Privacy Policy

This policy applies to testedworks.com and related pages operated for the Tested Works agency business. It covers website visitors, prospective clients, and people who contact us about our services.

It does not govern the separate ZapFolder product application, which has its own legal documents at app.zapfolder.com/legal/privacy.

• Contact details you provide, such as your name, email address, company name, and any details included in an enquiry.
• Enquiry context such as the landing page, browser-provided referrer, campaign parameters, and the most recently viewed service or case study. This is kept for the current browser-tab session and included only if you submit an enquiry.
• Technical and usage data such as pages viewed, broad referral source, approximate location, browser type, device information, operating system, and language. Our analytics provider processes IP address and user-agent information using a daily rotating hash and states that it does not store raw IP addresses.
• Business or project information you choose to share with us before a project starts.
• Email and message correspondence when you contact us.

• To operate, secure, and improve the website.
• To respond to enquiries, discuss projects, and schedule calls.
• To understand the source and relevant website context of an enquiry you choose to submit.
• To assess whether an engagement is a fit and prepare proposals or statements of work.
• To understand aggregate website usage and improve messaging, navigation, and performance.
• To detect abuse, defend legal claims, and comply with legal obligations.
• To send occasional follow-up communications directly related to an enquiry or relationship with you.

Under UK GDPR, we rely on the following legal bases:

• Legitimate interests, including operating the website, handling business enquiries, improving our services, and protecting the site against misuse.
• Steps taken at your request before entering into a contract, where you contact us about a project or commercial engagement.
• Consent, where we send marketing communications that require opt-in.
• Legal obligation, where we need to retain or disclose information to comply with law, regulation, tax, or accounting requirements.

We use Ahrefs Web Analytics to produce aggregate statistics about how this website is found and used. Ahrefs states that its default Web Analytics service does not use cookies, store raw IP addresses, use persistent identifiers, or track people across different days, devices, websites, or applications.

More information about the limited browser storage and analytics used on the site is available in our Cookie Policy.

We do not sell personal data. We may share information with:

• Website hosting, infrastructure, and security providers.
• Email and communication providers used to respond to enquiries.
• Live-chat providers, including Tawk.to, when you use the website chat service.
• Analytics providers, including Ahrefs, which provides aggregate, cookie-free website analytics.
• Professional advisers, insurers, and regulators where reasonably necessary.
• A buyer, investor, or successor entity if the business or assets are reorganised, sold, or transferred.

Some of our service providers may process personal data outside the United Kingdom. Where that happens, we use appropriate safeguards such as contractual protections, UK transfer mechanisms, or other lawful transfer tools.

• Aggregate website analytics reports are retained in our Ahrefs account while we use the service and are reviewed as part of our regular supplier and data-retention reviews.
• Enquiry correspondence and project scoping materials are typically kept for up to 3 years after the last meaningful contact, unless a longer period is needed for an active commercial relationship.
• Records required for tax, accounting, insurance, or legal compliance may be kept for at least 6 years where applicable.
• Where we no longer need personal data, we delete it or anonymise it where reasonably practicable.

You may have the right to:

• request access to the personal data we hold about you
• request correction of inaccurate or incomplete data
• request erasure in certain circumstances
• object to processing based on legitimate interests
• request restriction of processing
• withdraw consent where processing relies on consent
• lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise any of these rights, contact legal@zapfolder.com.

We use reasonable technical and organisational measures to protect personal data, but no internet transmission or storage system is fully secure.

This website is not directed at children, and we do not knowingly collect personal data from children through it.

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.