Zaybair Privacy Policy

Effective date: 15 October 2026
Operator: Yusuf Gangat, trading as Zaybair

This Privacy Policy explains how Zaybair collects, uses and handles personal information when you visit the Zaybair US website, contact us, apply for a service, request a Plumbing Demand Report, or become a client.

Zaybair is operated by Yusuf Gangat, trading as Zaybair, from 15 The Braids Road, Emmarentia, Johannesburg, South Africa. Privacy enquiries can be sent to [email protected].

1. Information we collect

We collect information that you choose to provide through our website or service process. Depending on the form or service, this may include your name, business name, email address, phone number if requested or supplied, business website, business location and service area, services, advertising information, budget information, messages, application answers and other business information needed to respond to your request or assess service suitability.

For Plumbing Demand Report requests, we collect the information needed to understand the business, service area and priority services. We may use non-identifying service and location information when carrying out keyword and market-demand research. We do not send your name, email address or other direct identity information to Google Keyword Planner as part of that research.

If you become a client, we may also process information needed to manage the service relationship, including agreement records, approvals, account-access information, invoices, payment status, support messages, website content and other operational records.

2. Information collected automatically

Like most websites, technical providers may receive information generated when your browser communicates with the site. This can include IP address, browser/device information, timestamps, requested pages, referrer information and security-related signals.

Our own website tracking layer is deliberately limited. It can send page and conversion information such as event name, page path/title, approved tracking identifiers and a random submission transaction ID. We do not send form-field values, email addresses, names, free-text messages or other submitted personal information to Google Analytics or Google Ads through our launch tracking implementation.

3. How we use information

We may use information to:

• respond to enquiries and requested follow-up;
• review applications and assess whether a service is suitable;
• prepare and deliver requested Plumbing Demand Reports;
• provide, manage and support client services;
• deliver form submissions reliably and protect forms against abuse;
• communicate about an application, service, invoice or support matter;
• measure website use and successful form conversions where permitted by your privacy choices;
• maintain security, troubleshoot problems and prevent misuse;
• keep business, contractual and accounting records; and
• comply with applicable legal obligations or establish, exercise or defend legal rights.

Submitting an enquiry, application or report request does not automatically subscribe you to unrelated marketing. If Zaybair introduces a separate marketing list, it will use a separate sign-up or other appropriate permission mechanism.

4. Forms and email delivery

Website forms are submitted through Zaybair’s Cloudflare-based form endpoint. Cloudflare Turnstile is used as an anti-abuse and security measure. After a valid submission is accepted, Postmark is used to deliver the submission to Zaybair’s email inbox.

The public website does not maintain a general-purpose lead database for these submissions. Zaybair’s custom form logging is designed not to log form bodies, names, email addresses, IP addresses or Turnstile tokens. Cloudflare, Postmark and other infrastructure providers may still process ordinary connection, security and delivery metadata as part of providing their services.

A form conversion is recorded only after the form endpoint confirms that the submission has been accepted for delivery. Confirmation URLs are not intended to contain personal information.

5. Analytics, advertising measurement and privacy choices

Zaybair uses Google Tag Manager to manage Google measurement tags. Google Analytics 4 is used for website analytics and Google Ads conversion tracking is used to measure successful business actions.

The website provides privacy choices for Analytics and Advertising. Google Consent Mode is used so Google receives the applicable consent state.

Where optional storage is denied, Google tags may still send limited, restricted measurement requests that do not rely on advertising cookies. Where the relevant storage is granted, Google may use cookies or similar identifiers in accordance with Google’s own systems and policies.

At launch:

• analytics storage is denied until allowed;
• advertising storage and advertising-related consent signals are denied until allowed;
• personalization storage remains denied;
• URL passthrough is disabled;
• enhanced conversions are not enabled;
• form-field identity data is not sent for advertising matching; and
• Meta Pixel is not enabled in the current launch configuration.

