Privacy Policy

Zektra Networks Ltd · Last Updated: 11 September, 2026

About Us

Zektra Networks Ltd, trading as Zektra, is a company incorporated in England and Wales.

Registered Office:
82a James Carter Road
Mildenhall, Bury St. Edmunds
England, IP28 7DE

Company Registration Number: 17454897

Email: [email protected]

This policy is provided in a format that can be stored and reproduced. A downloadable PDF copy is available upon request.

1. Introduction

At Zektra Networks Ltd ("we", "us", or "our"), we are committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, use our hosting services, or interact with our Discord community.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Children's Online Privacy Protection Act (COPPA).

2. Data Roles: Controller vs. Processor

To ensure legal clarity, we operate in two capacities:

• Data Controller: We are the Controller for the account, billing, and contact information you provide to us to manage your subscription.
• Data Processor: We are the Processor for any data you host on our servers (e.g., Minecraft player data, Discord bot databases). Our responsibilities for this data are governed by our Data Processing Agreement (DPA).

3. Information We Collect

We collect and process the following categories of data:

4. Data Storage and International Transfers

4.1 Storage Location

Your personal account data is primarily stored on secure servers located within the United Kingdom and the European Economic Area (EEA).

4.2 International Transfers

If we transfer data to third-party providers outside the UK/EEA (e.g., US-based support tools), we ensure a similar degree of protection is afforded by ensuring at least one of the following safeguards is implemented:

• Transfer to countries deemed to provide an adequate level of protection by the UK Government.
• Use of Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).

5. Data Retention

We retain data only as long as necessary for the purpose it was collected:

• Account Data: Retained for the life of the account + 5 years for legal/audit purposes.
• Financial Records: Retained for 7 years to comply with UK Tax (HMRC) requirements.
• KYC Documents: Deleted immediately after verification is completed, unless legally required to retain.
• Support Tickets: Retained for 3 years to assist with recurring technical issues.

6. Data Sharing and Disclosure

We do not sell your personal data. We share data only with trusted categories of third parties:

• Payment Processors: We share payment-related information with our payment processor, Mollie, for the purpose of processing payments, preventing fraud, managing refunds, and complying with legal obligations. Mollie acts as an independent data controller for payment processing activities. Information about Mollie's processing of personal data can be found in Mollie's privacy policy.
• Fraud Prevention: To monitor for malicious activity and unauthorised access.
• Infrastructure Partners: Only as required to provide the hosting environment.
• Legal Authorities: When required by law or to protect the safety and rights of Zektra Networks Ltd.

7. Your Legal Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of the data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention requirements).
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where we rely on consent (e.g., marketing), you may withdraw it at any time.
• Right to Complain: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) (www.ico.org.uk).

To exercise these rights, please open a billing ticket or email [email protected].

8. COPPA & Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect data from children under 13. If we become aware that a child under 13 has provided us with personal data without parental consent, we will take immediate steps to delete such information and terminate the associated account.

9. Changes to this Policy

We may update this policy periodically. We will notify you of any significant changes by:

1. Posting a notice on our website or Discord.
2. Sending an email to the address associated with your account.

10. Cookies and Similar Technologies

Zektra uses essential cookies and local storage to provide login, security, basket, checkout, and requested features. These include the Laravel session and CSRF protection. Your optional cookie choice does not affect these services. Ticket reply drafts may be saved in your browser's local storage while you work on them.

We store your cookie choice in a first-party cookie named zektra_consent for up to 180 days. It contains only the consent version and your analytics and advertising choices. It does not contain your name, email address, or account ID. When the consent categories materially change, we will ask again.

Analytics is optional. With your analytics consent, Google Analytics 4 runs through Google Tag Manager to measure selected page visits and shopping activity such as product selections, basket changes, checkout, purchases, and refunds. Purchase tracking uses a transaction/invoice ID, product ID, billing cycle, currency, and amounts; we do not send your name, email, address, card details, or service configuration to GA4. Advertising and marketing storage is separately optional and covers any marketing tags we may configure. Neither category is enabled merely because you continue browsing. We load Google Tag Manager only when you allow an optional category.

With your advertising and marketing consent, Zektra may store a first-party campaign cookie named zektra_campaign for the configured period (90 days by default). It records the first valid UTM campaign, its time, and, when available, the referring domain and a public landing path. We may retain the customer's original acquisition details and a snapshot on a storefront order invoice. This helps us identify which campaign brought an order independently of Google Analytics. The cookie does not contain account identifiers or sensitive query parameters. Changing your optional consent stops new attribution collection; existing order records remain part of our billing records.

Cloudflare Turnstile may be used for security checks on account and support forms. Payments are handled by the selected payment provider when you choose to pay. Live chat connects to our Chatwoot service only when you open it. These requested services may use storage needed to provide them.

You can accept, reject, or choose optional categories in the cookie panel. Use Cookie settings at any time to change your choice. Withdrawal stops further optional tags and we attempt to remove related first-party tracking cookies; it does not erase data already sent to a provider.