Privacy policy
Zylosend ("we", "us") builds websites, runs email marketing and operates a client dashboard from Surrey, British Columbia. This policy explains what personal information we collect, why, and the choices you have. We follow Canada's PIPEDA, British Columbia's PIPA and, where it applies, the laws of the places our clients' customers live.
What we collect
When you contact us or book a call: your name, email address, phone number, company and anything you choose to tell us about your project.
When you become a client: billing details, the accounts and credentials you share so we can do the work (hosting, domains, email platforms, analytics), and the content of the sites and emails we build for you.
When you use the Zylosend OS (our client dashboard): your login, the traffic, heatmap, review, ranking, email and invoice data for your own business, and basic usage logs.
When you visit this website: standard server logs (IP address, browser, pages requested) kept by our hosting provider, Netlify. This site sets no advertising cookies and runs no third party trackers; our own cookieless page counter records the page viewed, the referring site, device class and browser language, and nothing that identifies you. See the cookie policy.
Why we collect it
To reply to you, scope and deliver the work you hire us for, invoice you, and support what we built.
To run email programs on behalf of clients: in that case we process their customers' data as a service provider under the client's instructions and the client's own privacy policy.
To keep our services secure and to meet legal obligations such as tax records.
We do not sell personal information and we do not use it for advertising.
Email we send
Marketing email we send for a client goes only to people who gave that client consent, with a working unsubscribe in every message, in line with Canada's Anti-Spam Legislation (CASL) and the CAN-SPAM Act for US recipients.
Email we send about our own services goes to people who asked for it or with whom we have an existing business relationship. You can opt out at any time by replying or writing to contact@zylosend.com.
Who we share it with
Service providers that help us run the business, bound by contract to use the data only for us: hosting (Netlify), our database and authentication provider (Supabase), email sending platforms (for example Klaviyo or Resend), analytics (Microsoft Clarity, where a client has enabled it), payments (Stripe) and scheduling (our booking tool).
Authorities when the law requires it. Otherwise, nobody.
Where it lives and how long
Our providers store data in Canada and the United States. By using our services you understand it may be processed outside your province or country.
We keep client records for the length of the engagement plus seven years for tax and legal reasons, project files for two years after a project ends unless you ask us to delete them sooner, and enquiry details for one year if nothing comes of them.
Your rights
You can ask what personal information we hold about you, ask us to correct it, ask us to delete it, or withdraw consent where consent is the basis for processing. Write to contact@zylosend.com and we will answer within 30 days.
If you are not satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.
Security
Client data in the Zylosend OS is protected with row level access controls, encrypted in transit and at rest by our providers, and reachable only by the people who work on your account. No system is perfect; if we ever learn of a breach that affects you we will tell you without undue delay.
Changes and contact
We will post any changes here with a new date. Questions go to contact@zylosend.com, Zylosend, Surrey, British Columbia, Canada.