Tekton Billing Privacy Policy

Last updated: 9 October 2026

Your privacy matters to us. This policy explains what personal information Zygo Communications Ltd trading as Tekton Billing (“Tekton Billing“, “we“, “us“) collects, why we collect it, who we share it with, how long we keep it and what rights you have. It applies to our website, to enquiries and sales conversations, and to our customers, partners and suppliers.

1. Who we are

Zygo Communications Ltd, trading as Tekton Billing, is a company registered in England and Wales (company number 06553655). Our registered office is Ryefield, Unit 139 Airport House, Purley Way, Croydon, Surrey, CR0 0XZ.

We develop and supply billing software, including ZOEY, to telecoms providers, MSPs and their partners. We are registered with the Information Commissioner’s Office (ICO) under registration number ZA655358.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and the Data (Use and Access) Act 2025, as they apply to us.

2. Our role: controller and processor

When we are the controller. For the information described in this policy, such as website enquiries, sales and marketing contacts, our customers’ and partners’ contact details, and our own staff and suppliers, we decide why and how personal data is used, so we are the “controller”.

When we are the processor. Our customers use ZOEY to bill their own end customers. The billing, usage and account data about those end customers belongs to our customer, who is the controller. We handle it only on our customer’s instructions and under the data processing terms in our customer agreement. If you are an end customer of one of our customers, please contact them about how your data is used and to exercise your rights. If you contact us, we will pass your request on to the right organisation.

3. What information we collect

Information you give us

When you complete a form on our website, request pricing or a demo, email or call us, attend a meeting, sign a contract or use our support services, you may give us:

• your name, job title and company name;
• your email address, telephone number and business or billing address;
• the content of your enquiry and any messages or documents you send us;
• account, user and contract details; and
• bank details for customers who pay by Direct Debit.

Information we collect automatically

When you visit our website, we and our service providers may collect technical information such as your IP address, browser and device type, the pages you view, how you arrived at our site (for example from a search or an advert) and how long you stay. Much of this is collected through cookies and similar technologies, as explained in Cookies and website tracking.

Information from other sources

We may receive business contact details from publicly available sources such as company websites, business directories and professional networks, and from our partners who introduce you to us. Where needed for contracts and fraud prevention, we may use credit reference and fraud prevention agencies.

4. How and why we use it

We only use personal information where we have a lawful basis under data protection law. The main ones we rely on are set out below.

If you do not give us information we need to provide a service or meet a contract, we may not be able to provide it.

5. Cookies and website tracking

Our website uses cookies and similar technologies. Strictly necessary cookies, which make the site work, are always on. Analytics and advertising cookies are only set if you choose to accept them in the cookie banner. You can change your choice at any time by clicking the cookie settings icon at the bottom left of any page.

The services we use may include:

• Google Analytics to understand how visitors use our website;
• Google Ads to measure whether our adverts lead to enquiries;
• HubSpot to record website forms and enquiries in our customer relationship management (CRM) system, and to understand how visitors engage with us;
• LinkedIn Insight Tag to measure the performance of our LinkedIn advertising;
• YouTube, which may set cookies when you play a video embedded on our site; and
• Google Tag Manager to manage the tags above.

You can block or delete cookies at any time in your browser settings, although parts of the site may not work as intended. For full details of each cookie, its purpose and how long it lasts, see our Cookie Policy.

6. Marketing communications

We may email or phone business contacts, such as a person at a telecoms provider or MSP, about products and services that are relevant to their role. For sole traders and some partnerships, and in other cases where the law requires it, we will only send marketing emails if you have agreed to receive them.

Every marketing email includes an unsubscribe link. You can also ask us to stop at any time by emailing info@tektonbilling.com. We will always keep sending essential service messages that relate to a contract.

7. Who we share it with

We do not sell your personal information. We share it only where necessary, with:

• Service providers who help us run our business, acting on our instructions, such as providers of CRM, email and productivity tools, website hosting, analytics and advertising measurement, cloud hosting, support and ticketing, and security services;
• Business partners and suppliers involved in delivering products or services you have ordered or enquired about, for example network and wholesale provider integrations you have asked us to connect;
• Professional advisers, such as lawyers, accountants and auditors, and certification bodies that audit our security management;
• Credit reference and fraud prevention agencies, where needed to verify identity or manage credit risk;
• Public authorities, regulators and law enforcement, where required by law, regulation or legal proceedings, or to prevent or detect crime; and
• a buyer or investor, if our business or assets are sold or restructured, subject to appropriate protections.

We will not share your information with other third parties unless we have your consent or the law requires it.

8. International transfers

Some of our service providers, such as Google and HubSpot, may process data outside the UK, including in the United States. Where this happens, we make sure appropriate safeguards are in place. These can include an adequacy decision or the UK-US data bridge, or the UK International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses).

9. How long we keep it

We keep personal data only for as long as we need it for the purposes above, and then delete or anonymise it. As a guide:

• Customers and partners: for the length of the relationship, then no longer than 6 years after it ends, to meet accounting, tax and legal requirements, unless a lawful reason requires us to keep it longer;
• Website enquiries and sales contacts who do not become customers: for up to 24 months after our last meaningful contact, unless you ask us to delete it sooner;
• Marketing preferences: we keep a minimal record of any opt-out so we can honour it; and
• Cookie data: as described in our Cookie Policy.

10. Security

We take data security seriously. Tekton Billing is certified to ISO 27001 and Cyber Essentials. We maintain an information security policy, business continuity and disaster recovery plans, and use appropriate technical and organisational measures, such as access controls and encryption, to protect personal data against loss, misuse and unauthorised access. We can provide more detail on request.

Please keep your login details and passwords confidential, do not share them with anyone, and tell us straight away if you think your account has been compromised.

11. Your rights

Under data protection law you have the right to:

• be informed about how we use your data, which is the purpose of this policy;
• access a copy of the personal data we hold about you;
• correct information that is inaccurate or incomplete;
• erase your data, where there is no good reason for us to keep it;
• restrict how we use your data in certain circumstances;
• data portability, meaning to receive your data in a commonly used format or have it sent to another organisation;
• object to processing based on our legitimate interests, and to direct marketing at any time; and
• withdraw consent at any time, where we rely on consent. This will not affect anything we did before you withdrew it.

To exercise any of these rights, contact us using the details below. We will normally respond within one month. We may need to confirm your identity first, and we may refuse a request in limited cases that the law allows, in which case we will explain why.

12. Questions and complaints

If you have a question about this policy or how we handle your personal data, or you want to make a complaint, please contact us first so we can put things right.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk, on 0303 123 1113, or by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

13. Changes to this policy

We review this policy regularly and may update it from time to time. The latest version will always be on this page, with the date it was last updated shown at the top. If we make a significant change, we will take reasonable steps to let you know.