Privacy PolicyZzyzx Services LLC

01Information We Collect

We collect only what is necessary to operate our business and serve our clients. The categories of information we may gather include:

• Contact identifiers — Name, email address, phone number, and company name when you reach out to us or subscribe to communications.
• Business information — Details about your organization, infrastructure, and project requirements shared during consultations or discovery calls.
• Technical metadata — IP address, browser type, operating system, referring URLs, and timestamps automatically logged by our web server for security and diagnostic purposes.
• Usage analytics — Aggregated, anonymized metrics about how visitors navigate our site — pages viewed, time on page, and interaction patterns. No personally identifiable information is included in these aggregates.
• Communication records — Contents of emails, contact form submissions, and phone call summaries retained for continuity of service.

We do not collect sensitive personal data, financial account numbers, government identifiers, health information, or biometric data through this website.

02How We Use Information

Every use of your information serves a specific, legitimate business purpose. We do not engage in speculative data collection or build shadow profiles.

• Service delivery — To respond to inquiries, prepare proposals, execute contracted work, and provide ongoing support for systems we design.
• Communication — To send project updates, technical advisories, invoices, and occasional informational content relevant to our services. Every commercial email includes an unsubscribe mechanism.
• Improvement — Aggregated analytics inform site performance optimization, content refinement, and user experience enhancements.
• Security — Server logs are monitored for anomalous patterns, intrusion attempts, and abuse. This is a legitimate interest under applicable data protection frameworks.
• Legal compliance — To respond to lawful requests from courts, regulators, or law enforcement, and to enforce our Terms of Service.

03Legal Basis for Processing

For visitors and clients located in the European Economic Area, the United Kingdom, or other jurisdictions with comparable data protection laws, our processing grounds include:

• Contractual necessity — Processing required to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests — Processing necessary for our legitimate business interests, including network security, service improvement, and fraud prevention, provided those interests are not overridden by your rights.
• Consent — Where we rely on consent (for example, marketing communications), you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
• Legal obligation — Processing necessary to comply with applicable laws, regulations, or binding orders.

04Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We disclose data only in the following limited circumstances:

• Service providers — Trusted third parties who perform functions on our behalf (hosting infrastructure, email delivery, payment processing) and are contractually bound to handle data solely for those purposes under confidentiality obligations.
• Professional advisors — Legal counsel, auditors, and insurers who require access in the course of providing professional services to Zzyzx Services LLC.
• Business transfers — In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality arrangements.
• Legal requirements — When disclosure is required by law, court order, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

05Data Retention

We retain information only as long as it serves the purpose for which it was collected:

When retention periods expire, data is securely deleted or irreversibly anonymized. Archival backups may retain data for up to 12 additional months per standard backup rotation schedules.

06Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Correct inaccurate or incomplete data.
• Erasure — Request deletion of your data under certain conditions (the right to be forgotten).
• Restriction — Limit how we process your data in specific circumstances.
• Portability — Receive your data in a structured, machine-readable format and transmit it to another controller.
• Objection — Object to processing based on legitimate interests, including direct marketing.
• Withdrawal of consent — Revoke consent at any time for processing that relies on consent as its legal basis.
• Complaint — Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email us at reach@zzyzxservices.autos with the subject line Data Rights Request. We will verify your identity before processing the request and respond within 30 calendar days as required by applicable law.

07Cookies & Tracking

Our website uses only essential, first-party cookies necessary for basic functionality — session management and security. We do not deploy third-party tracking cookies, advertising pixels, social media widgets, or behavioral profiling scripts.

If we introduce analytics cookies (which would be first-party and anonymized), we will update this policy and provide a cookie consent mechanism before such cookies are set.

Your browser settings allow you to block or delete cookies at any time. Note that disabling essential cookies may affect core site functionality.

08Security Measures

We implement technical, administrative, and physical safeguards appropriate to the sensitivity of the data we handle. These include:

• Transport encryption — All data in transit is protected via TLS 1.3 with strong cipher suites and HSTS enforcement.
• Access controls — Role-based access with mandatory multi-factor authentication, least-privilege policies, and regular access reviews.
• Infrastructure hardening — Our hosting environment undergoes routine vulnerability scanning, patch management, and configuration audits.
• Incident response — A documented incident response plan governs detection, containment, notification, and remediation of data breaches.
• Data minimization — We collect only what we need and delete what we no longer require, reducing the attack surface.

No method of transmission or storage is absolutely secure — but we apply industry best practices and continuously review our posture.

09Children’s Privacy

Our services are designed for businesses and professionals. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that a minor has provided us with personal data without verifiable parental consent, we will promptly delete that information from our systems. If you believe we may have inadvertently collected data from a child, please notify us immediately.

10International Transfers

Zzyzx Services LLC is based in the United States. If you access our services from outside the United States, your data may be transferred to, stored, and processed in the U.S. — which may have data protection laws that differ from those in your country.

We ensure that appropriate safeguards are in place for any cross-border data transfers, including Standard Contractual Clauses or equivalent mechanisms recognized under applicable data protection frameworks. By using our site and services, you acknowledge and consent to such transfers.

11California Privacy Rights

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California residents have specific rights regarding their personal information. Zzyzx Services LLC does not sell personal information as defined by the CCPA, nor do we share it for cross-context behavioral advertising.

California residents may request:

• Categories and specific pieces of personal information we have collected
• Categories of sources from which we collected the information
• Business or commercial purpose for collecting the information
• Categories of third parties with whom we share information
• Deletion of personal information (subject to exceptions)
• Correction of inaccurate personal information

We will not discriminate against you for exercising any of your CCPA rights. To submit a request, email reach@zzyzxservices.autos with the subject CCPA Request. We may require proof of California residency and identity verification.

12Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. When we make material changes, we will:

• Post the revised policy on this page with an updated effective date
• Provide a prominent notice on our homepage for 30 days following significant changes
• Notify active clients directly via email if the changes substantially affect their rights

Your continued use of our website and services after changes take effect constitutes acceptance of the revised policy. We encourage you to review this page periodically.