Privacy Policy.

01 / Notice

Notice at collection.

Depending on how you interact with us and which optional technologies you allow, we may collect the following categories of personal information:

• Identifiers and internet activity. IP address, cookie or pixel identifiers, browser and device details, page and referral information, and selected Site interactions. We use this information for delivery, security, analytics, and campaign measurement. We do not sell it for money. Advertising activity may be disclosed to Meta after permission and may be considered "sharing" under California law.
• Approximate location. Country, region, or city-level information derived from an IP address for analytics and campaign measurement. We do not request precise GPS location through the Site.
• Contact and business information. A name, email address, phone number, company, project details, budget, timing, and message that you choose to send. We use it to respond, prepare proposals, and provide services. We do not intentionally send inquiry content to Google Analytics or Meta Pixel.
• Client records and audiovisual materials. Contracts, billing and scheduling records, footage, photographs, audio, likenesses, brand assets, campaign information, and related materials when an engagement requires them.
• Privacy preference record. Your analytics choice, advertising choice, preference version, source, and date are stored in your browser for up to 12 months so the Site can remember your decision.

The purposes, recipients, and retention criteria for these categories are explained below. You can reject optional technologies or reopen at any time.

02 / Scope

Where this Policy applies.

This Policy applies when you browse the Site, contact us by email or phone, request information about our services, or provide information during a client relationship.

It does not govern websites, platforms, or services operated by other companies, even when we link to or embed them. Those services publish their own privacy terms.

03 / Information

Information we handle.

Information you choose to send

When you email or call us, we may receive your name, email address, phone number, company name, project details, budget or timing information, and the content of your message. Clicking an email or phone link only opens your device's email or phone application. The Site itself does not receive the content of your email or call. If you send the message or place the call, Zu Group receives the communication through its email or phone provider.

Client and business records

If we work together, we may handle proposals, contracts, invoices, scheduling details, approvals, project correspondence, and other records needed to manage the relationship and meet legal or accounting obligations.

Production and marketing materials

Depending on the signed scope, clients may provide footage, photographs, audio, voices and likenesses, brand assets, copy, websites, social content, campaign information, performance data, lead or workflow data, creative feedback, and project logistics.

Platform access

Some projects require access to social, advertising, website, storage, review, or automation platforms. We prefer role-based invitations or delegated access when available. Please do not send passwords, government identification, financial credentials, health records, or other highly sensitive information through ordinary email.

Technical request information

Our website hosting and content-delivery providers may receive ordinary request data such as your IP address, browser and device information, requested page, date and time, referring page, and security or error signals. Zu Group does not operate an on-site database for visitor profiles.

Sources of information may include you, your browser or device, a client or authorized project contact, our team, and providers supporting the Site or a contracted engagement.

04 / Technology

Cookies and third-party technology.

Optional analytics and advertising technologies are blocked by default. Google Analytics loads only after you allow analytics. Meta Pixel loads only when a valid Zu Group Pixel ID is configured, you allow advertising, and a recognized Global Privacy Control signal is not active.

Website hosting

Hosting and content-delivery providers process ordinary network requests to deliver and protect the Site. They may use essential security technologies and retain technical logs according to their configurations and policies.

Google Fonts

The Site requests typefaces from Google Fonts. When a page loads, your browser connects to Google, which may receive technical information associated with that request. Learn more in Google's Privacy Policy.

Google Analytics 4

When enabled and allowed, Google Analytics 4 helps us understand page views, navigation, referral sources, approximate location, browser and device information, portfolio-film interest, and clicks showing an intent to contact us. We send controlled event labels, not the email address, phone number, or free-text message contained in a link or inquiry.

Google Analytics may use first-party cookies named _ga and _ga_<container-id> to distinguish browsers and sessions. Google states that it uses IP addresses at collection to derive approximate location and then discards them before the information is logged. We configure advertising storage, advertising user data, advertising personalization, Google Signals, and personalized advertising features as disabled.

