Zoned
Problem Solution Features Pricing Process
Get Started
Legal

Privacy Policy

Last updated: April 7, 2026

Your privacy matters to us. This Privacy Policy explains how Zoned ("Zoned," "we," "us," or "our") collects, uses, stores, shares, and protects information when you use our website, platform, and services (collectively, the "Services"). By accessing or using the Services, you consent to the practices described in this Policy.

1. Scope & Acceptance

This Privacy Policy applies to all users of the Zoned Services, including visitors to our website, subscribers (paying customers), users of our platform, and individuals whose information is processed through our Services on behalf of our customers (e.g., leads, contacts, or end consumers). If you do not agree with this Policy, you must not use the Services.

2. Information We Collect

We collect several categories of information, depending on how you interact with us:

a. Information You Provide Directly

  • Account information: name, email, phone number, business name, business address, job title, password
  • Payment information: billing address, credit card details (processed by our PCI-compliant payment processor — we do not store full card numbers)
  • Communications: messages you send to support, sales, or through any Zoned contact form
  • Identity verification: information required for SMS carrier compliance (A2P 10DLC brand registration, business EIN, website, opt-in language)
  • Content you upload: logos, images, documents, automation templates, custom workflows

b. Information Collected Automatically

  • Device and usage data: IP address, browser type, operating system, device identifiers, pages visited, time spent, referrer URLs, clickstream data
  • Log data: server logs, error reports, access times, and diagnostic information
  • Cookies and similar technologies: session identifiers, preferences, analytics data (see Section 9)

c. Customer Data (Data You Process Through Our Services)

As part of our Services, our customers upload, collect, and process information about their own leads and contacts ("Customer Data"), which may include names, phone numbers, email addresses, appointment data, and SMS/email communications. For Customer Data, Zoned acts as a data processor — the customer is the data controller and is responsible for ensuring proper legal basis and consent for collection and processing.

You represent and warrant that you have obtained all necessary consents and have a valid legal basis under applicable law to share Customer Data with Zoned.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service delivery: to provide, operate, maintain, and improve the Services
  • Account management: to create and manage your account, process payments, and send service-related notifications
  • Customer support: to respond to your questions, troubleshoot issues, and provide assistance
  • Security and fraud prevention: to detect, investigate, and prevent fraudulent, unauthorized, or illegal activities
  • Analytics and improvement: to understand how users interact with our Services and improve functionality and user experience
  • Marketing (with consent): to send promotional content, product updates, and newsletters where permitted by law
  • Legal compliance: to comply with applicable laws, regulations, legal processes, subpoenas, and governmental requests
  • Business operations: to facilitate business transactions, including mergers, acquisitions, asset sales, or due diligence

We do not use Customer Data for our own purposes except as necessary to provide the Services or as otherwise permitted by our agreement with the customer.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area ("EEA"), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

  • Contract performance: to provide the Services you have purchased
  • Legitimate interests: to improve our Services, prevent fraud, and ensure security
  • Consent: for marketing communications and optional features (which you may withdraw at any time)
  • Legal obligation: to comply with laws and regulations

5. How We Share Information

Zoned does not sell, rent, or trade your personal information for monetary consideration. We share information only in the following limited circumstances:

  • Service providers and sub-processors: third-party vendors who help us operate our Services, including hosting providers, SMS carriers (Twilio), payment processors (Stripe), CRM infrastructure (GoHighLevel), analytics providers, email providers, and customer support tools. These providers are contractually bound to protect your information and use it only for the purposes we specify.
  • Legal requirements: when required by law, subpoena, court order, or other legal process, or to respond to lawful requests from public authorities (including for national security or law enforcement purposes).
  • Rights protection: to enforce our Terms of Service, protect the rights, property, or safety of Zoned, our users, or others, or to prevent fraud, security issues, or illegal activity.
  • Business transfers: in connection with a merger, acquisition, reorganization, bankruptcy, or sale of some or all of our assets, subject to the acquirer's commitment to honor this Privacy Policy.
  • With your consent: for any other purpose disclosed at the time of collection or with your explicit consent.

6. Third-Party Services & Sub-Processors

The Services integrate with and rely on third-party platforms including but not limited to GoHighLevel, Twilio, Stripe, Meta (Facebook/Instagram), Google, and others. These third parties have their own privacy policies and terms, and Zoned is not responsible for their practices. We encourage you to review their policies before using integrated features.

