 4 | Distinguishes visitors and sessions for aggregate counts | Up to 2 years |
| _gid | Google Analytics 4 | Distinguishes visitors | 24 hours |
| _clck, _clsk | Microsoft Clarity | Ties page interactions together into one recorded session | 1 year / 1 day |
| CLID, ANONCHK, MR, MUID, SM | Microsoft | Set on Microsoft domains to identify a session and verify that tracking is permitted | Up to 1 year |
Belt and braces, if you would rather not rely on us:
- Block them in your browser. Every current browser can block third-party or all cookies for a site; this one works fine without them.
- Google Analytics opt-out — the official add-on stops GA4 on every site.
- Microsoft Clarity — block
clarity.msin your browser or a content blocker, and see the Microsoft privacy statement for their own controls. Clarity can set cookies on its own domain, which our withdrawal cleanup cannot reach — a browser-side block or clear does. - Any tracker blocker (uBlock Origin, Privacy Badger, Brave shields, Safari protections) already stops both.
Declining changes nothing about what the site serves you. There is no reduced version of these pages, no repeated nagging, and no feature behind a yes.
Who Else Sees Your Data
We use the processors below under Article 28 data processing agreements. There are no other recipients: no data brokers, no advertising networks, no resale of any kind.
| Provider | What they do | What they see |
|---|---|---|
| Resend (Plus Five Five, Inc.) | Transactional email delivery | The message you send us |
| Google Ireland Ltd | Tag Manager and Analytics 4 — only if you allow it | Page views, referrer, approximate location, device and browser, cookie id |
| Microsoft Ireland Operations Ltd | Clarity — only if you allow it | Clicks, scrolls, pointer movement and a recording of page interaction |
| Website host | Serving and caching the site | Request metadata — IP address, user agent, URL, timestamp, status |
| Accounting provider | Statutory bookkeeping | Invoicing correspondence, where an engagement follows |
[Confirm and name the current hosting and accounting vendors before publishing.]
How Long We Keep Things
| What | Kept for |
|---|---|
| Server and hosting request logs | 90 days |
| Google Analytics data | Up to 14 months, aggregated thereafter |
| Microsoft Clarity recordings | Per Clarity own retention — a small number of months |
| Enquiries that do not lead to an engagement | Deleted within 24 months |
| Correspondence tied to a signed engagement | Life of the contract plus the statutory retention period |
| Your consent choice | Until you clear your browser storage, or 12 months, whichever comes first |
Transfers Outside the EEA
Google and Microsoft are contracted through their Irish entities, but both may process data in the United States, as does Resend, which stores message data in the United States outright. Those transfers rely on the EU–US Data Privacy Framework adequacy decision — Resend is listed on the Data Privacy Framework register, the same mechanism Google and Microsoft rely on — and, as a fallback, the European Commission standard contractual clauses together with the supplementary measures described in each provider documentation. Where any other processor transfers data outside the EEA, the same clauses apply.
Your Rights Under the GDPR
If you are in the EU/EEA, the UK or another region with comparable law, you have the right to:
| Right | What it means here |
|---|---|
| Access (Art. 15) | A copy of what we hold about you |
| Rectification (Art. 16) | Correction of anything inaccurate |
| Erasure (Art. 17) | Deletion, except where we must keep records by law |
| Restriction (Art. 18) | Processing paused while a dispute is resolved |
| Portability (Art. 20) | What you gave us, in a machine-readable file |
| Objection (Art. 21) | To anything we do on the basis of legitimate interest |
| Withdraw consent (Art. 7(3)) | One click: “Cookie settings” in the footer, then Decline — as easy to take back as it was to give |
| Complain (Art. 77) | To your national supervisory authority |
Write to [email protected] and we will respond within one month, as Article 12(3) requires. There is no automated decision-making or profiling within the meaning of Article 22 anywhere on this site.
In practice there is often very little to act on: without accounts we hold no profile of you, and the honest answer to a deletion request is frequently that we never had anything under your name. For analytics data held by Google or Microsoft, the opt-outs above stop collection at source.
Children
Nothing here is directed at children and we do not knowingly collect data from anyone under 16. This is a business site for people buying engineering work.
Changes to This Policy
If we change what we process, we update this page and the Last updated date above. Material changes to the analytics we run reset your consent, so you will be asked again rather than opted in silently.
Contact
Questions about this policy, or a request about your data: [email protected].
Related: Terms of use · Cookie settings