We use Google's basic consent approach. If you decline analytics, the Google tag is not loaded and no analytics request is sent to Google. We configure Google Analytics cookies to expire after up to 12 months. User and event data in Google's systems follows the active Zu Group property retention setting and Google's service terms. Learn more in Google's Privacy Policy and Google Analytics data-collection documentation.

Meta Pixel and advertising measurement

When configured and allowed, Meta Pixel may receive cookie or pixel identifiers, IP address, browser and device information, page URL, referring information, and controlled events such as a page view, portfolio-film open, or contact-link click. We do not intentionally send Meta the contents of messages, email addresses, phone numbers, project details, or other free-text inquiry content through the Pixel.

We may use Pixel data to measure campaign performance, understand whether advertising led to a Site visit or inquiry, and create or reach advertising audiences. We do not sell personal information for money. California law may treat this type of disclosure for cross-context behavioral advertising as "sharing." Rejecting advertising or using a recognized Global Privacy Control signal keeps Meta Pixel off for that browser. Learn more in Meta's Privacy Policy and Cookies Policy.

Vimeo films

Full portfolio films are delivered through Vimeo only after you choose to open a film. The player is configured with Vimeo's Do Not Track parameter to limit nonessential player cookies for that session. Vimeo states that essential security cookies may still operate and that cookies already stored from an earlier Vimeo visit may still be sent. Review Vimeo's Privacy Policy and Cookie Policy.

Privacy preference storage

The Site stores your analytics and advertising choices, preference version, source, Global Privacy Control status, and choice date in local browser storage. This record is used only to apply and remember your choices. It expires for Site purposes after 12 months, at which point the Site asks again.

Browser privacy signals

We honor a recognized Global Privacy Control signal as a request to opt out of sale or sharing for that browser or device. When detected, advertising remains off even if an earlier Site choice allowed it. Other browser Do Not Track signals that do not communicate a recognized opt-out preference may not be acted on. Analytics remains governed by the separate analytics choice available on this Site.

05 / Use

How we use information.

We may use information to:

• Respond to questions, discuss a project, and prepare a proposal.
• Plan, produce, edit, deliver, and support contracted work.
• Manage scheduling, approvals, billing, records, and client communication.
• Operate, secure, maintain, and troubleshoot the Site and our business systems.
• When analytics is enabled and allowed, understand aggregate Site use and improve navigation, portfolio presentation, and inquiry paths.
• When advertising is enabled and allowed, measure campaigns and create or reach advertising audiences without sending inquiry content to Meta Pixel.
• Comply with law, enforce agreements, and protect people, rights, and property.
• Send relevant business updates or marketing where permitted. You may opt out at any time.

We do not intentionally repurpose one client's confidential materials as deliverables for another client. Third-party provider processing remains subject to the applicable project scope, configuration, and provider terms described below.

06 / Sharing

How we share information.

We do not sell personal information for money. If you allow advertising and Meta Pixel is configured, advertising activity may be disclosed to Meta for measurement and audience use. Some privacy laws may treat that disclosure as a "sale," "sharing," or targeted advertising even when no money changes hands. You can reject it through the Site's Privacy choices or a recognized Global Privacy Control signal.

We may also disclose information only as reasonably needed in these situations:

• Service and technology providers. Hosting, analytics, advertising measurement, email, communication, cloud storage, review, invoicing, accounting, creative, production, automation, and AI providers that support the Site or a contracted project.
• Team members and contractors. People assigned to the project who need appropriate access to perform their work.
• Professional advisers. Attorneys, accountants, insurers, and similar advisers where reasonably necessary.
• Legal and safety reasons. When required by law or reasonably necessary to protect rights, safety, security, or property.
• Business transactions. In connection with a potential financing, merger, sale, or transfer, subject to appropriate protections.

Portfolio use, client logos, footage, likenesses, and public case studies are governed by the rights, permissions, releases, and confidentiality terms in the applicable client agreement. Visiting the Site does not grant Zu Group any rights to your materials.

07 / Client data

Client materials and AI-assisted services.

The AI Marketing page is an informational presentation. Browsing it does not upload your files or submit your information to an AI system.

