Legal
Privacy Policy
Last updated November 1, 2026
On this page
This policy explains what information ZONA Web Design collects when you visit zonaweb.design or work with us, what we do with it, who else handles it and what choices you have. We've tried to write it in plain English. ZONA Web Design is a division of ZONA IT Solutions, based in Dewey-Humboldt, Arizona (“ZONA”, “we”, “us”).
The short version
- We collect what you choose to send us (a project brief, a care plan request, a website scan) and, for people who hire us, what we need to run their client portal.
- We use it to reply to you, quote and build your project, and keep the site secure. Nothing else.
- We don't sell your information and we don't run advertising. We use Google Analytics to count visits and see which pages are useful.
- A few service providers handle information on our behalf (hosting, email delivery, analytics). They are listed below.
- You can ask to see, correct or delete what we hold about you. Email support@zonaitsolutions.com.
What we collect
Information you give us.
- Project enquiries (the Contact page, and the Estimator when you send it to us): your name and email, and, if you choose to add them, your phone number, business name, website address, the services you are interested in, budget range, timeline and the message you write. If you attach an estimate, its contents are included.
- Care plan requests: your name, email, the plan you picked, your website address and any notes.
- The free website audit: the website address you enter (our server visits that address to run the scan). If you ask for the full audit we also keep your email, your name if you gave it, the address, the score and the number of issues found.
- When you email or call us: whatever you tell us, plus the usual details (your email address or phone number and the time).
Information about clients. If you hire us and we set up a client portal account for you, we also hold: your name, email and business name; a password (we keep only a scrambled, salted hash of it, never the password itself); your project details; the proposals, agreements and invoices we create for you; the files you or we upload to your private vault (kept separate from every other client's); and the record made when you sign a document online, which is your typed name, your drawn signature if you draw one, your email, a fingerprint (hash) of exactly what was signed, the time, your IP address and your browser details. We keep the signing record so the signature can be verified later.
Information collected automatically. Like any website, our servers receive your IP address and basic request details (the page you asked for, the time, your browser type) when a page loads. We use this to deliver the site and keep it secure. Our forms and tools limit how fast a single address can submit, to stop spam and abuse, and the studio's own sign-in records failed attempts against an address and email so password guessing can be blocked. We do not build profiles of visitors.
How we use it
- To reply to your message, send a quote or proposal and do the work you hired us for.
- To run and secure the client portal and the studio's own systems.
- To keep the records we need for accounting, contracts and legal obligations, including the signing records above.
- To protect the site from spam, abuse and attacks.
- To tell the studio when a message arrives: each enquiry, care plan request or full-audit request sends a notification email to the studio.
We don't use your information for advertising, we don't sell it, and we don't send marketing mailings you didn't ask for. If you send an enquiry, we may follow up about that enquiry.
Who else handles your information
We use a small number of service providers, only for what is needed to run the site:
- Hosting. The site, its database and clients' files run on a server we rent from a cloud hosting provider (Vultr).
- Email delivery. The notification email that tells the studio a message has arrived is sent through an email delivery service (Resend), so the message and your contact details pass through it.
- Google Fonts. Our typefaces are loaded from Google's font service. When your browser fetches them, Google receives your IP address and browser details, as it would from any site that uses the service. We send Google nothing else.
- Google Analytics. We use Google Analytics 4 to see how many people visit, which pages they read, roughly where they are (city level) and what device and browser they use. It sets first-party cookies (named _ga and _ga_<id>) to tell a returning visitor from a new one, and Google receives your IP address and browser details to do this. We don't send Google your name, email or anything you type into a form, we haven't turned on advertising features, and we use the reports only to improve the site. You can block it with Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout) or any tracker blocker.
- National Weather Service. The weather on the home page is fetched by our server from weather.gov. That request contains nothing about you.
- Other sites you visit from here. Where we link elsewhere (a map, a photo credit), that site's own policy applies once you click.
We may also disclose information if the law requires it, to protect our rights or someone's safety, or if the business is sold or transferred (in which case we would ask the new owner to honor this policy). We never give anyone your information to use for their own marketing.
Cookies and similar storage
We don't set advertising cookies. Google Analytics sets its own cookies to count visits (see above). Otherwise we use only a sign-in cookie when you use the client portal (or the studio's own sign-in) and a few preferences stored in your browser, such as whether site sound is on. The details, and how to clear them, are in our Cookie Policy.
How long we keep it
We keep information for as long as we need it for the reasons above. Enquiries that don't become projects are kept so we can answer follow-up questions, and are removed if you ask. Client records, signed agreements and invoices are kept for as long as we work together and afterward for as long as we need them for accounting, tax and legal reasons. If you'd like something deleted sooner, tell us (see below). We will do it unless we are required, or have a legitimate reason, to keep it, and we'll tell you if so.
How we protect it
The site is served over HTTPS. Passwords are stored as salted hashes. Sign-in cookies are marked HTTP-only, so scripts on a page can't read them. A client can only ever open their own records: the portal works out who you are on the server for every request, not from anything in the page. Uploaded files are kept outside the public web folder and are only handed back to the signed-in person they belong to. No method of storing or sending information is perfectly secure, so we can't promise absolute security, but we take it seriously, and if something affecting your information ever went wrong we would notify the people affected as the law requires.
Your choices and rights
Depending on where you live, you may have the right to ask what personal information we hold about you, to get a copy, to correct it, to delete it or to object to how we use it. Whether or not a law gives you those rights, you can ask us for any of them: email support@zonaitsolutions.com or call 623-252-4675 and we'll respond within a reasonable time (usually within one business day for a first reply). We won't treat you differently for asking. To stop us contacting you about an enquiry, just say so.
Children
This site is for business owners and isn't aimed at children. We don't knowingly collect information from anyone under 13. If you think a child has sent us information, tell us and we will delete it.
Where your information is handled
ZONA is based in Arizona, USA. Your information is handled by us in the United States and by our providers wherever they run their systems. If you use the site from outside the United States, you understand that your information goes to the United States, which may have different data-protection rules from your country.
Changes to this policy
If we change how we handle information we'll update this page and the date at the top. If a change is significant we will say so clearly on the site.
Contact us
Questions, requests or concerns: support@zonaitsolutions.com, 623-252-4675, or write to ZONA Web Design, Dewey-Humboldt, Arizona. You can also use the contact form.