Privacy Notice
This page is where Zoiko iD’s privacy information will be published once it has been approved. It is a publication shell: it shows the structure, not the legal content.

Work themes, not vacancies
Identity, authority and evidence
Document control
Document control and identity
This notice describes how Zoiko iD’s privacy information is to be presented. It is a publication
specification, not the operative notice and not a statement of processing activity.

- Public title
- Privacy Notice
- Legal entity and scope
- Pending Legal
- Effective date
- Pending Legal approval
- Last updated
- Shown separately, once approved
- Canonical URL
- Pending route registry
- Version
- Pending
Blocked until approved. No effective date, entity, retention period or contact is shown until its
governing source is supplied and approved.
Overview
Plain-language overview
A short answer to “What is this notice about?” will appear here once Privacy counsel has
approved the wording. Until then, no summary is shown, so that it cannot contradict the detailed clauses.

Summary rule
The summary never overrides the detailed clauses. If the summary is unapproved, the section is
omitted.
Contents
Contents
The contents list is generated from the approved section headings. It has stable anchors, works without JavaScript, and prints as a list.
Keyboard-operable jump list with a visible focus target.
Collapsed by default on mobile; expanded state is announced.
Browser find and Back navigation keep working.
Controller
Controller and services
The entity or entities responsible for each processing purpose, and the services in scope, will be listed only from the reviewed registry. Where a role is not yet confirmed, the row is withheld rather than guessed.

Controller
Exact legal entity per purpose.
Pending LegalProcessor roles
Only confirmed processing
roles.
Services in scope
Website, platform and
enterprise services, kept
separate.
Data categories
Information collected and sources
Each category will show its purpose, its source and the context in which it is collected. Empty
categories do not produce placeholder rows.
Account information
Categories for account holders,
only if verified.
Technical information
Categories only where the
inventory confirms them.
Communications
Enquiries and correspondence,
as approved.
Purposes
Purposes and lawful bases
A purpose-to-basis matrix will appear here. No general claim of consent or legitimate interest is made in advance; each basis must be matched to a purpose and jurisdiction.

Matrix rule
Each row links to its reviewed details. Rows without approved bases are withheld.
Recipients
Sharing and recipients
Recipient categories and processing roles are shown only where verified. No statement that
information is never shared is made unless it is independently evidenced.
Recipient categories: from the disclosure register.
Contractual references: only approved agreements.
Transfers
International transfers
Countries, receiving entities and safeguards are shown only from the legal registry. Where a
transfer detail is not established, it is omitted and the launch is held if the law requires it.

Destination
Country or region, verified.
Pending LegalSafeguard
Mechanism named only when
approved.
Receiving entity
Entity identified from the
registry.
Retention
Retention and deletion
Retention periods and deletion criteria appear only once approved for each purpose. Sample
numbers are never shown as actual periods.
Deletion criteria
Stated per purpose; a policy conflict places the item on hold.
Pending LegalRights
Your rights and choices
Rights are listed by jurisdiction and by eligibility. Each request type has a verified route, an
identity-verification explanation and its limits. No response time is promised.

Access
Eligibility and route pending.
Pending LegalErasure
Eligibility and exemptions
pending.
Withdrawal
Only where a basis is consent.
Pending LegalSafeguards
Security and automated processing
Only approved disclosures about safeguards, profiling and automated decision-making appear here. Assistance from AI is not treated as automated decision-making by default, and no algorithmic rights are claimed.

Safeguards: only approved descriptions.
Automated processing: only where legally required and verified.
Updates
Updates and previous versions
Effective and updated dates are shown separately. Earlier notices are kept as archived versions, labelled as such, and material changes are described from the source registry.
Archive
No archive is listed until one is approved.
Contact
Privacy contact and complaints
Privacy enquiries, rights requests and escalation to a supervisory authority are routed to
approved destinations. No contact address, data protection officer or response time is shown until verified.

Privacy enquiries
Approved route only.
Pending LegalRights requests
Verified route, with identity
Pending Legal
checks.Authority escalation
Per applicable jurisdiction.
Pending Legal
Gate
Publication gate
Publication prohibited. The page may be built for layout and engineering review. It may not be
published until Privacy counsel approves the notice, the controller and region scope is verified,
and every legally required data row is backed by the registry.


Legal & Privacy · 02
Privacy Notice
This page is where Zoiko iD’s privacy
information will be published once it has
been approved. It is a publication shell: it
shows the structure, not the legal content.
Approval gate. Terms of Use must
be approved before this notice
begins. Publication is blocked until
counsel approves the text.





