ZAPTA Technologies
Privacy Policy
How ZAPTA Technologies collects, uses, shares, and protects your personal information — and the rights you have over your data under United States and European laws.
EFFECTIVE DATE
April 29, 2026
LAST UPDATED
August 06, 2026
At a glance
ZAPTA Technologies (“ZAPTA,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect when you visit zaptatech.com, contact us, hire our services, or otherwise interact with us; how we use it; who we share it with; how long we keep it; how we protect it; and the rights you have over your data — whether you are in the United States, the European Economic Area, the United Kingdom, or elsewhere. If you have any questions, contact us at contact@zaptatech.com
1. Introduction
ZAPTA Technologies is an international technology company providing software development, AI solutions, and digital transformation services. We respect your privacy and are committed to protecting the personal information you share with us.
This Privacy Policy applies to personal information that ZAPTA processes:
- Through our website at zaptatech.com and its subdomains (the “Site”);
- When you contact us by email, web form, chat, social media, or other channels;
- When you engage us as a client or partner under a written agreement;
- When you apply for employment with us or interact with us as a contractor or service provider;
- When you attend our events, webinars, or marketing activities, or download our resources.
This Policy does not cover personal information that we process strictly on behalf of our clients in connection with delivering our services. In those cases, the client is the controller of that data and their privacy notice governs how it is handled. We act under their instructions and the terms of our services agreement.
This Policy is designed to satisfy our obligations under the European Union’s General Data Protection Regulation (GDPR), the United Kingdom’s UK GDPR and Data Protection Act 2018, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable U.S. state privacy laws.
2. Who We Are
ZAPTA Technologies operates internationally through the following legal entities:
| Jurisdiction | Legal Entity |
|---|---|
| Registered address | ZAPTA TECHNOLOGIES (PRIVATE) LIMITED |
| United Kingdom | ZAPTA TECHNOLOGIES LIMITED |
| United States | ZAPTA TECHNOLOGIES, LLC |
For the purposes of GDPR, UK GDPR, and similar laws, the relevant ZAPTA entity acts as the data controller of your personal information. The entity primarily responsible depends on where you are located and how you interact with us.
| Detail | Information |
|---|---|
| Registered address | 144/2, B Block, Bankers Town, Lahore, Punjab, Pakistan, 54000 |
| Privacy contact email | contact@zaptatech.com |
| Website | zaptatech.com |
| Business activity | Custom software development, AI development, and related professional services |
If you have any questions about this Policy or how we process your personal information, please email contact@zaptatech.com with “Privacy Inquiry” in the subject line.
3. Information We Collect
We collect personal information that you provide to us directly, information we collect automatically when you interact with our Site, and information we receive from third parties. We collect only what we need for the purposes set out in this Policy.
The categories of personal information we may collect include:
| Category | Examples |
|---|---|
| Identity and contact information | Name, job title, company, business email address, phone number, and similar professional details. |
| Project information | Information you share when discussing or scoping a project — including business context, technical requirements, and similar details. |
| Communications | The content of emails, chat messages, voice or video calls, and web-form submissions you send us, together with associated metadata. |
| Marketing data | Newsletter subscription status, marketing preferences, event registrations, and engagement with our marketing emails. |
| Technical and usage data | IP address, device identifiers, browser type and version, operating system, pages visited, links clicked, and similar interaction data collected automatically when you visit the Site. |
| Cookie and tracking data | Information collected through cookies, pixels, and similar technologies (see Section 9 for details) |
| Recruitment data | If you apply for a role with us — information from your CV/resume, application materials, and interview notes. |
| Financial information | If you become a client or vendor — billing details, tax identifiers, and payment information processed through our payment providers. |
We do not actively seek to collect special-category data under GDPR (such as health, racial or ethnic origin, political opinions, or biometric data), and our Site is not directed at children under the age of 16. If we learn that we have inadvertently collected personal information from a child without verified parental consent, we will delete it promptly.
4. How We Use Your Information
We use personal information for the following purposes:
- To respond to your inquiries, provide quotes, schedule meetings, and communicate with you about our services;
- To deliver our services and fulfill our contractual obligations to clients and partners;
- To manage our business relationships — onboarding, billing, support, and account management;
- To operate, maintain, and improve our Site, content, and services;
- To send you marketing communications, newsletters, and event invitations you have asked to receive — and to allow you to manage your preferences;
- To assess job applications and engage contractors and vendors;
- To protect ZAPTA, our clients, and our users from fraud, abuse, and security threats;
- To comply with applicable laws, respond to lawful requests, and exercise or defend legal claims;
- To analyze how our Site is used and measure the effectiveness of our marketing.
5. Legal Bases for Processing
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR to process your personal information:
| Legal basis | When we rely on it |
|---|---|
| Contract | Where processing is necessary to enter into or perform a contract with you — for example, to deliver services you have engaged us for. |
| Legitimate interests | Where processing is necessary for our legitimate business interests, balanced against your rights — for example, marketing to corporate prospects, securing our systems, and improving our Site. |
| Consent | Where you have given specific, informed consent — for example, when you opt in to non-essential cookies or marketing emails. You can withdraw your consent at any time. |
| Legal obligation | Where processing is necessary to comply with a legal obligation — for example, retaining tax and accounting records or responding to lawful requests from authorities. |
6. How We Share Your Information
You have rights over your personal information. The specific rights available to you depend on the laws that apply to you. We honor these rights regardless of where you are located, except where an exception or limitation applies under applicable law.
- Cloud infrastructure and hosting providers (e.g., AWS, Google Cloud, Vercel);
- CRM and marketing-automation platforms;
- Email and productivity platforms (e.g., Google Workspace, Microsoft 365);
- Analytics tools — including Google Analytics 4 (with IP anonymization where supported);
- Advertising platforms — including Google Ads, where applicable, for the limited purpose of measuring and improving our marketing;
- Payment processors and accounting providers (e.g., Stripe);
- Recruitment and applicant-tracking platforms;
- Professional advisors, including lawyers, accountants, and auditors;
- Public authorities, regulators, courts, and law enforcement, where legally required.
We do not engage external subcontractors to deliver our services. All work is performed by ZAPTA’s internal teams.
If ZAPTA is involved in a merger, acquisition, financing, sale of assets, or similar transaction, personal information may be transferred to the relevant counterparties as part of that transaction. We will require any successor entity to honor the commitments in this Policy.
7. International Data Transfers
ZAPTA operates globally. As a result, your personal information may be transferred to, stored in, or accessed from countries outside the country in which you reside, including Pakistan, the United Kingdom, the United States, and other jurisdictions where our entities or service providers are located.
Where we transfer personal information out of the European Economic Area or the United Kingdom, we put in place appropriate safeguards required by law, including:
- Transfers to countries that the European Commission or the UK Information Commissioner’s Office has formally recognized as providing an adequate level of data protection;
- Standard Contractual Clauses (SCCs) approved by the European Commission, together with the UK International Data Transfer Addendum where applicable;
- Other lawful transfer mechanisms permitted under the GDPR or UK GDPR
If you would like more information about the specific safeguards used for a transfer of your personal data, please contact us at contact@zaptatech.com.
8. How Long We Keep Your Information
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, regulatory, or reporting requirements, and to enforce or defend against legal claims.
Specific retention periods depend on the type of data and the context of processing. As a general guideline, we follow industry best practices: prospect and inquiry data is retained while it remains relevant to a potential engagement; client and financial records are retained for the period required by applicable tax and accounting laws; marketing data is retained until you unsubscribe or otherwise object; and recruitment data is retained for a limited period after the application decision unless required for legal claims.
After the applicable retention period ends, we securely delete or anonymize the personal information so that it can no longer be associated with you.
9. Cookies and Tracking Technologies
Our Site uses cookies and similar technologies — including pixels, tags, and server logs — to operate the Site, improve user experience, secure the Site, and measure the effectiveness of our marketing.
The cookies we use fall into the following categories:
- Strictly necessary cookies, required for the Site to function;
- Functional cookies, which remember your preferences;
- Analytics cookies — including Google Analytics 4, used to understand how the Site is used so we can improve it;
- Marketing cookies, used to measure the effectiveness of our advertising — including via Google Ads
Where you visit our Site from the European Economic Area or the United Kingdom, we ask for your consent through our cookie consent banner before setting non-essential cookies. You can manage your cookie preferences through the banner and through your browser settings at any time.
We honor recognized opt-out signals — including the Global Privacy Control (GPC) signal where required by applicable law — as valid opt-out requests.