By using the Services, you acknowledge that information may be transferred to and processed by these third parties as necessary to deliver the Services.

7. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit (TLS/SSL), access controls, regular security audits, and employee training.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You acknowledge that you provide information at your own risk. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

8. Data Retention

We retain personal information for as long as necessary to: (a) provide the Services to you; (b) comply with our legal, tax, and accounting obligations; (c) resolve disputes and enforce our agreements; (d) protect against fraud or abuse; and (e) maintain business records.

Typical retention periods:

  • Account data: for the duration of your subscription plus up to 36 months after termination
  • Billing records: 7 years (for tax and accounting purposes)
  • Customer Data: per your instructions as our customer, or as required by law
  • Analytics data: in aggregated/anonymized form indefinitely
  • Marketing communications preferences: until you unsubscribe

When information is no longer needed, we securely delete, anonymize, or archive it in accordance with our data retention policies.

9. Cookies & Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to operate our website, remember your preferences, analyze usage, and measure the effectiveness of our marketing. Types of cookies we use:

  • Essential cookies: required for the Services to function
  • Analytics cookies: to understand how users interact with our website (e.g., Google Analytics)
  • Marketing cookies: to deliver relevant advertising (e.g., Meta Pixel, Google Ads)

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Services. For more information, see our Cookie Policy (if available) or contact us.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Right to access: request a copy of the personal information we hold about you
  • Right to rectification: correct inaccurate or incomplete information
  • Right to erasure ("right to be forgotten"): request deletion of your information, subject to legal obligations
  • Right to restrict processing: limit how we use your information in certain circumstances
  • Right to data portability: receive your information in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
  • Right to non-discrimination: we will not discriminate against you for exercising your privacy rights (CCPA)
  • Right to opt out of "sale" or "sharing": we do not sell or share personal information for cross-context behavioral advertising as defined by CCPA

To exercise any of these rights, please email us at privacy@zonedleads.com. We will respond within the timeframes required by applicable law (typically 30–45 days). We may require verification of your identity before processing your request.

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA") provide you with specific rights. In the past 12 months, we have collected the categories of personal information listed in Section 2 for the business and commercial purposes described in Section 3. We disclose personal information to the third parties described in Sections 5 and 6.

California residents may request: (a) disclosure of categories and specific pieces of personal information collected; (b) disclosure of categories of sources, third parties, and purposes; (c) deletion of personal information; (d) correction of inaccurate information; and (e) opt-out of sale or sharing (though we do not sell or share for targeted advertising).

To submit a request, email privacy@zonedleads.com.

12. Children's Privacy

The Services are not directed to, and we do not knowingly collect personal information from, individuals under the age of 18. If we learn that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@zonedleads.com.

13. International Data Transfers

Zoned is based in the United States. If you access or use the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by law, we rely on appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

14. Do Not Track Signals

Some web browsers transmit "Do Not Track" ("DNT") signals. Because there is no industry standard for responding to DNT signals, Zoned does not currently respond to them. We will revise this policy if a standard is established.

15. Marketing Communications

You may receive marketing communications from us if you have subscribed or purchased our Services. You can opt out of marketing emails at any time by clicking the "unsubscribe" link in the email or by contacting us at privacy@zonedleads.com. Even after opting out, you will still receive transactional and service-related communications necessary to administer your account.

16. HIPAA Notice

Zoned is not a HIPAA-covered entity or Business Associate. The Services are not designed or certified for the storage, transmission, or processing of Protected Health Information ("PHI") as defined under HIPAA. Customers must not input PHI into the Services. If you require HIPAA compliance, please do not use the Services for PHI-related activities.

17. Limitation of Liability Regarding Privacy

Zoned's liability regarding privacy and data security is limited by our Terms of Service. To the maximum extent permitted by law, Zoned shall not be liable for any unauthorized access, use, or disclosure of your information resulting from your own failure to safeguard your account credentials, your violation of the Terms of Service, or actions of third parties outside our reasonable control.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this Policy and may notify you via email or through the Services. Your continued use of the Services after such changes constitutes your acceptance of the revised Policy.

19. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Zoned — Privacy Team
Email: privacy@zonedleads.com
Support: support@zonedleads.com
Legal: legal@zonedleads.com

← Back to Home
Zoned

Automated lead systems for luxury med spas.

Company

About Features Pricing

Legal

Terms Privacy

Contact

support@zonedleads.com hello@zonedleads.com

© Zoned. All rights reserved.