ZatroX Studio (“we,” “us,” or “our”) respects your privacy and is committed to transparency. This Privacy Policy explains what information we collect, how we use it, who we share it with, your choices and rights (including California privacy rights), and how to contact us.
Scope. This Policy applies to:
- Website: https://zatrox.com (the “Site”)
- Services: Any products, services, apps, forms, and communications provided by ZatroX Studio (collectively, the “Services”).
If you have questions or requests, email [email protected].
1) Information We Collect
Information you provide
- Contact details (e.g., name, email, phone, company/organization, address)
- Account, billing & payment data (e.g., billing address, tax IDs; payments are processed by PCI-compliant processors; we do not store full card numbers)
- Project and support submissions (e.g., intake forms, tickets, chats, emails, attachments)
- Surveys, promotions, and events (optional)
Information collected automatically
- Usage & device data: IP address, device identifiers, browser type, operating system, pages visited, links clicked, referring/exit pages, timestamps, and general location derived from IP
- Cookies & similar tech: Pixels, tags, beacons used for analytics, performance, personalization, and marketing (see “Cookies & Tracking” below)
Information from third parties
- Service providers & platforms (e.g., analytics, ad platforms, CRM, helpdesk)
- Public and partner sources (e.g., business directories, social platforms per your settings)
2) How We Use Information
We process personal information to:
- Provide, operate, maintain, and secure the Services
- Communicate regarding accounts, orders, projects, and support
- Personalize content and improve UX, services, and marketing
- Perform analytics, measurement, and reporting
- Comply with legal obligations and enforce terms
- Email & SMS marketing/alerts (with consent where required)
Legal bases (where applicable): contract, legitimate interests, consent, and legal obligations.
3) SMS & Email Communications
We use trusted third-party providers to manage email and SMS communications.
SMS disclosures:
- Mobile numbers will not be shared or sold to third parties for marketing or promotional purposes
- Purpose: service updates, appointment reminders, onboarding notices, and marketing/promotional messages (when permitted)
- Message frequency may vary
- Message and data rates may apply
- Opt-out: reply STOP to unsubscribe; reply HELP for assistance
- Consent is not a condition of purchase
Email disclosures:
- You may unsubscribe from emails at any time via the “unsubscribe” link included in our messages
Preferences can be managed by contacting [email protected].
4) Cookies & Tracking
We use cookies and similar technologies to operate the Site, remember preferences, measure performance, improve content, and deliver/measure ads. You can manage cookies via our on-site preferences tool and your browser settings.
Google Analytics 4 (GA4). We use GA4 to analyze site usage to improve features, content, and marketing.
Microsoft Clarity. We use Clarity for behavioral analytics (heatmaps, session replays) to enhance UX, detect issues, and improve performance and marketing. Clarity may set first/third-party cookies. See the Microsoft Privacy Statement for details.
5) How We Share Information
We treat personal information as confidential. We share only as necessary:
- Vendors/processors (e.g., hosting, analytics, payments, CRM/marketing, security, professional advisors) under contracts requiring protection and limited use
- Group/affiliates & contractors for operations, support, accounting, and administration
- Legal & safety reasons when required by law or to protect rights, property, or safety
- Business transfers in connection with mergers, acquisitions, or reorganizations
- Domain registrars/registries as required for domain services (WHOIS/ICANN rules)
- With your consent or direction
We do not sell personal information. For California, we explain “sale”/“sharing” for cross-context behavioral advertising in Section 8. Mobile numbers collected for SMS programs are not shared or sold for marketing/promotional purposes.
6) International Transfers
We may process and store information in the United States and other countries. Where required, we implement lawful transfer mechanisms such as Standard Contractual Clauses.
7) Security
We employ technical and organizational measures such as encryption, access controls, and tokenized payments. No system is 100% secure; please protect your credentials and sign out after use.
8) Retention
We retain personal information only as long as necessary for the purposes described or as required by law. Certain billing and contractual records may be retained up to 10 years.
9) Your Rights & Choices
Depending on your location, you may have rights to:
- Access, correct, or delete personal information
- Object to or restrict processing
- Data portability
- Withdraw consent (for consent-based processing)
- Manage marketing preferences (unsubscribe/STOP)
Contact [email protected] to exercise rights.
10) California Privacy Notice (CCPA/CPRA)
Categories collected: identifiers, commercial info, internet/network activity, professional info, and inferences. Sources include you, your devices, service providers, and public/partner sources.
Purposes: providing services, support, security, analytics, marketing, and legal compliance.
We do not sell personal information for money. Some analytics/advertising cookies may constitute “sharing” for cross-context behavioral advertising. You may opt out by rejecting advertising cookies or emailing [email protected]. We honor Global Privacy Control signals where detected.
Sensitive personal information is not used or disclosed for purposes requiring the right to limit under CPRA.
California residents can submit requests to [email protected]. We will verify your request and respond per applicable law. You may designate an authorized agent.
We will not discriminate for exercising privacy rights.
We do not currently offer financial incentives in exchange for personal information.
11) Children’s Privacy
Our Services are not directed to children under 13, and we do not knowingly collect personal information from them. Users must be 18+ to purchase Services.
12) Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will provide notice (e.g., by email or Site notice) at least 10 days before the effective date. Continued use after the effective date signifies acceptance.
13) Contact
Support: [email protected]
Email (general & DPO): [email protected]