Privacy

Privacy Notice

How personal data is handled through the Zaidan Group corporate website.

This website is operated by Zaidan GROUP OÜ, an Estonian private limited company (OÜ), registry code 17303561, registered on 14 August 2025 in the Estonian Commercial Register.

Registered office: Tartu mnt 67/1-13b, 10115 Tallinn, Estonia.

Website: https://zaidan-group.com

Electronic contact: Info@zaidan-group.com

This notice explains how personal data is handled through the Zaidan Group corporate website.

Novarra AI, KikiHost and ISOReadyHub are brands of Zaidan GROUP OÜ. Their own websites may publish separate privacy information reflecting the processing that takes place on those sites.

When you use the contact form, we may process:

  • your full name;
  • work email address;
  • company or organisation, if provided;
  • enquiry type;
  • relevant portfolio brand, if selected;
  • your message;
  • your privacy acknowledgement;
  • submission time;
  • limited technical request information needed to secure and operate the form, such as source IP address.

We process contact-form information to receive, assess and respond to genuine enquiries, route them to the appropriate context, maintain relevant business correspondence and protect the website and form against misuse.

Depending on the nature of the enquiry, processing is based on our legitimate interests under Article 6(1)(f) GDPR in operating a corporate contact channel, handling business communications and protecting the service from abuse, and/or on Article 6(1)(b) GDPR where you ask us to take steps before entering into a contract.

The privacy acknowledgement in the form confirms that this notice has been presented to you. It is not consent to marketing.

Full name, work email, enquiry type, message and the privacy acknowledgement are required to submit the form. A portfolio brand is also required when the enquiry type is Portfolio brand. Company or organisation is optional.

If required information is not provided, the form cannot be submitted and we may be unable to assess or respond to the enquiry.

The form is validated on the server. Anti-abuse controls include a hidden honeypot, duplicate suppression and IP-based rate limiting.

The contact form is designed to deliver the enquiry by email rather than intentionally store the message in a separate website application database.

Submitting the form does not subscribe you to marketing communications.

Contact-form information may be accessed by authorised Zaidan GROUP OÜ personnel who need it to handle the enquiry.

Technical service providers used to host the website, secure the service or deliver contact enquiries may process limited personal data on Zaidan Group’s behalf where necessary for those functions.

The corporate website does not use analytics, advertising or marketing providers to profile visitors.

Zaidan Group does not intentionally transfer contact-form information outside the European Economic Area unless a production service provider requires that processing.

If a production provider processes personal data outside the European Economic Area, Zaidan Group will use an applicable GDPR transfer mechanism and will update this notice before that processing begins.

A human-verification service is not currently enabled. If one is enabled later, this Privacy Notice and the Cookies page will be reviewed and updated before activation to describe the actual provider and processing.

Contact enquiries are kept for the period reasonably necessary to handle the enquiry, follow up where appropriate and maintain ordinary business correspondence or records.

The retention period depends on the nature of the enquiry, whether an ongoing business relationship results and any applicable legal or record-keeping obligations.

The website uses HTTPS, server-side form validation and anti-abuse controls. Access to systems handling enquiries is limited to authorised operational use.

No website can guarantee absolute security.

Depending on applicable law and the circumstances of the processing, you may have rights relating to your personal data, including access, correction, deletion, restriction, objection and portability.

Where processing is based on legitimate interests, you may have the right to object to that processing.

To make a privacy request, use the contact form or email Info@zaidan-group.com.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). Information about complaints is available at https://www.aki.ee.

The corporate website does not use contact-form information for automated decision-making or profiling that produces legal or similarly significant effects.

The website links to other websites, including the websites of Zaidan Group brands. Those sites may have their own terms, privacy notices and technical processing.

This notice may be updated when the website, contact workflow, service providers or processing practices change. The publication date will be updated when a material change is made.

Last updated: 2026-09-27