Privacy policy
Who we are
Dyenzo is software for print, embroidery and decoration businesses in the United Kingdom and the United States. Dyenzo is run by Zorixo Ventures Ltd, registered in England and Wales, company number 15975548, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. In this policy "we" means Dyenzo. Write to us at [email protected] about anything in it.
Who this policy covers
- Visitors to dyenzo.com, including anyone who asks for early access or writes to us.
- Shops: the businesses that use Dyenzo and their staff.
- Shops' customers: people who buy from a shop that runs on Dyenzo. For their data the shop is in charge (the controller) and we act for the shop (the processor). Ask the shop first; we will help it answer you.
What we collect
- Early access and contact forms: your name, email address, business name and what you write to us.
- Shop accounts: staff names, email addresses, sign-in details (passwords are stored only as secure hashes), the browsers used to sign in and the actions staff take, kept as an audit trail.
- Business data a shop puts into Dyenzo: customers, quotes, orders, artwork, invoices, stock and the like. It belongs to the shop.
- Billing: the shop's billing contact and subscription. Card details go straight to Stripe and never reach our servers.
- Technical data: server logs with IP addresses and browser details, kept for security and to fix faults.
Why we use it, and on what legal basis
- To provide the service a shop signed up for (contract).
- To answer your enquiry or send the early access news you asked for (consent, which you can withdraw at any time).
- To keep the service secure, prevent fraud and fix faults (legitimate interests).
- To keep tax and accounting records (legal obligation).
We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use a shop's business data to train AI models.
Cookies
This website sets no advertising or tracking cookies. The Dyenzo app uses cookies that are needed to sign in and keep you signed in, and to remember a trusted browser. A shop's own website may ask its visitors for consent to other cookies; that is the shop's choice and is covered by the shop's own policy.
Who we share it with
We use a small number of service providers who process data for us under written terms:
- Cloudflare, to serve and protect this website and shops' websites.
- Stripe, for subscription billing and for the card payments shops take.
- Our email delivery provider, to send account and shop emails.
- Our hosting and backup providers, to run the service.
- Anthropic, only when a shop uses an AI feature, to process the text that feature needs.
A shop may also connect its own accounts, such as QuickBooks, Xero, Shopify, EasyPost, TaxJar, marketplaces or garment suppliers. Data then flows to those services because the shop chose it, under the shop's own agreement with them. We share data with authorities only when the law requires it.
International transfers
Some providers process data in the United States or elsewhere outside the UK. Where they do, we rely on the UK International Data Transfer Agreement or Addendum, the UK extension to the EU to US Data Privacy Framework, or another safeguard the law allows.
How long we keep it
- Early access and enquiries: until you ask us to delete them, or 2 years after we last heard from you.
- Shop data: while the shop's account is open. After a shop cancels, we keep its data for 90 days so it can come back or export it, then delete it with every file.
- Invoices and tax records: as long as tax law requires, usually 6 years in the UK and up to 7 years in the US.
- Server logs: up to 90 days.
How we protect it
Data is encrypted in transit. Each shop's data is kept apart from every other shop's by the database itself, not only by the app. Secrets such as connection keys are encrypted at rest. Staff can use two-factor sign-in, and sign-ins from a new browser are emailed. Card data never touches our servers.
Your rights
Under UK GDPR you can ask for a copy of your data, a correction, erasure, restriction, portability, or object to how we use it. Under US state privacy laws, such as California's, you can ask to know, correct or delete your personal information, and you will not be treated differently for asking. Write to [email protected]. We answer within one month (45 days under US state laws) and may need to check who you are first.
If you buy from a shop that uses Dyenzo, ask the shop. Shops can export or erase a customer's data from inside Dyenzo.
In the UK you can also complain to the Information Commissioner's Office (ico.org.uk). We would like the chance to put things right first.
Children
Dyenzo is a business service and is not meant for children. Shops that sell teamwear to schools and clubs collect only what they need, such as a name and number to print, and are responsible for any consent that needs.
Changes
When we change this policy we update the date at the top. If a change matters, we tell shops by email before it applies.