Privacy Policy

ZuzuCloud · Windsor, Ontario, Canada
Privacy Officer: privacy@zuzucloud.com

1. Who we are

ZuzuCloud ("we", "us") is a Canadian company based in Windsor, Ontario. We are building Zuzu, practice-management software for medical spas and aesthetic clinics. This policy covers zuzucloud.com and the waitlist described below.

Because we are a Canadian organization serving healthcare practices globally, your information is handled under the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable US privacy and healthcare data security standards (including HIPAA-aligned protocols), and recognized international data protection principles.

This policy is not the privacy policy for the Zuzu platform itself. The platform is not generally available yet. When it launches, clinics will receive a separate agreement and privacy terms appropriate to the health information they hold.

2. What this site does and does not collect

What we collect from the waitlist form

• Your work email address — required, so we can reply.
• Your clinic's name — optional, helps us understand who we are building for.
• The country your clinic operates in — required, for planning launch order.
• A record of your consent — the fact that you opted in, the date and time, the wording you agreed to, and the page you signed up from. We keep this because Canadian anti-spam law (CASL) requires us to be able to prove consent.
• Your IP address and approximate location — recorded when the form is submitted, solely to protect the form against automated abuse.

What we do not collect

• No health information. This site is a marketing page. Please do not send us patient or client health information through it — we are not able to receive it here.
• No cookies. This site sets none — not for analytics, not for advertising.
• No tracking or analytics scripts. There is no Google Analytics, no advertising pixel and no third-party tracking of any kind on this site.
• No payment information. Nothing here costs anything.

3. Why we use it, and on what legal basis

We use the information above for one purpose: to contact you about Zuzu's launch — including invitations to try the platform, product updates, and the founding-member offer described on our home page. You can also expect the occasional question about what you would want the product to do, if you are willing.

We rely on your express consent, which you give by ticking the consent box on the waitlist form. The box is not pre-ticked, and we will not add you without it.

We do not use your information for automated decision-making, we do not build profiles for advertising, and we do not sell it.

4. Who can see it

Your information is accessible to the small team building Zuzu, and to no one else, except:

• Google Cloud — our hosting and database provider. It stores the data on our behalf as a service provider and is contractually restricted from using it for any purpose of its own. Data is stored in Canada.
• Where the law requires it — if we are legally compelled to disclose information, we will disclose only what is required, and we will tell you unless we are prohibited from doing so.

We do not sell your personal information, and we do not share it with advertisers, data brokers, or any third party for their own marketing.

5. How long we keep it

• Waitlist details — until the platform launches and we have contacted you, then for a further period of up to 24 months for our records, unless you ask us to delete them sooner. If the waitlist is closed without a launch, we will delete them at that point.
• Proof of consent — kept for the period CASL requires, which is at least three years after our relationship with you ends. This is a legal obligation, not a preference.

When information is no longer needed we delete it. We do not keep backups indefinitely; where backups exist they are subject to the same retention limits.

6. Your rights

You may, at any time:

• Withdraw your consent and be removed from the waitlist;
• Access the personal information we hold about you;
• Correct anything inaccurate;
• Request deletion of your information;
• Ask how we handle it — including a plain-language account of our policies and practices.

Write to privacy@zuzucloud.com and we will respond within 30 days. If you are in Quebec, you may also request that we provide your information in a structured, commonly used technological format.

Every email we send you includes a working unsubscribe link, and using it removes you immediately.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, if you are in Quebec, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

7. Security

We encrypt data in transit and at rest, restrict access to those who need it, and require authentication for administrative access. Our infrastructure runs on Google Cloud. Zuzu will enter into a Business Associate Agreement with Google, and with each clinic, before any protected health information is processed.

That said, no system is perfectly secure. If a breach ever affected your information and created a real risk of significant harm, we would notify you and the appropriate regulator as required by law.

8. Where your information is stored

Your information is stored on Google Cloud infrastructure located in Canada. Our service providers may process limited technical data in other jurisdictions; where that happens, we ensure comparable protection is in place through contractual safeguards.

9. Children

This site is intended for business owners and clinic operators. It is not directed at children, and we do not knowingly collect information from anyone under 16.

10. Language

In accordance with Quebec's Charter of the French Language, this policy is available in French at zuzucloud.com/fr/confidentialite/. The French version is an equivalent document, not a summary.

11. Changes to this policy

If we change how we handle your information, we will update this page and revise the date below. If the change is significant, we will email waitlist members to tell them.

12. Contact

Privacy Officer, ZuzuCloud
Email: privacy@zuzucloud.com

Last updated: 27 September 2026