Document control
01
Document control and
identity

This notice describes how Zoiko iD’s
privacy information is to be presented. It is
a publication specification, not the
operative notice and not a statement of
processing activity.
- Public title
- Privacy Notice
- Legal entity and scope
- Pending Legal
- Effective date
- Pending Legal approval
- Last updated
- Shown separately, once approved
- Canonical URL
- Pending route registry
- Version
- Pending
Blocked until approved. No
effective date, entity, retention
period or contact is shown until its
governing source is supplied and
approved.
Overview
02
Plain-language overview

A short answer to “What is this notice
about?” will appear here once Privacy
counsel has approved the wording. Until
then, no summary is shown, so that it
cannot contradict the detailed clauses.
Summary rule
The summary never overrides the
detailed clauses. If the summary is
unapproved, the section is
omitted.
Contents
03
Contents
The contents list is generated from the
approved section headings. It has stable
anchors, works without JavaScript, and
prints as a list.
Keyboard-operable jump list with a visible
focus target.Collapsed by default on mobile; expanded
state is announced.Browser find and Back navigation keep
working.
Controller
04
Controller and services

The entity or entities responsible for each
processing purpose, and the services in
scope, will be listed only from the reviewed
registry. Where a role is not yet confirmed,
the row is withheld rather than guessed.
Controller
Exact legal entity per purpose.
Pending LegalProcessor roles
Only confirmed processing roles.
Pending LegalServices in scope
Website, platform and enterprise services, kept
separate.
Data categories
05
Information collected and
sources
Each category will show its purpose, its
source and the context in which it is
collected. Empty categories do not produce
placeholder rows.
Account information
Categories for account holders, only if verified.
Pending LegalTechnical information
Categories only where the inventory confirms
them.
Communications
Enquiries and correspondence, as approved.
Pending LegalPurposes
06
Purposes and lawful bases

A purpose-to-basis matrix will appear here.
No general claim of consent or legitimate
interest is made in advance; each basis
must be matched to a purpose and
jurisdiction.
Matrix rule
Each row links to its reviewed
details. Rows without approved
bases are withheld.
Recipients
07
Sharing and recipients
Recipient categories and processing roles
are shown only where verified. No
statement that information is never shared
is made unless it is independently
evidenced.
Recipient categories: from the disclosure
register.Contractual references: only approved
agreements.
Transfers
08
International transfers

Countries, receiving entities and
safeguards are shown only from the legal
registry. Where a transfer detail is not
established, it is omitted and the launch is
held if the law requires it.
Destination
Country or region, verified.
Pending LegalSafeguard
Mechanism named only when approved.
Pending LegalReceiving entity
Entity identified from the registry.
Pending Legal
Retention
09
Retention and deletion
Retention periods and deletion criteria
appear only once approved for each
purpose. Sample numbers are never
shown as actual periods.
Deletion criteria
Stated per purpose; a policy
conflict places the item on hold.
Rights
10
Your rights and choices

Rights are listed by jurisdiction and by
eligibility. Each request type has a verified
route, an identity-verification explanation
and its limits. No response time is
promised.
Access
Eligibility and route pending.
Pending LegalErasure
Eligibility and exemptions pending.
Pending LegalWithdrawal
Only where a basis is consent.
Pending Legal
Safeguards
12
Security and automated
processing

Only approved disclosures about
safeguards, profiling and automated
decision-making appear here. Assistance
from AI is not treated as automated
decision-making by default, and no
algorithmic rights are claimed.
Safeguards: only approved descriptions.
Automated processing: only where legally
required and verified.
Updates
13
Updates and previous
versions
Effective and updated dates are shown
separately. Earlier notices are kept as
archived versions, labelled as such, and
material changes are described from the
source registry.
Archive
No archive is listed until one is
approved.
Contact
14
Privacy contact and
complaints

Privacy enquiries, rights requests and
escalation to a supervisory authority are
routed to approved destinations. No
contact address, data protection officer or
response time is shown until verified.
Privacy enquiries
Approved route only.
Pending LegalRights requests
Verified route, with identity checks.
Pending LegalAuthority escalation
Per applicable jurisdiction.
Pending LegalGate
16
Publication gate
Publication prohibited. The page
may be built for layout and
engineering review. It may not be
published until Privacy counsel
approves the notice, the controller
and region scope is verified, and
every legally required data row is
backed by the registry.


