Your Data, Your Control: How We Handle Information at ZoneClub

Last Updated: January 15, 2025

Look, we get it. You're sharing sensitive business information when you reach out for licensing help. This policy explains exactly what we do with your data - no legal jargon maze, just straight talk.

What Information We Collect

When you contact us for a consultation or use our services, we collect:

  • Contact details: Name, email, phone number, company name
  • Business information: Gaming operation type, target jurisdictions, current licensing status
  • Technical data: IP address, browser type, pages visited (standard website analytics)
  • Communication records: Email exchanges, consultation notes, document submissions

We don't collect credit card data directly - all payments are processed through secure third-party providers who maintain their own PCI compliance.

How We Use Your Information

Your data serves specific purposes:

  1. Service delivery: Analyzing your licensing needs, preparing applications, communicating progress updates
  2. Regulatory compliance: Meeting KYC and due diligence requirements (yes, even consultants get audited)
  3. Business operations: Invoicing, contract management, improving our service quality
  4. Legal obligations: Responding to regulatory inquiries, maintaining required records

We will never sell your information to third parties. Period. Your competitor won't hear about your expansion plans from us.

Data Sharing and Third Parties

Sometimes we need to share limited information:

  • Licensing authorities: When submitting applications on your behalf (obviously)
  • Service providers: Cloud storage (AWS), email systems (Google Workspace), CRM tools - all GDPR-compliant vendors
  • Legal requirements: If subpoenaed or legally obligated to disclose

Every third party we work with signs confidentiality agreements. Your business stays your business.

Data Security Measures

We protect your information through:

  • 256-bit SSL encryption for data transmission
  • Secure cloud storage with redundant backups
  • Access controls - only authorized team members see client data
  • Regular security audits and staff training

Perfect security doesn't exist, but we take reasonable precautions that match industry standards for professional services.

Your Rights and Choices

You control your data:

  • Access: Request copies of information we hold about you
  • Correction: Update inaccurate details anytime
  • Deletion: Ask us to remove your data (subject to legal retention requirements)
  • Opt-out: Unsubscribe from marketing emails with one click

One caveat: regulatory authorities require us to maintain certain records for 5-7 years after engagement ends. We can't delete those, but we can restrict processing.

Cookies and Tracking

We use essential cookies for website functionality and analytics cookies (Google Analytics) to understand how visitors use our site. No creepy ad-tracking networks. You can disable cookies in your browser settings - the site will still work fine.

Data Retention

We keep your information for:

  • Active clients: Duration of engagement plus 7 years (regulatory requirement)
  • Consultation inquiries: 2 years, then deleted if no engagement
  • Marketing contacts: Until you unsubscribe or request deletion

International Data Transfers

Our servers are US-based, but we work with clients globally. If you're in the EU/UK, we comply with GDPR through standard contractual clauses and adequacy mechanisms. Your data receives the same protection regardless of where you're located.

Changes to This Policy

We'll update this policy as regulations evolve or our practices change. Material changes get announced via email to active clients. Last update date always appears at the top.

Contact Us About Privacy

Questions about how we handle your data? Reach out:

We respond to privacy inquiries within 5 business days. Usually faster - our compliance background means we actually care about this stuff.

Bottom line: We treat your information the way we'd want ours treated. With respect, security, and transparency.