GDPR Compliance

ZOKO IS GDPR COMPLIANT.

Bourbon Science Inc., trading as Zoko, processes personal data in accordance with the EU and UK General Data Protection Regulation. We act as controller for the data of our own customers and website visitors, and as processor for the end user data our customers handle through the platform, on their documented instructions. Every purpose we process data for has a stated lawful basis. Our Data Processing Addendum applies automatically to every customer and incorporates the Standard Contractual Clauses for international transfers. Our sub-processors are published, with thirty days' notice of any change and a right to object. We maintain records of processing activities and data flow maps, run an information security management system aligned to ISO 27001 v2022, and monitor our compliance status continuously. Our Privacy Policy maps each obligation under the regulation to where it is met.

All the details are in the Zoko Trust Center. That is where we publish our current compliance status against the GDPR and ISO 27001, the controls behind it, our full set of security and data protection policies, and the documents available on request, including our ISMS Manual and our Records of Processing Activities.

https://zoko.trust.site/

For any data protection question, to exercise a right, or to request a document that is not publicly viewable, write to contact@zoko.io with the subject line "Data protection".