Privacy notice
Last updated: 5 October 2026
This notice explains how Zicky, Lda (“Zicky”, “we”) handles personal data in connection with the website zicky.ai and email sent to us. It is written for business visitors.
Who we are
Controller: Zicky, Lda, Lisbon, Portugal.
Privacy contact: [email protected].
We have not appointed a Data Protection Officer because the law does not require one for our activity.
What this website does not do
zicky.ai sets no cookies, uses no analytics, advertising or tracking tools, has no forms, and loads no fonts, scripts or images from third parties. Nothing is stored on your device.
What we process and why
Visiting the site. To deliver the pages and keep the site secure, our hosting provider, Cloudflare, processes the technical data every web request carries: IP address, browser user agent, the page requested, the referring page and the time. We do not use this data to identify you and do not keep our own copy. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
Emailing us. If you write to [email protected], we process your name, email address, organisation, the content of your message and any attachments, to answer you and, where you ask for it, to arrange a demonstration or prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or, where the contract would be with your organisation, our legitimate interest in replying to business enquiries (Article 6(1)(f) GDPR).
Please do not email us real policyholder, claims or other third-party personal data. Use synthetic or anonymised samples until a contract and a data processing agreement are in place.
Who receives the data
Our service providers, acting on our instructions under data processing terms:
- Cloudflare, Inc. (website hosting and delivery);
- Google LLC and Google Ireland Ltd (Google Workspace email).
Both may process data outside the European Economic Area, including in the United States. Those transfers rely on the EU-US Data Privacy Framework, under which both companies are certified, and on the European Commission’s standard contractual clauses.
We do not sell personal data or share it for marketing.
How long we keep it
Website request data is kept by Cloudflare only as long as needed to deliver and secure the service; we do not enable log storage. Emails are kept for as long as we need them to answer your enquiry and any conversation that follows, and are then deleted, unless they become part of a contract, in which case they are kept for as long as the law requires.
Your rights
You may ask us for access to, correction or deletion of your personal data, to restrict or object to its processing, and for portability where it applies. Write to [email protected]. We reply within one month.
You may also complain to the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.
There is no automated decision-making or profiling on this website. Giving us personal data is voluntary; without your email address we cannot reply to you.
Changes
We will publish any change on this page and update the date above.