When a signed project includes AI-assisted work, automation, platform management, or a custom assistant, relevant third-party providers may process the materials authorized for that scope. A system may be configured using client-provided instructions, documents, content, or connected data. This does not necessarily mean an AI model is trained or fine-tuned on those materials.

Provider retention, model-improvement settings, and data handling can differ by product, account type, configuration, and provider. Any project-specific commitments about approved tools, sensitive information, retention, confidentiality, or provider use should appear in the signed client agreement.

08 / Retention

Retention and security.

We retain information only for as long as reasonably needed for the purpose it was collected, the client relationship, contractual requirements, accounting and legal obligations, security, dispute resolution, and legitimate business records. Our criteria include the type and sensitivity of the information, whether a relationship remains active, provider settings, legal requirements, and whether an unresolved issue requires preservation.

• Site privacy preferences are used for up to 12 months before the Site asks again.
• Google Analytics cookies are configured to expire after up to 12 months. Analytics event and user data follows the active property setting and is reviewed against business need.
• Inquiry records are kept while we evaluate or respond to the opportunity and for a reasonable period afterward for follow-up, records, security, or disputes.
• Client, accounting, and project records are kept under the signed agreement and applicable tax, accounting, legal, insurance, and dispute-resolution requirements.
• Production assets, raw footage, project files, backups, and AI inputs or outputs follow the applicable project scope, provider configuration, client agreement, and archive practices.
• Hosting and security logs follow provider settings, unless they are reasonably needed longer to investigate an incident or comply with law.

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. No transmission or storage method is completely secure, so we cannot guarantee absolute security.

09 / Choices

Your privacy choices.

Depending on applicable law, you may ask us to access, correct, or delete personal information associated with you. You may also ask us to stop sending marketing communications.

Site privacy choices

You can separately allow or reject analytics and advertising. Withdrawing a choice disables future collection for that category and removes accessible first-party Google Analytics and Meta cookies from the browser where you make the choice. It does not require Meta or Google to delete information previously processed under their own retention settings.

A recognized Global Privacy Control signal automatically keeps advertising off for that browser. We do not require identity verification for this browser-level opt-out.

Email zu@zugroup.net with the subject "Privacy Request." We may need to verify your identity before acting. We may retain information where reasonably necessary for contracts, accounting, security, legal obligations, disputes, or other purposes permitted by law.

10 / California

California privacy rights.

The California Consumer Privacy Act, as amended, applies only when its statutory criteria are met. If it applies to Zu Group or the processing at issue, California residents may have the right to know or access personal information, request deletion, correct inaccurate information, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising those rights.

During the prior 12 months, the categories we may have collected, their sources, purposes, and recipients are described in the Notice at Collection and the sections above. We have not sold personal information for money. When configured and allowed, Meta Pixel activity may be considered sharing for cross-context behavioral advertising. Use Privacy choices or a recognized Global Privacy Control signal to opt out for that browser.

To submit another request, email zu@zugroup.net, call 786-447-5810, or write to the address below. Describe the right you want to exercise and the information involved. We may reasonably verify access, deletion, or correction requests. An authorized agent may submit a request if they identify the consumer and provide proof of authority. We do not require verification for an opt-out of sale or sharing.

This section does not waive an exemption or mean that every California privacy statute applies to every Zu Group activity. We extend the Site's browser-level advertising opt-out and Global Privacy Control handling to visitors regardless of location.

11 / Other sites

Children and external services.

The Site is a general-audience business portfolio and is not directed to children under 16. We do not knowingly collect, sell, or share personal information from anyone under 16 through the Site. A parent or guardian who believes a child sent us personal information may contact us to request its deletion.

The Site may link to Instagram, Vimeo, and other external services. We do not control their content or privacy practices. Review their policies before providing information.

12 / Updates

Changes and contact.

We may update this Policy as our Site, services, vendors, or legal obligations change. Updates apply prospectively from the effective date shown above. If a change materially expands how we use information already collected, we will provide appropriate notice and obtain consent where applicable law requires it.

Questions or requests can be sent to: