01
About this notice
Zveometics Ltd (“Zveometics”, “we”, “us” or “our”) is the controller of personal information described in this notice. We are a private limited company registered in England and Wales under company number 14405595.
This notice applies to zveometics.com, the SEN mobile application, the SEN firmware and device-configuration service at firmware.zveometics.com, and enquiries submitted through the website or sent to us directly. The SEN app does not provide user accounts, subscriptions, advertising, or marketing sign-ups. The website is informational and does not provide user accounts, purchases, crowdfunding, subscriptions or marketing sign-ups.
Zveometics Ltd
Piccadilly Business Centre, Unit C
Aldow Enterprise Park, Blackett Street
Manchester, England, M12 6AE
02
Information we collect
We collect only the information reasonably needed to operate our website, SEN app and firmware service securely, maintain compatible SEN products, and respond to enquiries.
| Category | What it may include | Source |
|---|---|---|
| Contact details | Name, email address, telephone number and company or organisation | Provided by you |
| Enquiry information | Enquiry type, message, project details and subsequent correspondence | Provided by you |
| Technical and security data | IP address, browser and device type, request time, requested page and security-event information | Generated when your device accesses the website |
| SEN accessory technical data | Accessory Bluetooth identifier, model and hardware revision, installed firmware version and image hash, app version, app configuration version, operating-system platform, and requested firmware channel | Generated by the SEN app when a paired accessory connects |
| Firmware-operation data | A salted one-way accessory key, event and receipt times, accessory model, deployment and firmware release identifiers, update stage and outcome, installed firmware image hash, app version, platform, and technical failure details | Generated when the app checks for or performs an accessory firmware update |
| Device-assignment and administration data | A salted one-way accessory key, assigned firmware channel or device-specific release, optional administrative notes, update time, and a record of the authorised administrative action | Created by an authorised Zveometics administrator to control firmware availability for a specific accessory |
The SEN app also keeps paired-accessory details, the accessory name shown in the app, control preferences, connection information, battery state, firmware state, and cached configuration in local storage on the iPhone. Information processed only on the iPhone is not received by Zveometics. Review Demo activity is simulated locally and is not sent to the firmware service.
Please do not include special-category or highly sensitive personal information in an enquiry unless it is necessary and we have asked you to provide it.
03
How and why we use information
| Purpose | UK lawful basis | Typical information |
|---|---|---|
| Responding to technology, partnership, investor, media or general enquiries | Our legitimate interests in communicating with people interested in our business; and taking steps at your request before entering a contract where applicable | Contact details and enquiry information |
| Managing follow-up correspondence and business relationships | Our legitimate interests in keeping appropriate business records and developing professional relationships | Contact details, enquiry information and correspondence |
| Operating, protecting and troubleshooting the website | Our legitimate interests in providing a secure, reliable website and protecting our systems | Technical and security data |
| Meeting legal, regulatory or compliance obligations and establishing or defending legal claims | Compliance with legal obligations and our legitimate interests in protecting our legal rights | Relevant contact, enquiry and technical information |
| Selecting compatible modes and firmware, applying staged or device-specific availability, and delivering requested accessory updates | Where necessary to provide a SEN product or service under contract, performance of that contract; otherwise, our legitimate interests in providing and maintaining compatible SEN products. | SEN accessory technical data and device-assignment and administration data |
| Confirming firmware outcomes, protecting update integrity, diagnosing failures, and maintaining service reliability and security | Our legitimate interests in providing a secure and reliable product and protecting users, accessories, and our systems | SEN accessory technical data and firmware-operation data |
We do not use SEN app data for advertising, marketing profiles, automated decision-making, or tracking across other companies’ apps or websites.
Providing information in an enquiry is voluntary. If you do not provide the fields marked as required, we may be unable to receive or respond to your enquiry. We do not use personal information collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.
