1. Who we are
FZ Group LLC ("FZ Group", "we", "us", "our") is a limited liability company organised under the laws of the State of Wyoming, United States of America, with its registered office at 30 N Gould Street, Suite R, Sheridan, WY 82801, USA. We act as the controller of personal data described in this Policy.
You can reach our privacy contact at hello@fzgroup.io.
2. What this Policy covers
This Policy applies to personal information we collect through our website at fzgroup.io and in the course of providing professional marketing and consulting services to our clients. It does not apply to third-party services that you may access through links on our site.
3. What information we collect
3.1 Information you give us directly
- Contact details (name, email address, company, role) when you write to us, subscribe to our newsletter, or book a call.
- Business and engagement information shared during scoping conversations or in the course of an active engagement.
- Communications you send to us, including emails, messages, and call recordings (where you have consented).
3.2 Information collected automatically
- Device and browser information (type, version, language, time zone, screen size).
- Approximate geographic location derived from IP address.
- Pages visited, time on page, and referring URL, in aggregate, via privacy-respecting analytics.
We do not use tracking pixels, advertising cookies, or third-party retargeting on this website. See our Cookie Notice for details.
4. How we use your information
- To respond to your enquiry. Replying to messages, scheduling calls, providing requested information.
- To deliver our services. Performing the engagement contracted with you or your organisation.
- To send The FZ Memo. Only if you have actively subscribed; you can unsubscribe at any time.
- To improve our site. Understanding which content is useful through aggregate analytics.
- To comply with legal obligations. Including tax, accounting, anti-money-laundering, and record-keeping duties.
5. Legal bases for processing
Where the EU General Data Protection Regulation (GDPR), UK GDPR, or UAE Personal Data Protection Law applies, we rely on the following legal bases:
- Contract — to perform our services or take steps at your request before entering into a contract.
- Legitimate interests — to operate, secure, and improve our business, balanced against your rights.
- Consent — for marketing communications and any non-essential analytics, freely withdrawable at any time.
- Legal obligation — to comply with applicable law.
6. Who we share information with
We do not sell or rent personal information. We share it only with:
- Service providers who help us operate (e.g., email infrastructure, accounting, hosting). They process data only on our instructions and under written agreements.
- Our clients, where relevant to the engagement and only in the agreed scope.
- Authorities, where required by law or court order.
- Successors in interest, in the event of a corporate transaction (merger, acquisition, asset sale), subject to equivalent protection of your information.
7. International transfers
As a US entity working with operators worldwide, we transfer data internationally. Where personal data is transferred out of the EEA, UK, or other regulated jurisdictions, we rely on Standard Contractual Clauses or equivalent safeguards. Contact us for a copy of the relevant clauses applicable to your data.
8. How long we keep information
We retain personal information only as long as necessary for the purposes described above, or as required by applicable law (typically up to seven years for engagement and financial records). Newsletter subscribers' data is retained until unsubscription. Website analytics data is aggregated and retained for 26 months.
9. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your information, subject to legal retention obligations.
- Object to or restrict certain processing.
- Request portability of your information in a structured, commonly used format.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email us at hello@fzgroup.io. We respond within 30 days.
10. Security
We implement technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit, access controls, principle of least privilege, and routine review of our security practices. No system is impenetrable; if we become aware of a personal data breach affecting you, we will notify you and the relevant authority as required by law.
11. Children
Our services are intended for businesses. We do not knowingly collect information from individuals under the age of 16.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be communicated via email to active contacts and posted with a revised "Last updated" date.