You can reopen the website’s Privacy Choices control to change your selection. Withdrawing optional consent updates the active consent state. Zaybair’s own optional Google-related first-party cookies that it is able to clear are removed on withdrawal; third-party or HttpOnly storage may be controlled by the relevant provider/browser rather than directly by site JavaScript.

The website also recognises the browser Global Privacy Control (GPC) signal for advertising choices. When GPC is present, advertising is forced off while that signal remains active, even if a user previously selected advertising.

6. Local storage and short-lived confirmation data

The site uses first-party browser storage for privacy preferences. The zaybair_privacy local-storage record contains the consent version, analytics choice, advertising choice and timestamp. The choice is treated as valid for up to 180 days, unless the consent version changes or you clear/change the preference sooner.

For some successful submissions, the site may use a short-lived session-storage receipt containing a confirmation route, a random submission ID and timestamp. It contains no form-field values or email address and is treated as valid for approximately 10 minutes for confirmation-page continuity.

See the Cookie Policy for more detail about cookies, browser storage and measurement technologies.

7. Service providers and recipients

Depending on the service being used, information may be processed by providers that support Zaybair’s website and operations, including:

• Cloudflare — website delivery, security, Turnstile and form infrastructure;
• Postmark — transactional form email delivery;
• Google — Tag Manager, Analytics and Google Ads measurement;
• email and business-service providers used to receive and manage communications; and
• professional advisers or authorities where disclosure is reasonably necessary for legal, accounting, security or compliance purposes.

Zaybair does not sell a visitor database to advertisers. Zaybair does not provide form-submission identity data to Google for enhanced-conversion matching in the launch configuration.

8. International processing

Zaybair operates from South Africa and serves businesses in the United States. Some service providers operate infrastructure in multiple countries. As a result, information may be processed outside the country where you are located. Zaybair uses established service providers and handles cross-border processing subject to applicable legal requirements.

9. Retention

Zaybair keeps information only for as long as reasonably needed for the purpose for which it was collected, legitimate business administration, dispute handling and applicable legal or accounting obligations.

As a working operational rule, information relating to an unsuccessful prospect may generally be retained for up to 12 months from the most recent meaningful interaction, unless a longer period is reasonably required for a legal, security or record-keeping reason.

Client contractual, invoicing, service and accounting records may be retained for longer where needed to administer the relationship or meet legal/accounting obligations.

Client-specific website files/content are subject to the Service Terms. Where service ends, those files may remain recoverable for 30 days after service ends, after which active copies may be deleted in the normal course of operations. Backup copies may persist temporarily through ordinary backup rotation.

Analytics and advertising data retained by Google is subject to the applicable account configuration and Google’s own retention rules.

10. Security

Zaybair uses reasonable technical and organisational safeguards appropriate to the website and service, including a static-site architecture, HTTPS, security headers, server-side form validation, Turnstile, rate limiting, restricted secrets and access controls. No internet service can guarantee absolute security.

If Zaybair becomes aware of a security incident involving personal information, it will assess and respond to the incident in accordance with applicable obligations.

11. Your privacy requests

Depending on the law that applies to you, you may have rights relating to access, correction, deletion, objection, restriction, portability, withdrawal of consent or complaints to an appropriate regulator.

To make a privacy request, email [email protected]. Zaybair may need to verify your identity or authority before acting on a request. Rights are subject to applicable legal exceptions and record-retention requirements.

12. Children

This website is a business-to-business service aimed at plumbing businesses and is not directed to children. Please do not submit personal information about children unless it is genuinely necessary and lawful for a specific business purpose. If you believe a child has submitted personal information improperly, contact [email protected].

13. Changes to this policy

Zaybair may update this Privacy Policy when the website, providers, tracking configuration, business structure or legal requirements change. The current version and effective date will be published on this page. Material changes will be highlighted or otherwise communicated where reasonably appropriate.

Before Meta Pixel or any materially different advertising/marketing technology is enabled, this policy and the Cookie Policy should be reviewed and updated to reflect the live configuration.

14. Contact

Yusuf Gangat, trading as Zaybair
15 The Braids Road
Emmarentia, Johannesburg
South Africa
Email: [email protected]