Privacy Policy

01Who we are

This website, zuzostudio.com, is run by Zuzo Studio LLC (“Zuzo”, “we”, “us”), a limited liability company formed in Wyoming, USA, filing ID 2026-001878266. We design and build websites for other businesses.

For the personal data described in this policy, Zuzo is the controller: we decide why and how it is used. You can reach us at hello@zuzostudio.com or by post at:

When we build or run a website for a client, the client decides how visitors’ data on that website is used. In that case the client is the controller, we act on their instructions as a processor, and the client’s own privacy policy applies.

02Personal data we collect and how we use it

“Personal data” means any information about an identified or identifiable person. What we collect depends on how you interact with us.

2.1 Visitors to this website

We do not use cookies, advertising trackers, social media pixels or embedded third-party content on this website. See our Cookie Policy.

Like every website, the servers that deliver our pages automatically receive basic technical information with each request: your IP address, browser and device type, the page requested, the referring page and the date and time. Our hosting provider, Cloudflare, records this in short-lived server logs. We use it only to deliver the site, keep it secure and investigate errors or abuse. We do not use it to build a profile of you.

Cookieless analytics. To understand which pages are useful, we use Cloudflare Web Analytics, a privacy-focused tool from Cloudflare, Inc., the company that also hosts and protects this site. A small script, loaded from static.cloudflareinsights.com, reports page-view information: the page you visited, the referring page, your browser and device type, how quickly the page loaded and the country your visit came from. It does not use cookies or store anything on your device, and it is not used to identify you, follow you across other websites or build a profile of you. We only see aggregated statistics, such as how many people visited a page. Most browser privacy settings and content blockers can block the script, and the site works the same without it.

2.2 People who email us

When you email us, we receive your name, email address and anything you choose to include, such as your company, website, project details, timeline or budget. We use this to reply, to decide whether we are a good fit, to arrange a call and to prepare a proposal.

2.3 Clients and their representatives

If you or your company work with us, we process contact details, job titles, project communications, files you share with us, contracts and billing information. We use this to deliver the work, manage the relationship, send invoices and keep the records the law requires.

2.4 Job applicants

If you send us a speculative application, we receive your CV, portfolio and anything else you include. We use it only to consider you for work with the studio.

2.5 What we do not do

• We do not sell personal data.
• We do not share personal data for cross-context behavioural advertising.
• We do not use personal data for automated decisions that have legal or similarly significant effects on you.
• We do not knowingly collect sensitive data, such as health information. Please do not send it to us.

03How we share personal data

We share personal data only when we need to, and only with:

• Service providers who help us run the studio, such as website hosting, security and analytics (Cloudflare), email, file storage, video calls, project management and accounting. They may use the data only to provide their service to us.
• Professional advisers, such as accountants and lawyers, under a duty of confidentiality.
• Authorities, when the law requires it, or when it is needed to protect our rights, our clients or the public.
• A future owner of the business, if Zuzo is ever merged, sold or restructured. Any new owner must respect this policy.

We ask our service providers to protect personal data at least as carefully as we do.

04Legal bases for using personal data

If you are in the European Economic Area, the United Kingdom or Switzerland, data protection law requires us to have a legal basis for each use of your personal data. We rely on:

• Contract, when we need the data to take steps you asked for before a contract, or to perform one.
• Legitimate interests, such as replying to enquiries, running and securing our website, understanding how it is used through cookieless analytics and growing our business, where those interests are not outweighed by your rights.
• Legal obligation, for example keeping accounting and tax records.
• Consent, where we ask for it. You can withdraw consent at any time.

05Your rights and choices

Depending on where you live, you may have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data;
• object to, or ask us to restrict, how we use your data;
• receive your data in a portable format;
• withdraw consent you have given us.

To use any of these rights, email hello@zuzostudio.com. We may need to confirm your identity first. We will reply within 30 days, and we will not treat you differently for exercising your rights.

If you are unhappy with how we handle your data, please tell us so we can try to fix it. You also have the right to complain to your local data protection authority.

06Security and retention

We use reasonable technical and organisational measures to protect personal data, including encrypted connections, two-factor authentication on our accounts and access limited to the people who need it. No system is perfectly secure, so we cannot guarantee absolute security.

We keep personal data only as long as we need it:

• Enquiries that do not lead to a project: up to 2 years after our last contact.
• Client records, including contracts and invoices: up to 7 years after the project ends, to meet tax and accounting rules.
• Job applications: up to 12 months, unless you ask us to delete them sooner.
• Server logs: for the short period set by our hosting provider.
• Website analytics: aggregated page-view statistics, kept for the period set by Cloudflare Web Analytics.

07International data transfers

Zuzo is based in the United States, and our team and service providers may process personal data in other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

08US state privacy rights

Some US states, including California, give residents rights over their personal information, such as the right to know what we collect, to correct it and to delete it. You can exercise these rights by emailing hello@zuzostudio.com.

In the past 12 months we have not sold personal information, and we have not shared it for cross-context behavioural advertising. We do not use or disclose sensitive personal information.

09Children

Our website and services are meant for businesses. They are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, email us and we will delete it.

10Changes to this policy

We will update this policy when our practices change, and we will change the “Last updated” date at the top. If a change is significant, we will make it clear on this page.

11Contact us

For any question about this policy or your personal data, email hello@zuzostudio.com or write to: