Privacy Statement

Last updated February 27, 2025

Introduction

Zeva and any subsidiaries or affiliates that operate Websites (“Zeva”) value and respect your privacy. This Website Privacy Statement (“Privacy Statement”) describes the types of personal data we collect when you access our websites and browser-based portals that link to this Privacy Statement (the "Websites"), our practices for collecting, using, and sharing such personal data, and your rights with respect to such personal data.

Please note that this Privacy Statement does not apply to personal data collected by Zeva via Zeva’s other business products and services, in which case Zeva typically acts as a service provider to our business clients (please see the section below titled “Zeva as a Service Provider” for additional information), and does not apply to personal data collected by Zeva (i) in its role as an employer or prospective employer, or (ii) through other means, e.g., information we collect when you interact with us at industry conferences or via phone or email, or information we collect from third parties, which, in each case, Zeva’s data collection and processing practices are governed by separate privacy statements.

By continuing to use the Websites, you have accepted this Privacy Statement in its entirety and without modification and agreed to our collection, use, and sharing of your personal data, as described in this Privacy Statement. If you do not agree with this Privacy Statement, please do not use the Websites.

We may revise this Privacy Statement periodically and will post any changes to the Websites. Changes to this Privacy Statement are effective at the time they are posted, and your continued use of the Websites after posting will constitute acceptance of, and agreement to be subject to, those changes. Please review this Privacy Statement from time to time to ensure you are aware of changes to this Privacy Statement.

Zeva as a Service Provider. In providing services to our business clients Zeva acts as a service provider (also known as a “data processor”). Our clients – many of which are financial, healthcare, educational, retail, or governmental institutions – use our products and services to help securely process data of their customers and employees.

Therefore, if you are using Zeva products or services as a customer or employee of a Zeva client, then any information collected in connection with such use will be processed and shared in accordance with that client’s privacy policies and practices and, to the extent applicable, our product-specific privacy notices in our capacity as such client’s service provider. If you have questions about the processing of your personal data by a Zeva client using a Zeva product or service, please contact that client directly.

What Personal Data Does Zeva Collect?

When we refer to personal data (or “personal information”) in this Privacy Statement, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or is linked or reasonably linkable to you, either alone or in combination with other information. More detail about the types of personal data Zeva collects is set forth below. References to “personal data” or “personal information” do not include aggregated and de-identified information. We will maintain and use this data only in a deidentified fashion and will not attempt to re-identify the data.

Information you provide to us
We collect the personal data that you provide to us when you visit our Websites. This includes the personal data you provide when you register to use our Websites, request information about our services using our Websites’ web forms, and/or purchase or subscribe to products or services from our Websites.

The information you provide may include identifiers, such as your name, phone number, email address, and mailing address; professional information, such as your job function, title and place of employment; your financial account or debit or credit card information; and any other information you choose to submit to us via the Website in connection with the foregoing.

For What Purposes Do We Use The Information We Collect?

Where applicable law requires us to have a so-called “lawful basis” for processing personal data, we only process personal data where we have such a lawful basis to do so (e.g., necessary for the performance of a contract, to comply with a legal obligation, to pursue our legitimate interests or where we have consent).

We collect and process personal data for various purposes, including:

  • To provide, maintain, or troubleshoot access to our Websites;
  • To monitor, evaluate, and improve the content, functionality and usability of our Websites (e.g., debugging, measuring website traffic, etc.);
  • To investigate and prevent fraudulent or illegal activity or unauthorized access to our Websites;
  • To communicate with you, including to respond to your inquiries, to provide you with effective customer service, and to invite you to participate in surveys and provide feedback to us;
  • To conduct internal research and development;
  • To comply with applicable laws or regulations;
  • For advertising and marketing purposes, including to contact you with personalized offers and other information we believe may be of interest to you;
  • To deliver relevant advertising to you, and to audit, measure, and understand the effectiveness of advertising we serve to you and others;
  • To ensure that content from our Websites is presented in the most effective manner for you and for your device.
We may aggregate or de-identify personal data collected via the Websites so that such information can no longer be linked to you or your device. We may use aggregated or deidentified information for any purpose, in our discretion.

Does Zeva Share And Disclose Personal Data?

We may share and disclose your personal data in certain circumstances, including:

  • We may disclose personal data to protect, enforce or defend our rights or those of others, or where we believe the disclosure is required by law.
  • We may disclose personal data to prevent or investigate a possible crime, such as fraud or identity theft, or to protect the security of our Websites, products and services.
We may also share aggregated or de-identified information with third parties, at our discretion.

Digital Advertising And Analytics

We may partner with ad networks and other ad serving providers (“Advertising Providers”) that serve ads on behalf of us and others on non-affiliated platforms. Some of those ads may be personalized, meaning they are intended to be relevant to you based on information Advertising Providers collect about your use of our Websites and other websites or apps over time, often through the use of cookies or similar technologies, including information about relationships among different browsers and devices. This type of advertising is known as targeted advertising (also referred to as “cross-context behavioral advertising”).

We may also work with third parties that collect data using cookies and similar technologies about your use of our Websites and other sites or apps over time for nonadvertising purposes. Zeva uses Google Analytics and other third-party services to improve the performance of the Websites and for analytics or marketing purposes. For more information about how Google Analytics collects and uses data when you use the website, visit www.google.com/policies/privacy/partners, and to opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

How Long Do We Retain Personal Data?

