US Privacy Notice
Zurex One · For businesses, users and visitors in the United States · Covers the CCPA/CPRA (California) and other state privacy laws · Version 1.1 · Effective October 15, 2026
1. Who we are
Zurex Group LLC, a Wyoming limited liability company, operates Zurex One for businesses in the United States.
- Address: 30 N. Gould St., Suite N, Sheridan, WY 82801, USA
- Privacy contact: [email protected]
- WhatsApp: +52 664 328 1440
This notice covers personal information about:
- the owners and representatives of businesses that subscribe to Zurex One;
- the business's users (staff and front desk);
- visitors to zurexone.com and the app.
If you are a customer of a business that uses Zurex One (for example, you booked an appointment at a barbershop), that business decides how your information is used. We act as its service provider / processor. Please send your requests to the business. If you send them to us, we will forward them.
2. Notice at collection
| Category (CCPA) | Examples | Purpose | Retention |
|---|---|---|---|
| Identifiers | Name, email, phone, username, IP address | Account, service, support, security | While the account is active; deleted when you cancel (backups within 35 days) |
| Customer records | Business address, billing details | Service and billing | Same as identifiers; payment records, 7 years |
| Commercial information | Plan, payment history, fees | Billing, accounting, taxes | 7 years |
| Payment information | Card brand and last 4 digits (Stripe stores the full number) | Charging the subscription | While the account is active |
| Internet activity | Log-ins, browser, security log | Security and fraud prevention | Up to 12 months |
| Professional or employment information | Role, schedules, attendance and commissions the business records for its staff | Providing the features the business subscribes to | While the account is active |
| Protected characteristics | Date of birth (only to confirm you are 18 or older) | Eligibility to contract | While the account is active |
| Sensitive personal information | Account log-in and password | Signing in only | While the account is active |
| Proof of acceptance | Document version, date, IP address, accepted text | Proof of the contract and of the recurring-charge consent | Life of the account plus 10 years |
We use sensitive personal information only for the purposes the law allows (providing the service and keeping it secure), never to infer characteristics about you.
3. Where your information comes from
- From you: sign-up, settings and support.
- From your business: if it adds you as a user.
- From your browser: technical data.
- From Stripe: payment confirmations.
4. Who we share it with
We do not sell or "share" personal information. We do not engage in targeted advertising or in profiling that produces legal or similarly significant effects, and we have not done so in the past 12 months.
We disclose personal information only for business purposes, to service providers under contract:
| Service provider | Purpose |
|---|---|
| Amazon Web Services | Servers and backups (in Mexico) |
| Cloudflare | Security and network |
| Stripe | Payments |
| HostGator (Newfold Digital) | Transactional email |
We also disclose information to authorities when required by law.
International transfer. Your information is stored in Mexico (Amazon Web Services, Querétaro region), and operations are also managed from Mexico. We apply the same safeguards wherever it is processed.
5. Your rights
Depending on your state, you may ask us to:
- know and access the personal information we hold about you and receive a portable copy;
- correct inaccurate information;
- delete your information, subject to legal exceptions (for example, tax records);
- opt out of the sale or sharing of your information and of its use for targeted advertising or profiling. We do not do this, but you may still ask;
- limit the use of sensitive personal information. We already use it only as permitted;
- obtain the list of specific third parties to which we have disclosed personal information (Oregon, Minnesota, Maryland and others);
- not be discriminated against for exercising your rights.
How to make a request:
- email [email protected] with the subject "Privacy request";
- or message us on WhatsApp at +52 664 328 1440.
Verification. We confirm your identity with a code sent to the email on your account.
Authorized agents. An agent may act for you with your signed permission.
Timing. We respond within 45 days, extendable once by another 45 days when necessary, with notice to you.
Appeals. If we deny your request, you may appeal by replying to the same email with the subject "Appeal". We decide appeals within 60 days. If you are not satisfied, you may contact your state Attorney General.
6. Privacy signals
Global Privacy Control (GPC). We honor the GPC signal from your browser as a request to opt out of sale or sharing.
"Do Not Track." We do not respond to this signal because there is no common standard, but we do not track you across sites.
7. Cookies
We use only one necessary cookie for your session, plus local storage for your light/dark theme preference and to remember that you saw our cookie notice. We do not use advertising or third-party analytics cookies. See our Cookie Policy at zurexone.com/cookies.
8. Children
- Zurex One is a business service. Accounts are for people 18 and older only.
- We do not knowingly collect information from children under 13. If we learn that we have, we delete it.
- We do not sell or use for advertising the information of anyone under 18.
- Our public appointment pages ask minors to book through an adult.
9. Security and breaches
We use encryption in transit and for backups, protected passwords, role-based permissions, audit logs and servers with no open ports.
If a security breach affects your information, we will notify you within the time required by your state's law.
10. Additional information for California residents
- "Shine the Light": we do not share personal information with third parties for their direct marketing.
- Financial incentives: we do not offer any in exchange for your information.
- Employee and business-contact information: covered by this notice.
11. Changes
We publish every version with its date at zurexone.com/legal and email you about material changes. We review this notice at least once a year.
Last updated: October 15, 2026.