04
SEN app, Bluetooth and Review Demo
The SEN app uses Bluetooth Low Energy to discover, register, reconnect to, control, inspect, and update compatible SEN accessories. Bluetooth information is not used to determine or record geographic location. When a physical accessory connects, limited technical data is sent over HTTPS to our firmware service so the app can obtain compatible configuration and firmware. The raw accessory Bluetooth identifier is converted server-side into a salted SHA-256 device key before database use.
As a deliberate data-minimisation measure, the app does not transmit selected operating modes, sensitivity values, power state, or other ordinary control activity to our firmware service.
The app also contains a clearly labelled Review Demo that simulates an accessory entirely on the iPhone. Review Demo controls, state changes, and simulated firmware updates are not transmitted to our service.
07
International transfers
We operate from the United Kingdom and collaborate internationally. Some service providers may process information in the United States or other countries outside the UK. Where UK data-protection law requires it, we use a recognised transfer mechanism—such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses—together with appropriate supplementary measures.
You may contact us for more information about safeguards relevant to your personal information.
08
How long we retain information
We retain enquiry information and related correspondence for up to three years after our last meaningful interaction with you. We may keep specific records for longer where necessary to comply with law, resolve a dispute, enforce an agreement or establish, exercise or defend legal claims.
SEN firmware-operation records and the pseudonymous device keys within them are retained for 90 days after we receive them, after which an automated daily process deletes them.
A device assignment controls whether an accessory receives the stable, beta, internal, or a device-specific firmware release. We retain an active assignment until an authorised administrator removes it, so an accessory does not unexpectedly change release channel after a period of inactivity. After an assignment is removed, its device-linked administrative records are deleted once they are more than 90 days old and no related firmware-operation record remains.
Limited Cloudflare Workers error and maintenance messages are retained for no more than seven days. Other website security records are retained only for as long as reasonably necessary for security, troubleshooting and legal compliance.
We may preserve a specific record for longer where reasonably necessary for an active product-safety, security or support investigation, to resolve a dispute or legal claim, or to meet a legal obligation. Any such preservation is documented and reviewed. When information is no longer required, we delete or anonymise it.
09
How we protect information
We use proportionate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or loss. These include access controls, secure transmission, service-provider controls and measures intended to detect malicious traffic. No internet transmission or storage system can be guaranteed to be completely secure.
10
Your UK privacy rights
Subject to applicable law and any relevant exemptions, you may have the right to request access to your personal information; correction of inaccurate information; deletion; restriction of processing; and transfer of information you provided in a structured, commonly used and machine-readable format. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier processing.
You may object at any time to processing based on our legitimate interests. We will stop unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims.
The SEN app has no user account. To locate device-associated records for an access or deletion request, we may ask for the accessory identifier or other information needed to derive its one-way device key. Removing an accessory in Toybox deletes its local app record but does not by itself delete server-side firmware-operation records. Requests can be sent to contact@zveotec.com.
To exercise a right, email contact@zveotec.com. We may ask for information reasonably necessary to verify your identity and understand your request. You are not normally required to pay a fee.
11
United States privacy notice
Zveometics does not currently meet the applicability thresholds of the California Consumer Privacy Act. We do not sell personal information, share personal information for cross-context behavioural advertising, or use sensitive personal information to infer characteristics.
Residents of certain US states may have privacy rights under applicable state law, including rights to access, correct or delete personal information and to appeal a decision concerning a request. We will assess requests under the law that applies to the requester and will not discriminate against anyone for exercising an applicable privacy right. Requests may be sent to contact@zveotec.com.
12
Children's privacy
Both this website and the SEN app are intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to us, please contact us so that we can investigate and delete it where appropriate.
13
Changes to this notice
We may update this notice to reflect changes to our practices, services or legal obligations. We will publish the revised notice on this page and change the effective date above. Where a change materially affects how we use information already collected, we will provide additional notice where required by law.
14
Contact and complaints
Questions, concerns and privacy requests should be sent to contact@zveotec.com or to our registered office using the address above.
If you are in the UK, you also have the right to complain to the Information Commissioner’s Office. We would appreciate the opportunity to address your concern first, but you are not required to contact us before making a complaint.