Robi says: “I know legal pages aren’t exactly fun, but this one’s important. We take your privacy seriously, have a read!”
Last updated: 29 September 2026
Business name: Zero2AI
Website: zero2ai.co.uk
Privacy email: [email protected]
1. Introduction
Welcome to Zero2AI. We take your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website and purchasing our products, you agree to the collection and use of your data as described in this policy.
2. Who We Are
Zero2AI is a UK-based business that sells digital products (PDF prompt packs) through our website at zero2ai.co.uk. For the purposes of data protection law, Zero2AI is the data controller responsible for your personal data.
Zero2AI is a trading name of Wajid Bashir, a sole trader based in the United Kingdom, who is the data controller for this website.
If you have any questions about this policy or how we handle your data, you can contact us at [email protected].
3. What Data We Collect
We may collect and process the following personal data:
- Name — provided when you create an account or make a purchase.
- Email address — provided when you make a purchase, create an account, or sign up for our mailing list.
- Payment information — processed securely by Stripe (our payment provider). We do not store your full card details on our servers.
- IP address and browser information — collected automatically when you visit our website, via cookies and analytics tools.
- Purchase history — records of what you have bought from us.
- Email engagement data — such as whether you opened an email or clicked a link, collected through our email marketing platform.
4. Why We Collect Your Data
We collect your data for the following purposes, each with a lawful basis under UK GDPR:
| Purpose | Lawful Basis |
|---|---|
| To process your orders and deliver digital products | Performance of a contract |
| To send transactional emails (order confirmations, download links) | Performance of a contract |
| To send marketing emails and newsletters (only with your consent) | Consent |
| To improve our website, products, and user experience | Legitimate interest |
| To analyse website traffic and usage patterns | Legitimate interest |
| To prevent fraud and ensure website security | Legitimate interest |
| To comply with legal and tax obligations | Legal obligation |
You can withdraw your consent for marketing emails at any time by clicking the unsubscribe link in any email or by contacting us at [email protected].
5. How We Store and Protect Your Data
We take appropriate technical and organisational measures to protect your personal data, including:
- Our website uses SSL/TLS encryption (HTTPS) to secure data in transit.
- Payment processing is handled entirely by Stripe, which is PCI DSS compliant. We never see or store your full card details.
- Access to personal data is limited to authorised personnel only.
- We use strong passwords and two-factor authentication on all platforms that store your data.
Your data is stored on servers provided by our hosting provider and within the third-party platforms listed in Section 6 below. We retain your data for as long as necessary to fulfil the purposes described in this policy, or as required by law. If you request deletion of your data, we will do so promptly unless we are legally required to retain it.
6. Third Parties We Share Data With
We use a small number of trusted third-party services to run our business. These providers may process your personal data on our behalf:
Stripe (Payment Processing)
- What they receive: Your name, email, and payment details.
- Why: To process payments securely.
- Transfers: Stripe participates in the UK Extension to the EU-US Data Privacy Framework.
- Privacy policy: https://stripe.com/privacy
MailerLite (Email Marketing)
- What they receive: Your name and email address (if you opt in to our mailing list).
- Why: To send you newsletters, product updates, and marketing emails.
- Privacy policy: https://www.mailerlite.com/legal/privacy-policy
Google Analytics (Website Analytics)
- What they receive: Anonymised data about your visit, including pages viewed, time on site, browser type, and general location.
- Why: To help us understand how visitors use our website so we can improve it.
- Transfers: Google participates in the UK Extension to the EU-US Data Privacy Framework for the relevant personal information.
- Privacy policy: https://policies.google.com/privacy
Google Fonts (Text Display)
- What they receive: Your IP address and browser information.
- Why: To display the typefaces used on our website.
- Transfers: Google participates in the UK Extension to the EU-US Data Privacy Framework for the relevant personal information.
Umami (Privacy-Friendly Analytics)
- We also use Umami, a privacy-friendly analytics tool that we host ourselves, to count page visits. It does not use cookies and does not identify you. This is based on our legitimate interest in understanding overall visitor numbers.
WordPress / Easy Digital Downloads (Website and E-commerce Platform)
- What they receive: Your account and purchase data.
- Why: To manage our website, process orders, and deliver digital products.
We do not sell your personal data to any third party.
7. Cookies
Our website uses cookies — small text files placed on your device — to help the site function properly and to improve your experience.
Types of cookies we use:
- Essential cookies — Required for the website to function (e.g., shopping cart, login sessions). These cannot be disabled.
- Analytics cookies — Used by Google Analytics to collect anonymised data about how visitors use our site. These are only set with your consent.
- Marketing/email cookies — May be used by MailerLite to track email campaign engagement.
When you first visit our website, you will be shown a cookie consent banner. You can choose which non-essential cookies to accept or reject. You can also manage cookies through your browser settings at any time.
For more information about cookies and how to control them, visit www.allaboutcookies.org.
8. Your Rights Under UK GDPR
Under UK data protection law, you have the following rights:
- Right of access — You can request a copy of the personal data we hold about you.
- Right to rectification — You can ask us to correct any inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) — You can ask us to delete your personal data, where there is no compelling reason for us to continue processing it.
- Right to restrict processing — You can ask us to limit how we use your data in certain circumstances.
- Right to data portability — You can request your data in a structured, commonly used, machine-readable format so you can transfer it to another service.
- Right to object — You can object to us processing your data for direct marketing or based on legitimate interests.
- Right to withdraw consent — Where we rely on your consent, you can withdraw it at any time.
To exercise any of these rights, please email us at [email protected]. We respond within one month.
Complaints About How We Use Your Data
If you are unhappy with how we have handled your personal data, please email [email protected] with the subject line “Complaint”. We acknowledge receipt within 30 days, take appropriate steps to investigate without undue delay, keep you informed of progress, and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), but we would appreciate the chance to put things right first.
9. International Data Transfers
Some of the third-party services we use (such as Stripe, MailerLite, and Google) may process data outside the UK. Where this happens, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to protect your data in accordance with UK GDPR.
10. Children’s Privacy
Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at [email protected] and we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: [email protected]
Business: Zero2AI
Website: zero2ai.co.uk