Zoravel Scope
Privacy Notice
Who operates this site
Elixon LTD is the data controller, company number 11639021, registered office at 51 Roundmead, Bedford, MK41 9HY, United Kingdom, and operates Zoravel Scope. Effective date: 2026-10-11.
Research purpose
We investigate how agencies handle project scope changes and whether a proposed product is worth building. Submitting answers is not a product signup or newsletter subscription.
Information you provide
The questionnaire asks for work email, optional agency name and role details, agency size, recent request channels, frequency, outcome, current process, an optional written answer, separate interview-contact permission and research consent. We keep evidence of the consent statement and privacy-notice version in the research notification email. Please do not include client names, sensitive personal information or confidential project details. This research is intended for adult agency professionals.
Where answers go
When the questionnaire is enabled, answers are transmitted through Resend, our email delivery provider, to an Elixon LTD mailbox. The website does not persist responses in an application database, files or browser storage. Resend and the receiving mailbox handle and store email data. An acknowledgment is sent to your supplied email address. Provider acceptance does not confirm inbox delivery.
Research conversations
Elixon LTD may contact you for a research conversation only if you select Yes. Selecting No records your answers without interview follow-up. Neither choice subscribes you to marketing.
Technical data
Phoenix uses a signed session cookie for CSRF protection and form operation. Short-lived anti-abuse state contains token and source digests, timestamps and counters, not questionnaire answers. Infrastructure providers may process connection metadata to operate the site.
Providers and international processing
Fly.io hosts the website in the United States. Resend delivers research emails; the configured sending region is Ireland, and its providers may also process data in other countries. Elixon LTD's business email provider receives the research notification. Your email provider receives your acknowledgment. Resend's data-processing terms include standard contractual clauses and a UK addendum for relevant international transfers. You can ask us for information about the safeguards applying to your data at the contact address below.
Your choices
There are no product accounts, automated eligibility decisions or profiling based on questionnaire answers. Providing your answers and email is optional; without research consent we do not accept the questionnaire. You can decline interview contact and still submit your answers.
Analytics
We use self-hosted Umami at analytics.elixon.co.uk for website usage and allow-listed interaction events. We do not send questionnaire answers, email, agency names, contact choices or submission tokens to analytics.
Monitoring
Questionnaire answers are excluded from application error reporting. No external monitoring SDK is enabled in this configuration.
Retention and lawful basis
We retain identifiable questionnaire responses, consent records and related research correspondence for no more than six months after submission, and delete or irreversibly anonymise them sooner when no longer needed or when research consent is withdrawn. This period allows us to analyse responses and conduct any separately agreed research conversation. Elixon LTD manages deletion from its research mailbox and any working copies; this website does not automatically delete mailbox messages. Truly anonymous summaries may be retained. Delivery-provider logs and backup copies follow the provider's retention arrangements; we request deletion where applicable and do not reuse residual copies for research. Our lawful basis for questionnaire research and its acknowledgment email is your consent under Article 6(1)(a) UK GDPR. Participation is voluntary and you may leave without submitting. Research interview contact requires your separate Yes choice and can be withdrawn independently. Withdrawing consent does not affect processing that was lawful before withdrawal. We use legitimate interests under Article 6(1)(f) only for proportionate website security and abuse prevention, balancing these measures against your rights; we do not use this basis to continue research after consent is withdrawn.
Your information and contact
Email privacy@zoravel.com to withdraw research consent or interview permission, ask for access, correction, deletion, restriction or portability, or object to processing based on legitimate interests. We respond within one month unless a lawful extension applies, and may ask only for information needed to confirm your identity. You can complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or your local supervisory authority. You do not need to contact us before complaining.