Privacy

Last updated: 15 September 2026

This Privacy Policy explains how Zolis handles personal information when people visit our website, create or use a Zolis account, contact us, subscribe to the Service, make a booking through a business using Zolis, or otherwise interact with the Zolis platform.

1. Who we are

Zolis is a UK-based business trading as Zolis. Our website is zolis.info and our privacy contact is atlas@zolis.info.

For personal information that Zolis collects and uses for its own purposes, Zolis will generally act as a data controller. When a service business uses Zolis to process personal information about its own customers for that business's purposes, the business will generally determine why that information is used and Zolis may act as its processor. The exact role depends on the particular processing activity.

Our contractual terms are available in the Zolis Terms & Conditions.

2. Information we may collect

The information we handle depends on how you interact with Zolis and may include:

• Account information: name, email address, account identifiers, authentication information, account status and access permissions.
• Business information: business name, contact details, business type, services, locations, staff information, availability and business settings.
• Booking information: requested services, appointment dates and times, booking status, customer details, relevant notes and other information associated with an appointment.
• Customer information: names, email addresses, telephone numbers, booking history and other information a business lawfully chooses to collect and manage through Zolis.
• Payment information: payment status, amounts, currency, transaction identifiers, connected-account information and payment-related metadata. Full card details are generally collected and processed by Stripe rather than stored by Zolis.
• Subscription information: Zolis plan, trial or subscription status, billing status and payment-provider identifiers associated with the subscription.
• Communications: support enquiries, messages sent to us, invitations, transactional message records and information required to deliver booking or account communications.
• Technical and security information: IP address, browser or device information, authentication events, request and system logs, and information used to operate, troubleshoot and secure the Service.
• Website information: information about visits and interactions where cookies, analytics or similar technologies are lawfully used.

3. How we obtain information

We may receive information directly from you when you create an account, configure a business, contact us or subscribe. We may also receive information from a business using Zolis when it invites staff, manages customers or receives bookings, and from customers when they submit information through a Zolis-powered booking journey.

Our service providers may provide us with operational information such as payment status, delivery status, authentication events and technical information needed to run and secure the Service.

4. Why we use personal information

Depending on the context, we may use personal information to:

• create, authenticate and secure Zolis accounts;
• provide and administer business workspaces and user permissions;
• provide online booking and appointment management;
• maintain customer and booking records for businesses using the Service;
• enable payments and booking deposits;
• manage Zolis plans, trials, subscriptions and billing;
• deliver booking confirmations, reminders and service communications;
• provide support and respond to enquiries;
• prevent fraud, abuse and security incidents;
• maintain, troubleshoot and improve Zolis;
• comply with legal, tax, accounting and regulatory obligations;
• establish, exercise or defend legal claims; and
• send marketing where permitted by law and in accordance with applicable choices.

5. Lawful bases

Where UK data-protection law applies and Zolis acts as controller, the lawful basis depends on the processing activity. We may rely on:

• Contract: where processing is necessary to enter into or perform a contract with you, including providing a Zolis account or paid Service.
• Legitimate interests: where necessary for legitimate business interests such as operating and improving Zolis, supporting users, maintaining security, preventing fraud and administering the Service, provided those interests are not overridden by your rights and interests.
• Legal obligation: where processing is necessary for Zolis to comply with an applicable legal obligation.
• Consent: where we ask for consent and consent is the appropriate lawful basis, including for certain non-essential cookies or marketing activities.

Where Zolis processes customer information only on the instructions of a business acting as controller, that business is responsible for determining the appropriate lawful basis for its processing.

6. Businesses using Zolis and their customers

A service business using Zolis generally decides why it needs information about its customers, which services it provides, what booking information is required and how it uses that information in its relationship with customers. That business may therefore be the controller of customer information it processes through Zolis.

Zolis provides the technology used to store and process that information and may act as a processor on the business's instructions for those activities. Zolis can also act as a controller for separate purposes of its own, such as platform security, account administration, billing and compliance where applicable.

If you are a customer of a business using Zolis and have a question about why that business holds your information, your booking history or the business's own use of your data, you should normally contact that business first.

7. Payments and Stripe

Zolis uses Stripe for payment functionality, including connected business payment flows and Zolis subscription billing. Stripe may collect and process payment and identity information directly under its own legal responsibilities and privacy practices.

Zolis may receive payment status, amounts, currency, transaction identifiers, connected-account identifiers, subscription information and other metadata needed to provide and reconcile payment functionality. Zolis does not need to store full payment-card numbers to provide the payment features currently offered.

