Privacy policy.

ZeroBaseCamp is an editorial publication operated by ZBB Consulting Limited (company number 10695950, registered at Acre House, 11/15 William Road, London NW1 3ER, United Kingdom), with editorial direction by its founder Rodrigo Abdalla. We publish weekly commentary on Zero-Based Budgeting and Transformation. For any privacy-related questions, write to hello@zerobasecamp.com.

We collect three categories of information, all minimal:

Subscription data. When you subscribe to the newsletter, your email address (and optionally first name) is stored by Beehiiv, our newsletter delivery platform. Beehiiv processes this data on our behalf under their privacy policy at beehiiv.com/privacy. We use your email solely to deliver the newsletter and occasional editorial communications.

Contact form submissions. When you send a message via the contact form on /contact, your name, email, subject, and message are sent to our hello@zerobasecamp.com inbox via Resend, our transactional email provider. We retain these messages for editorial reference and to reply to you. Messages are deleted on request.

Analytics data. With your consent (see the cookie notice on the site), we use Google Analytics 4 to understand aggregate site usage — pages viewed, geographic region, browser type, referral source. IP addresses are anonymized before storage. We do not link analytics data to your subscription or contact information. If you decline analytics, GA4 still receives anonymous, cookieless pings used by Google for aggregate modeled data, but no identifiable data is collected.

We use one functional cookie and, if you consent, one analytics cookie:

zbc_consent(essential, 12 months). Stores your cookie preferences so we don't ask again. We cannot avoid this — it's how your “Reject” choice is remembered.

zbc_sticky_dismissed(essential, 7 days). Stores your dismissal of the subscribe banner so it doesn't reappear immediately.

_ga (analytics, 13 months). Set by Google Analytics if you accept the cookie notice. Used for distinguishing visitors. Disabled by default.

_ga_<id> (analytics, 13 months). Set by Google Analytics for session tracking. Disabled by default.

You can change your cookie preferences at any time using the button below.

We process your personal data under the following legal bases:

• Consent for analytics cookies and newsletter subscription.
• Contract for delivering the newsletter you signed up for.
• Legitimate interest for responding to messages you send us via the contact form.
• Legal obligation where applicable (e.g., complying with a court order or government request).

Under GDPR (and equivalent rights under Brazil's LGPD and other jurisdictions), you have the right to: access the personal data we hold about you, correct inaccurate data, request erasure, restrict processing, data portability, and object to processing.

To exercise any of these rights, write to hello@zerobasecamp.com. We respond within 30 days. There is no charge.

You also have the right to lodge a complaint with a supervisory authority. As ZBB Consulting Limited is established in the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO) at ico.org.uk. Readers in the European Economic Area may also complain to their local supervisory authority — in Portugal this is the Comissão Nacional de Proteção de Dados (CNPD).

We share data only with the service providers necessary to operate the site:

• Beehiiv (newsletter delivery, US-based, GDPR-compliant data processing addendum in place).
• Resend (transactional email, US-based, GDPR-compliant DPA).
• Vercel (web hosting, US-based, GDPR-compliant DPA).
• Neon (database, US-based, GDPR-compliant DPA).
• Google (analytics, only with your consent).

We do not sell, rent, or trade your personal data to anyone, ever. We do not use your data for advertising or for AI model training.

• Newsletter subscription: until you unsubscribe.
• Contact form submissions: indefinitely, unless you request deletion.
• Analytics data: 14 months (Google Analytics default), then automatically deleted.
• Admin session data: 7 days from last activity.
• Server logs (operational, not user-tracking): 30 days.

Some of our service providers (Beehiiv, Resend, Vercel, Neon, Google) are based in the United States. When we transfer your data outside the United Kingdom or European Economic Area, we rely on the UK International Data Transfer Agreement (IDTA) and standard contractual clauses (SCCs), ensuring equivalent protection to UK GDPR and EU GDPR.

ZeroBaseCamp is intended for professional adults working in finance, consulting, or business operations. We do not knowingly collect personal data from anyone under 16. If you believe a child has subscribed, write to hello@zerobasecamp.com and we will delete the data.

We may update this policy from time to time. Material changes will trigger a new version number and, where required by law, we will request fresh consent. The current version and effective date are shown at the top of this page.

Questions about this policy or your data: hello@zerobasecamp.com.