Privacy Policy

Last updated: November 2026

This Privacy Policy explains how Zaaz Technology and Software Ltd (“ZaazTech”, “we”, “us”) handles personal information collected through zaazbook.com and through its online booking service, ZaazBook. It serves as our privacy notice (aviso de privacidad) under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), and it also describes the rights available to visitors from other countries in Latin America and elsewhere.

If you booked an appointment with a business that uses ZaazBook, please also read “If you booked through ZaazBook”.

Zaaz Technology and Software Ltd, 105-111 West Broadway, Vancouver, BC V5Y 1P4, Canada, is responsible for your personal information. For requests from Mexico and Latin America, you can also reach our office at Isaac Garza 1325, Centro, 64000 Monterrey, N.L., Mexico. Privacy questions and requests: privacy@zaaztech.com.

• Information you send us. This website has no contact form. If you message us on WhatsApp, email or call us, we receive the information you choose to share, such as your name, phone number, email, company and details about your business.
• Technical information. Our web server automatically records each request: your IP address, browser and device type, the page requested, the referring page, and the date and time. We use these logs only for security and troubleshooting and delete them after 7 days.
• Cookies. We set one functional cookie, pll_language, which remembers whether you prefer Spanish or English. It expires after one year. Site administrators who log in also receive WordPress login cookies. We do not use analytics, advertising or tracking cookies, or web beacons.

We do not ask for sensitive personal information (such as health, financial, biometric or religious information) through this website. Please don’t include it in your messages. This website is not directed at children.

We use your personal information only for purposes that are necessary for our relationship with you:

• To respond to your inquiry, show you ZaazBook and prepare proposals.
• If your business becomes a client, to open and set up your account, and to provide, bill and support the service.
• To keep our website and systems secure and to prevent spam and abuse.
• To meet our legal, tax and accounting obligations.

We do not use your information for marketing, advertising or profiling, and we do not sell or rent it. If we ever want to use it for a purpose not listed here, we will ask for your consent first.

When you book an appointment on the page of a business that uses ZaazBook, that business decides what information to ask you for (for example your name, email, phone number and notes for the appointment) and what to use it for. The business is responsible for that information; ZaazTech processes it on the business’s behalf and under its instructions, in order to:

• record the appointment and stop anyone else from booking the same time;
• email you the confirmation, the calendar file and the reminders;
• create the video room when the appointment is online;
• send the booking to the business’s own system, if it has set that up.

If the appointment requires payment, Stripe processes it in the business’s own account; ZaazTech never receives or stores your card details. Video calls are hosted on ZaazTech’s servers. Appointment data is stored on our servers in Quebec, Canada.

To exercise your rights over appointment data, contact the business you booked with and see its privacy notice. If you cannot reach it, write to privacy@zaaztech.com and we will help pass your request on.

Our website, the ZaazBook service, our email servers and backups are hosted in data centres in Quebec, Canada. By using this website or ZaazBook from outside Canada, your information is transferred to and stored in Canada.

We share information only with service providers that help us operate, and only as needed for the purposes above:

• SMTP2GO, which delivers the email we send, including appointment confirmations and reminders.
• WhatsApp (Meta Platforms), if you choose to message us there.
• Stripe, when an appointment requires payment (in the business’s account).
• Google Fonts (Google LLC, United States), which provides the fonts used on the site. Your browser connects to it directly, sharing your IP address and basic browser information.

SMTP2GO processes email on our behalf and under our instructions; under the LFPDPPP, sharing with a provider like this does not require your consent. The connection to Google Fonts is made by your browser when a page loads. We may also disclose information when required by law or by a competent authority.

• Inquiries that don’t lead to a business relationship: up to 2 years after our last exchange.
• Client records: as long as needed to provide our services and to meet legal and tax requirements.
• Appointment data: as long as the responsible business decides, while it keeps its account.
• Web server logs: 7 days.

When information is no longer needed, we delete it or make it anonymous.

We apply administrative, technical and physical safeguards, including encrypted connections (HTTPS), access restricted to authorized personnel, separation of each business’s data, and regularly maintained servers. If a security breach significantly affects your rights, we will notify you promptly.

You have the right to Access the personal information we hold about you, Rectify it if it is inaccurate or incomplete, Cancel it when you believe it is not being handled properly or is no longer needed, and Object to its use for specific purposes. You may also withdraw your consent or ask us to limit how we use or disclose your information. Visitors from other countries have these same rights, along with any additional rights their local law provides.

To exercise a right, email privacy@zaaztech.com with:

• your full name and an email address where we can reply;
• a copy of an official ID (or, if acting for someone else, proof of your authority);
• a clear description of the information and the right you want to exercise; and
• anything else that helps us locate your information.

We will reply within 20 business days of receiving a complete request. If we grant it, we will act on it within 15 business days after replying. These periods may be extended once, for an equal period, when justified. Access is free; you may only be asked to cover reasonable reproduction or shipping costs.

If you believe your rights have not been respected, you may file a complaint with the Mexican data protection authority, or with the data protection authority in your country.

We may update this policy from time to time. We will publish any change on this page, and the date at the top shows when it was last updated.