Ziqaa is a website, advertising and local SEO agency for clinics, run by its two founders, Usman Ashiq and Sania Humayoun. In this policy, "Ziqaa", "we" and "us" means us, and "you" means anyone who visits ziqaa.com or contacts us.

We are the controller of the personal information described here. If you have any question about this policy or your information, email us at Usman@ziqaa.com.

Information you give us. When you fill in our contact form, email us or speak to us, we collect what you choose to share. That is usually your name, email address, phone number, clinic name, clinic type and the details of your enquiry.

Information collected automatically. When you visit our website, we and our providers may collect technical information such as your IP address, browser and device type, the pages you view and how you arrived on the site. Some of this is collected using cookies and similar technologies, explained below.

We do not ask for, and do not want to receive, any patient or health information. Please do not send it to us.

• To reply to your enquiry and prepare a proposal or growth plan.
• To deliver the services you hire us for, and to manage invoices and our working relationship.
• To keep our website secure and working properly.
• To understand how our website and adverts perform, so we can improve them.
• To meet our legal and accounting obligations.

We will not add you to a marketing mailing list unless you ask us to, and we never sell your information.

Under UK and EU data protection law (the UK GDPR and the EU GDPR), we rely on the following legal bases:

• Legitimate interests: replying to enquiries from clinics and running our business.
• Contract: taking steps at your request before a contract, and delivering our services afterwards.
• Consent: for non-essential cookies and any marketing. You can withdraw consent at any time.
• Legal obligation: keeping financial records we are required to keep.

Our website uses essential cookies that it needs in order to work. Where we use analytics or advertising tools, such as Google Analytics, Google Ads or the Meta Pixel, they may set cookies to measure visits and the results of our adverts. Where the law requires it, these only run after you give consent.

You can change your choices at any time through our cookie banner where shown, or block and delete cookies in your browser settings. Blocking some cookies may affect how the site works.

We only share your information with trusted providers who help us run our business, and only as much as they need:

• our website hosting and email providers;
• analytics and advertising platforms such as Google and Meta, where you have allowed those cookies;
• professional advisers such as accountants, where needed;
• authorities, if the law requires us to.

These providers may only use your information to provide their service to us.

We work remotely, and some of our team and providers are based outside the UK and the European Economic Area. When your information is transferred outside these areas, we make sure appropriate safeguards are in place, such as the standard contractual clauses approved by the UK and EU authorities, or transfers to countries recognised as providing adequate protection.

• Enquiries that do not lead to working together: up to 24 months, then deleted.
• Client records and invoices: up to 6 years after our work ends, to meet accounting and legal requirements.
• Analytics data: according to the retention settings of the tool used, and never longer than 26 months.

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you have given.

To use any of these rights, email Usman@ziqaa.com. We will reply within one month. If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority in your country. We would appreciate the chance to put things right first.

We use secure, reputable providers, encrypted connections (HTTPS), strong passwords and limited access, so only the people who need your information can see it. No method of sending information over the internet is completely secure, but we take reasonable steps to protect it.

Our services are for businesses. Our website is not intended for children, and we do not knowingly collect information from anyone under 16.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.