How we use your information.
This notice covers this website and the Ziyon client portal at portal.ziyoncapital.co.uk. Last updated 17 October 2026.
Who we are
Ziyon Capital Advisory Limited (company number 17194026, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ) is the controller of the personal information described here. We are registered with the Information Commissioner's Office, registration number ZC275964. Contact us about anything in this notice at hello@ziyoncapital.co.uk.
This website
What we collect
- Snapshot requests and adviser referrals: your name, company or firm, email address, telephone number if you give it, and what you tell us about the business, the funding event and its timing.
- The Credit Readiness Playbook and the Funding Preflight: your email address and, for the Preflight, the summary of your answers.
- Booking a call: the details you enter in the Calendly booking form.
- Analytics, only if you accept: which pages are visited and how, through Google Analytics.
Why, and the lawful basis
- Replying to a request or referral, and taking steps you ask for before an engagement: our legitimate interest in responding, and steps prior to a contract.
- Sending the Playbook and an occasional note when new material is published (no more than monthly): your consent, which you can withdraw at any time by unsubscribing or emailing us.
- Analytics: your consent, given through the cookie choice on this site.
Who processes it for us
- Formspark receives the forms on this site and passes them to us; it stores them in Ireland.
- Calendly runs call booking; it is based in the United States.
- Google provides analytics (only with your consent) and the fonts this site uses; your browser contacts Google to load them.
- IONOS hosts this website, on servers in Germany.
- Microsoft provides our email.
Where a provider handles information outside the UK, it does so under safeguards recognised by UK law, such as the UK's adequacy regulations or standard contractual terms.
How long we keep it
Enquiries that do not lead to an engagement: two years from our last contact. Playbook and update emails: until you unsubscribe. Enquiries that lead to an engagement become part of the client file, kept as described below.
The client portal
What the portal is
We use a secure online portal, at portal.ziyoncapital.co.uk, to exchange documents and messages with clients and with the advisers who refer them, in place of email. Only people we invite can use it.
What we hold in the portal
- For each person who uses it: name, email address, the company or firm they belong to, and when they last signed in.
- For clients: the documents you upload (for example accounts, bank statements, management accounts and tax records), your answers to our questions, and the reports we deliver.
- For advisers: the referrals you submit, any documents you attach, your invoices, and the referral fees due and paid.
- A record of activity: each sign-in, each page of your file viewed, each upload and download, and each change to who can see your file, with the date, time and internet (IP) address.
Where it is held and who processes it
The portal and its database run on Microsoft Azure in the UK (UK South region). Documents are stored in our Microsoft 365 (SharePoint), held in the United Kingdom. Notification emails are sent from our Microsoft 365 mailbox. Sign-in is provided by Microsoft Entra External ID: your name, email address and, if you choose text-message codes, your mobile number are held by Microsoft in its Europe, Middle East and Africa region, and Microsoft may keep records of text messages it sends in North America. Microsoft acts as our processor under its Data Protection Addendum. No other company has access to the portal or your documents.
Transfers outside the UK
Sign-in details may be processed in the European Economic Area, which the UK recognises as giving adequate protection, and text-message records may be held in the United States under the safeguards in Microsoft's Data Protection Addendum. Your documents are not transferred outside the UK.
Advisers who referred you
If an adviser (for example your accountant or broker) referred you to us, they can see the stage your work has reached, but not your documents, unless you choose to give them access in the portal. You can give and withdraw access at any time, and each change is recorded. If your adviser sent us documents with the referral, they confirmed they had your authority to do so, and that confirmation is recorded.
Security
Everyone signs in with a password and a second step (a code sent by email or text message) at every sign-in, and sessions end after 30 minutes without activity or 8 hours in total. Information is encrypted in transit and when stored. Every view, upload, download and sign-in is logged.
How long we keep it
- Documents, messages and reports for an engagement: six years after the engagement ends (when we deliver our report, or when the engagement is closed without one), then deleted from the portal and from our document store, unless we need to keep them longer for a legal claim or regulatory requirement.
- Referral and referral-fee records: six years after the fee is paid.
- The activity record: six years.
- Your portal account: switched off after 90 days without signing in, and deleted with your company's records.
- Deleted documents remain recoverable for up to 93 days, and database backups are kept for 35 days, after which they are gone.
Lawful basis
- Running the portal and the work it supports: to perform our contract with you, or, for advisers and for client staff who are not party to the contract, our legitimate interest in delivering the engagement.
- The activity record and security checks: our legitimate interest in keeping your information secure, and our legal obligation to protect it.
- Keeping records for six years: our legal and regulatory obligations and our legitimate interest in being able to deal with claims.
Cookies
This website uses analytics cookies only if you accept them. You can change your choice at any time: cookie settings.
| Name | Where | Purpose | How long |
|---|---|---|---|
| _ga, _ga_* | This website | Google Analytics: which pages are visited and how. Only if you accept. | Up to 2 years |
| Your cookie choice | This website | Remembers whether you accepted or rejected analytics. Kept in your browser's storage, not a cookie, and not sent to us. | Until you clear it |
| Calendly cookies | Booking calendar | Set by Calendly when you open a booking calendar, needed for booking. | See Calendly's notice |
| __Host-ziyon_session | Client portal | Keeps you signed in. Strictly necessary. | Until you sign out, at most 8 hours |
| __Host-ziyon_auth | Client portal | Used only while you sign in. Strictly necessary. | 10 minutes |
Microsoft's sign-in pages for the portal set their own cookies, needed to sign you in.
Your rights
You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form, and you can withdraw consent at any time. Some rights are limited where we must keep records by law. Email hello@ziyoncapital.co.uk; we reply within one month.
If you are unhappy with how we handle your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.