10. Your Privacy Rights
You have rights over your personal information. The specific rights available to you depend on the laws that apply to you. We honor these rights regardless of where you are located, except where an exception or limitation applies under applicable law.
If you are in the EEA or the United Kingdom
Under the GDPR and UK GDPR, you have the right to:
- Access the personal data we hold about you, and receive a copy;
- Have inaccurate or incomplete personal data corrected;
- Request deletion of your personal data, subject to applicable exceptions;
- Restrict or object to our processing of your personal data;
- Receive your personal data in a portable, machine-readable format;
- Withdraw consent at any time, where our processing is based on consent;
- Lodge a complaint with a supervisory authority — for example, the UK Information Commissioner’s Office (ico.org.uk) or the data protection authority of the EU member state where you live or work.
If you are a California resident
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), you have the right to:
- Know what personal information we collect, use, and disclose about you;
- Request deletion of personal information we have collected from you, subject to applicable exceptions;
- Correct inaccurate personal information we maintain about you;
- Opt out of the “sale” or “sharing” of your personal information. ZAPTA does not sell personal information for monetary consideration. To the extent any of our advertising or analytics activities qualify as “sharing” under the CCPA/CPRA, you can opt out by emailing contact@zaptatech.com or by enabling a Global Privacy Control (GPC) signal in your browser, which we honor;
- Limit our use of your sensitive personal information;
- Not be discriminated against for exercising your CCPA/CPRA rights.
If you are a resident of another U.S. state
Several other U.S. states — including Virginia, Colorado, Connecticut, Utah, and Texas — have enacted comprehensive privacy laws that grant residents rights similar to those above, including the right to access, correct, delete, and obtain a copy of their personal data, and the right to opt out of targeted advertising and the sale of personal data. We honor these rights for residents of every U.S. state with a comprehensive privacy law in effect.
How to exercise your rights
To exercise any of these rights, email contact@zaptatech.com with “Privacy Rights Request” in the subject line. We will need to verify your identity before fulfilling your request and will respond within the timelines required by applicable law — typically within one month under GDPR and within 45 days under CCPA/CPRA.
11. How We Protect Your Information
ZAPTA is ISO 9001:2015 certified and operates a documented information-security framework. We use organizational, technical, and physical safeguards designed to protect personal information from unauthorized access, alteration, disclosure, or loss. These include encryption of data in transit, role-based access controls, multi-factor authentication, vendor risk management, security monitoring, and employee training.
No internet transmission or storage system is 100% secure. While we use commercially reasonable measures to protect personal information, we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at contact@zaptatech.com.
12. AI Tools and Automated Decisions
ZAPTA uses artificial-intelligence tools — including large language models and AI-assisted development tools — to operate our business and accelerate parts of our service delivery. We do not submit personal information collected through this Site to public AI training datasets, and where we use third-party AI tools, we configure them, where the vendor permits, to disable training on our inputs.
We do not use solely automated decision-making — including profiling — that produces legal or similarly significant effects on you. Where we use automated tools to support marketing personalization, lead scoring, or analytics, those tools support but do not replace human decision-making.
13. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, technology, applicable laws, or other factors. The “Last Updated” date at the top of this document indicates when the Policy was most recently revised. If we make material changes that affect how we process your personal information or your rights, we will notify you in advance through the Site and, where appropriate, by email.
In line with the CCPA/CPRA, we review this Policy at least once every 12 months.
14. Contact Us
If you have any questions, comments, or requests about this Privacy Policy or how we process your personal information, please contact us:
| Channel | Detail |
|---|---|
| contact@zaptatech.com | |
| Website | zaptatech.com |
| Postal address | 144/2, B Block, Bankers Town, Lahore, Punjab, Pakistan, 54000 |
ZAPTA Technologies — Custom Software & AI Development Company
Contact
Get in touch with our experts
Love the simplicity of the service and the prompt customer support. We can’t imagine working without it. Love the simplicity of the service and the prompt customer support. We can’t imagine working without it.
Awards & recognitions
Love the simplicity of the service and the prompt customer support. We can’t imagine working without it. Love the simplicity of the service and the prompt customer support. We can’t imagine working without it.
Our partners
Love the simplicity of the service and the prompt customer support. We can’t imagine working without it. Love the simplicity of the service and the prompt customer support. We can’t imagine working without it.
Our clients
Latest updates
Our expert insights
