Privacy Policy
This Privacy Policy explains how Zaibatsu collects, uses and shares personal data when you use our website and services. We respect your privacy and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
Data Controller
Zaibatsu. For privacy enquiries please contact: privacy@zaibatsu.international. Replace this contact with your organisation's legal name, registered address and DPO contact where applicable.
Personal data we process
We may collect and process: contact information you provide (name, email, company, message); technical and usage data (IP address, browser, device, pages visited); cookie and tracking identifiers; and any information you provide during the delivery of our services (project requirements, contract and billing information).
Lawful bases for processing
We rely on one or more lawful bases under the GDPR, including: consent (e.g. for marketing communications); performance of a contract (to provide consulting services); legitimate interests (to operate and improve our website and services); and where necessary to comply with legal obligations.
Cookies and tracking
We use cookies and similar technologies to provide and improve the website (including analytics and performance cookies). You can manage cookie preferences via your browser settings. Where required, we ask for consent before using non-essential cookies.
Third parties and processors
We may share personal data with trusted third-party service providers who act as processors on our behalf, such as hosting providers (e.g. AWS), analytics providers, email delivery services, and payment processors. We require that processors implement appropriate security measures and sign data processing agreements.
International transfers
Personal data may be transferred or processed outside the European Economic Area (EEA) where necessary (for example, cloud hosting or third‑party services). When transfers occur we use appropriate safeguards such as EU Standard Contractual Clauses or rely on an adequacy decision where available.
Data retention
We retain personal data only as long as needed for the purposes described here and in accordance with legal obligations. Typical retention periods: contact enquiries and marketing preferences — up to 2 years after last interaction; client engagement and billing records — for the duration of the contract and thereafter as required by law.
Your rights
Under the GDPR you have rights including: access, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent. To exercise these rights contact us using the details above. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or another supervisory authority.
Contact
For privacy questions or to make a request please contact: privacy@zaibatsu.international. If you prefer to communicate by post, please provide your postal address and we will respond in accordance with applicable law.
We may update this Privacy Policy from time to time. Last updated: 2025-11-08. Any material changes will be published on this page.