Privacy Policy

1. Who we are

RAZZA LTD ("RAZZA", "we", "us") is the data controller for personal data collected through razza.ltd and in the course of our client work. We are registered in England & Wales, company number 17333542, with a registered office at 128 City Road, London, EC1V 2NX. For any privacy matter, contact privacy@razza.ltd.

2. What we collect

• Enquiry details — name, email, phone, company, role and the project description you submit through our quote or contact forms.
• Account data — email address and authentication metadata for the Client Portal.
• Correspondence — messages, calls and meetings related to your project.
• Billing data — company details, purchase orders and payment references. Card details are handled by our payment providers and are never stored by us.
• Technical data — IP address, device and browser information, and basic analytics about how visitors use the site.

3. How we use it

We process personal data to:

• Reply to enquiries and prepare quotes.
• Deliver, invoice and support the services we agree with you.
• Operate and secure the Client Portal.
• Comply with our legal and accounting obligations.
• Improve the website and our services, and — where permitted — send occasional updates about our work.

4. Lawful bases

We rely on: (a) contract — to take steps at your request before entering into a contract and to perform it; (b) legitimate interests — running and improving our business, marketing to existing clients, and site security; (c) legal obligation — tax, accounting and regulatory records; and (d) consent — where required, for example for non-essential cookies or marketing to new contacts.

5. Sharing

We share personal data only with processors that help us run the business, including hosting and infrastructure providers, our authentication and database platform, email delivery providers, analytics providers, accounting software and professional advisors. We do not sell personal data. Where a processor is based outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.

6. Retention

Enquiry data is kept for up to 24 months after the last contact. Contract, billing and tax records are kept for at least 6 years to meet UK statutory requirements. Portal accounts are kept while the account is active and deleted or anonymised on request.

7. Your rights

Under UK GDPR you can request access to your data, correction, erasure, restriction, portability, and object to certain processing. To exercise a right, email privacy@razza.ltd. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

8. Cookies

We use a small number of strictly necessary cookies to keep the site working and to keep you signed in to the Client Portal. Where we use analytics or preference cookies, we ask for your consent first. Full details are in our Cookie Policy.

9. Security

We use encryption in transit, access controls, backups and least-privilege infrastructure to protect personal data. No system is perfectly secure — if you believe an account has been compromised, contact us immediately.

10. Changes

We may update this policy from time to time. Material changes will be highlighted at the top of this page and, where appropriate, communicated by email. See also our Terms & Conditions and Payment Policy.