8. Supabase, authentication and database infrastructure

Zolis uses Supabase for parts of its database and authentication infrastructure. Account, authentication, business, customer, booking and other information required to operate the Service may therefore be processed using Supabase infrastructure.

9. Email delivery and communications

Zolis uses email-delivery infrastructure including Resend and authentication-email functionality associated with Supabase. Relevant contact and message information may be processed to deliver account confirmations, invitations, password resets, booking confirmations, reminders, payment-related messages and other operational communications.

Businesses using Zolis remain responsible for ensuring that communications they initiate to their customers are lawful.

10. Who we share information with

We may share personal information where reasonably necessary with organisations that help us operate Zolis, including providers of:

• hosting and technical infrastructure;
• databases and authentication;
• payment processing;
• transactional email delivery;
• security, monitoring and fraud prevention;
• technical and professional support; and
• legal, accounting, insurance or regulatory services where necessary.

We may also disclose information where required by law, court order or a competent authority, or where reasonably necessary to establish, exercise or defend legal rights or protect people, accounts and systems.

We do not sell personal information.

11. International data transfers

Some technology providers used by Zolis may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we will rely on an appropriate legal transfer mechanism, such as an applicable adequacy arrangement or approved contractual safeguards.

12. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes for which it is processed, taking account of the nature of the information, the Service being provided and applicable legal, accounting, security and dispute-resolution requirements.

Account and business information may be retained while an account is active and for an appropriate period after closure. Transaction, subscription and accounting information may need to be retained for longer where required for financial, tax, fraud-prevention or legal purposes. Security logs and backups may be retained for limited operational periods.

Where Zolis processes customer information for a business, retention may also depend on that business's instructions and obligations. Information can remain temporarily in backups or security records after deletion from active systems where reasonably necessary.

13. Security

We use technical and organisational measures intended to protect personal information against unauthorised access, accidental loss, misuse, alteration and disclosure. Measures may include authentication, role-based access controls, infrastructure security, restricted administrative access and security logging.

No internet or storage system can guarantee absolute security. Users are also responsible for protecting their login credentials and for assigning appropriate access to their business workspace.

14. Cookies and similar technologies

Zolis may use cookies or similar technologies that are necessary for account sessions, authentication, security, preferences and core website functionality.

Where we use non-essential analytics, advertising, conversion tracking or similar technologies, we will provide appropriate information and obtain consent where required by law.

If Zolis introduces or materially changes advertising or analytics technologies, including Google advertising or conversion-tracking tools, this Privacy Policy and the site's cookie-consent implementation should be reviewed before those technologies are enabled.

15. Marketing

Where permitted by law, we may send information about Zolis products, features or offers. Where consent is required, we will ask for it. You can opt out of optional marketing using the unsubscribe method provided or by contacting us.

Operational messages required to administer an account, provide a requested service, protect security or communicate about a booking or subscription are separate from optional marketing communications.

16. Your data-protection rights

Depending on the circumstances and applicable law, you may have rights to:

• be informed about how your personal information is used;
• request access to personal information about you;
• ask for inaccurate information to be corrected;
• request deletion in circumstances where the right to erasure applies;
• request restriction of processing in applicable circumstances;
• object to certain processing;
• receive or transfer certain information where data portability applies;
• withdraw consent where processing relies on consent; and
• exercise applicable rights relating to certain automated decision-making.

These rights are not absolute and the right that applies can depend on the purpose and lawful basis for processing.

For information controlled by Zolis, contact atlas@zolis.info. If your request concerns information that a service business controls about you as its customer, you may need to contact that business directly.

17. Complaints

If you have concerns about Zolis's handling of personal information, please contact atlas@zolis.info so we can investigate.

You may also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.

18. Children's information

Zolis is business-management software and is not designed as a service directed specifically at children. Businesses using Zolis are responsible for ensuring that any information they collect about children through their own services is collected and handled lawfully and appropriately.

19. Changes to this Privacy Policy

We may update this Privacy Policy when Zolis, our suppliers, our processing activities or applicable legal requirements change. The current version will be published on this page with its latest update date. Where appropriate, we will provide additional notice of material changes.

20. Contact us

For privacy questions or requests, contact atlas@zolis.info.

For more information about the Service, see Zolis features, online booking, payments and plans and pricing. Our contractual terms are available in the Terms & Conditions.