Privacy Policy

Last updated: 25 July 2026 · Version 1.2

This policy is a starting template drafted by Zilk.ai and has not yet been reviewed by legal counsel; it describes our actual practices honestly, but it should not be treated as legal advice.

Who we are

Zilk.ai is an engineering firm delivering AI, cloud, network, and cybersecurity products and services. Our security practice operates as Zilk Security — a Zilk.ai company. For anything in this policy, the contact is web@zilk.ai.

What this site collects

This website is a static site. It has no user accounts, no login, and no database of visitors. The only personal data we collect is what you choose to send through the contact form:

  • your name (required)
  • your email address (required)
  • your company name (optional)
  • the topic you select and your message (required)

Our contact form is delivered through Google (Google Workspace / Apps Script), which emails the enquiry to us and records it in a private Google Sheet. Standard server logs — IP address, requested page, browser user-agent — are also kept by our infrastructure providers (Bluehost, Cloudflare) for security and operational purposes.

Optional analytics you can consent to

The contact form has an unticked, optional consent box. If you tick it, we capture some extra context alongside your enquiry to help us route and improve our response. If you leave it unticked, your message is sent without any of this, and that has no effect on how we handle your enquiry. What we capture only when you consent:

  • your approximate location and network — derived from your public IP address (city / region / country / internet provider); the lookup happens in your browser
  • basic device information — browser, operating system, device type, screen size, language, and timezone
  • which pages you viewed on this site during your visit, and how long you spent
  • how you arrived — the referring site and any campaign (UTM) tags in the link you followed

The page-journey is recorded locally in your browser as you browse and is only sent to us if you tick the consent box when you submit. This information is analytics-grade and self-reported by your browser; we use it to understand and serve enquiries, not to identify you across other sites. Our legal basis for it is your consent (GDPR Article 6(1)(a)), which you can withdraw at any time by writing to web@zilk.ai.

How your data is used

Contact form submissions are delivered by email to web@zilk.ai and used for exactly one purpose: reading and answering your inquiry. Specifically:

  • We do not sell, rent, or trade your personal data — to anyone, ever.
  • We do not add you to a mailing list or send marketing follow-ups.
  • We do not share your data with third parties, except the email and hosting infrastructure that technically delivers the message.

Under the GDPR, our legal basis for this processing is legitimate interest (Article 6(1)(f)): responding to a message you initiated.

Cookies, analytics, and your choice

When you first visit, a banner asks whether you accept analytics. Your choice is remembered in your browser’s local storage.

  • If you accept: we record anonymous page-view analytics as you browse — the pages you view, time on site, how you arrived (referrer / campaign), your approximate location and network (from your public IP), and basic device information (browser, OS, device type, screen, language, timezone). These are stored in our own private Google Sheet and used to understand and improve the site. They are not used to identify you and are not sold or shared for advertising.
  • If you decline: none of that is collected, and the site works exactly the same. You can change your mind by clearing this site’s data in your browser, which brings the banner back.

We run no third-party advertising scripts and set no advertising cookies. The one persistent cookie we set is a small technical value needed for the contact form to reach our mail handler. Our legal basis for the analytics above is your consent (GDPR Article 6(1)(a)).

How long we keep it

Contact emails are retained in our inbox for as long as needed to handle the inquiry and any engagement that follows from it. If your message does not lead to further contact, it is routinely deleted during mailbox housekeeping.

Your rights

If you are in the EU/EEA or UK, the GDPR gives you the right to access, correct, export, or erase the personal data we hold about you, and to object to its processing. We extend the same treatment to everyone regardless of location. To exercise any of these rights — including asking us to delete every email you have sent us — write to web@zilk.ai with the address you originally used. We will confirm completion by reply. You also have the right to lodge a complaint with your local data protection authority.

Changes to this policy

Any change to this policy is published here as a new version with a new date; the version line at the top of this page is authoritative.