We only retain personal data for as long as reasonably necessary for the purpose in which it was collected. For example, where your personal data is needed to provide you with access to our websites, online products or services, we retain your personal data for the period in which we are providing that access unless we are required by law to dispose of it earlier or to keep it longer. We also retain personal data as necessary to comply with our legal obligations, resolve disputes, pursue legitimate business interests, conduct audits, and protect or enforce our rights.

Protecting Your Personal Data

We use reasonable administrative, technical, and physical security measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These security measures are designed to provide a level of security appropriate to the risk of processing your personal data.

What Rights Do You Have With Respect To Your Personal Data?

Certain states’ and countries’ data protection laws provide their residents with rights regarding businesses’ use of their personal data, including the rights to know, access, correct, transfer, restrict the processing of (including specific restrictions that may pertain to the sale or sharing of personal information, the processing of sensitive information, and more), and delete personal data. Regardless of your state or country of residence, you can currently contact Zeva at any time using the instructions set out below to request that we:

  • confirm whether we process your personal data;
  • disclose the categories of personal data that we have collected about you;
  • disclose the categories of sources from which we have collected your personal data;
  • disclose our purpose(s) for collecting, disclosing, or selling your personal data;
  • disclose the categories of personal data about you that we have sold, and the categories of recipients of such personal data;
  • disclose the categories of personal data about you that we have disclosed to third parties for business purposes and the categories of recipients of such personal data;
  • delete all or some of your personal data;
  • change, update, or correct your personal data;
  • disclose the specific pieces of personal data that we have collected about you and provide you with a copy of such personal data in a commonly used electronic format (or ask that it be provided in that format to a third party);
  • stop selling your personal data and stop sharing or processing your personal data for purposes of targeted advertising (also known as “cross-context behavioral advertising”).
We will consider and respond to your requests promptly, and otherwise in accordance with all applicable laws. Furthermore, if you choose to exercise your privacy rights or make the above requests, Zeva will not treat you in a discriminatory way, nor will you receive a lesser degree of service from Zeva.

Instructions for submitting requests. You can make any of the above requests by emailing us at [email protected] using subject line “Data Subject Request” and clearly stating the request(s) you’d like to make, or by calling us toll-free at 1-888-938-2462.

In order to help ensure that your personal data is not disclosed to any person who does not have the right to receive it, and to help ensure your personal data is not mistakenly deleted or changed, Zeva will attempt to verify that you are the subject of the personal data you are requesting to access, delete, or correct. We may ask for your email address and about your relationship with Zeva (e.g., Website user, customer, vendor, employee, etc.). We will compare the information you provide to any information we may have in our possession in order to verify your identity. We may also contact you at the email address you’ve provided to request additional information in relation to your request. Zeva will use the information collected through the request process only for verification purposes and responding to your request.

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please email us at [email protected].

We endeavor to substantively respond to a verifiable request within 30 days of its receipt. If we require more time (up to another 30 days), we will contact you at the email address you provide.

Authorized Agent. You may also choose to authorize an agent to make the above requests or exercise your rights. If you use an agent, we will take measures to verify your agent’s authorization to act on your behalf and we may require more information to ensure proper verification of both you and your agent’s identity and authorization.

Please note that Zeva may not be able to respond to your request if we cannot verify your identity, or your agent’s identity and authority to make the request, and confirm the personal data relates to you.

Appeals Procedure. You may appeal our decision to decline your request by emailing us at [email protected] using subject line “Data Subject Request Appeal” and clearly stating the decision(s) you wish to appeal. We will respond to your appeal within 30 days of our receipt of your email, which response will include an explanation of our decision. If you are dissatisfied with our decision on appeal, and you live in a jurisdictions that allows for individuals to engage a regulatory authority regarding our decision, Zeva will provide a link to relevant regulatory authority’s website in our response. Additionally, you can object to the processing of your personal data in some circumstances (e.g., where we don’t have to process the information to meet a legitimate interest, contractual or other legal requirement). Your right to object to processing of your personal data may be limited in certain circumstances (e.g., where fulfilling your request would reveal personal data about another person or where you ask us to delete information which we are required by law to keep or have other compelling legitimate interests to keep such as for purposes of fraud prevention). As noted above, we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled.

If we have collected and processed your personal data with your consent, then you can withdraw your consent at any time by contacting [email protected]. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data on lawful processing grounds other than consent.

External Website

Our Websites may contain links to third-party websites. We do not control, and are not responsible for, the content or privacy practices of these other websites. Our provision of such links does not constitute our endorsement of these other websites, their content, their owners, or their practices. This Privacy Statement does not apply to third-party websites.

Sensitive Personal Information. We do not collect or use sensitive personal information other than financial account or debit or credit card information when you make a purchase online, which information is used only to process your payment for such purchase.

An Explanation of Your Rights. The CCPA provides consumers (California residents) with specific rights regarding their personal information. Please see the section titled “What Rights Do You Have With Respect to Your Personal Data?” above for an explanation of those rights and how you may exercise them.

Contact Us

If you have questions or concerns about this Privacy Statement or our handling of your personal data, please contact us at [email protected] or:
Zeva Incorporated
10300 Eaton Place Suite 305
Fairfax, VA 22030