This Website Privacy Policy explains how ZFRNexus LLC (“ZFRNexus,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with https://zfrnexus.com, related business inquiries, and communications before a client engagement. It does not govern personal information processed solely on a client’s behalf under a client agreement and, where applicable, a data processing addendum.
1. Who We Are
ZFRNexus is a New York-based scientific strategy and innovation consulting business serving organizations in the life sciences, healthcare, health-technology, nutraceutical, consumer-health, product-development, scientific-communications, analytics, and related sectors. Questions or requests concerning this Policy may be sent to hello@zfrnexus.com.
2. Personal Information We Collect
2.1 Information You Provide
- Contact and professional information, such as name, email address, organization, title, telephone number if voluntarily provided, professional profile, and geographic or time-zone information.
- Inquiry and correspondence information, such as area of interest, message content, scheduling details, attachments sent outside the website, and records of communications.
- Prospective-client and business information, such as requested services, project context, referral source, procurement information, and information needed for conflict, sanctions, or engagement screening.
- Publication, speaking, and collaboration information, such as biographies, attribution information, event details, publisher or organizer contacts, and permissions.
- Information you otherwise choose to provide. Please do not provide patient information, protected health information, identifiable research-subject information, genetic or biometric information, account credentials, trade secrets, or other sensitive or restricted information through the Site.
2.2 Information Collected Automatically
When you visit the Site, ZFRNexus and its service providers may collect technical and usage information, including IP address, browser type, device type, operating system, referring and exit pages, approximate location inferred from IP address, pages viewed, interaction events, date and time, and diagnostic or security data. At launch, Google Analytics 4 is planned to provide aggregate website-usage information, subject to the consent and preference controls described in the Cookie Policy.
2.3 Information From Other Sources
We may receive information from referrals, publicly available professional sources, event organizers, publishers, collaborators, social or professional networks, and service providers. We may combine it with information you provide when reasonably necessary for the purposes described below.
3. How We Use Personal Information
- Operate, secure, maintain, troubleshoot, and improve the Site and its contact functionality.
- Respond to inquiries; schedule discussions; evaluate possible engagements, speaking opportunities, publications, collaborations, or referrals; and communicate about them.
- Prepare proposals, agreements, statements of work, onboarding materials, and other pre-engagement documentation.
- Provide and administer services after an engagement begins, subject to the applicable client agreement and any separate privacy terms.
- Understand aggregate Site usage and content performance; maintain security logs; prevent spam, fraud, abuse, and unauthorized access.
- Maintain business, tax, accounting, insurance, legal, compliance, and dispute records; establish, exercise, or defend legal claims.
- Comply with applicable law, lawful requests, professional obligations, sanctions, and contractual requirements.
- Send newsletters or other marketing communications only if that feature is later activated and the recipient has consented or another lawful basis applies. The Site will be updated before material new marketing functionality is launched.
4. Legal Bases for Processing
Where European Economic Area or United Kingdom data-protection law applies, we rely on one or more of the following legal bases, as appropriate: your consent (including for non-essential cookies where required); steps requested before entering into a contract; performance of a contract; compliance with legal obligations; and legitimate interests, including operating a B2B website, responding to professional inquiries, developing business relationships, securing systems, improving services, and protecting legal rights. You may withdraw consent prospectively where processing is based on consent.
5. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients, only for the relevant purpose and subject to appropriate restrictions:
- Website and infrastructure providers, including Vercel (hosting), Sanity (content management), Resend (contact-form email delivery), Namecheap (domain services), and technical or security vendors supporting the Site.
- Analytics providers, including Google Analytics 4, if and when activated in accordance with applicable consent choices and configuration.
- Scheduling and communication providers. The Site may link to Calendly rather than embed it; information submitted directly to Calendly is also governed by Calendly’s own privacy terms.
- Professional advisers, insurers, accountants, auditors, financial institutions, and other providers supporting ZFRNexus’s business and legal obligations.
- Contractors or specialists engaged for a specific matter, but only when authorized or appropriate and subject to confidentiality, intellectual-property, security, and data-protection obligations.
- Government authorities, regulators, courts, law enforcement, or other persons when disclosure is required by law or reasonably necessary to protect rights, safety, systems, or the public.
- A buyer, successor, investor, financing source, or transaction adviser in connection with an actual or proposed merger, financing, reorganization, sale of business or assets, or similar transaction, subject to reasonable confidentiality protections.
- Other recipients at your direction or with your consent.
We do not sell personal information for money. We do not currently share personal information for cross-context behavioral advertising or use sensitive personal information to infer characteristics. If our practices materially change, we will update this Policy and implement any required notices or choices before the change takes effect.
6. Cookies and Similar Technologies
The Site may use essential storage technologies needed for security, operation, and preference management. Google Analytics 4 is planned for audience measurement and Site improvement. Where applicable law requires consent, non-essential analytics will not be activated until the required choice is obtained. The Cookie Policy provides additional details and explains how to manage preferences.
7. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including legal, tax, accounting, security, and dispute requirements. Current operating targets are:
| Category | Current Retention Target |
|---|---|
| Contact inquiries and pre-engagement correspondence | Generally three years after the last substantive interaction, unless a longer period is reasonably required for an active opportunity, legal hold, or dispute. |
| Executed agreements, SOWs, invoices, and core client-administration records | Generally seven years after the relationship or applicable transaction ends, subject to legal, tax, insurance, or contractual requirements. |
| Security, spam-prevention, and diagnostic logs | Generally up to one year, unless a shorter period is configured or a longer period is necessary to investigate an incident or protect legal rights. |
| Google Analytics user- and event-level data | Configure to fourteen months or a shorter available period at launch; aggregate reports may persist longer. |
| Consent and preference records | For the period reasonably necessary to demonstrate and honor the applicable choice, including after withdrawal where record retention is legally appropriate. |
Retention periods are operational targets rather than guarantees. We may delete information earlier when no longer needed or retain it longer when required by law, contract, litigation hold, security investigation, or other legitimate need.
8. Security
We use administrative, technical, and organizational safeguards designed to protect personal information in light of the nature of the information, the size and complexity of the business, and reasonably foreseeable risks. No system or transmission method is completely secure. Do not use the contact form for sensitive, regulated, or confidential information. If you believe information has been compromised, contact us promptly at the email below.
9. International Data Transfers
ZFRNexus is based in the United States, and information may be processed in the United States and other countries where ZFRNexus or its service providers operate. Those countries may have different data-protection laws. Where applicable law requires a transfer mechanism, ZFRNexus will use an appropriate mechanism, such as an adequacy decision, approved standard contractual clauses, or another lawful safeguard. A client-specific transfer assessment or addendum may be required for certain engagements.
10. Your Choices and Rights
Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about disclosures. You may also have the right to complain to a data-protection authority. These rights are subject to verification, exceptions, and legal limits.
- To submit a request, email hello@zfrnexus.com and describe the request and the information or interaction to which it relates.
- We may request information reasonably necessary to verify identity, authority, and the scope of a request. Authorized agents must provide appropriate evidence of authority.
- We will not discriminate against an individual for exercising an applicable privacy right.
- You may manage non-essential cookie choices through the Site’s cookie-preference tool when available.
- You may opt out of non-transactional email marketing by using the unsubscribe mechanism in the message or contacting us. At initial launch, ZFRNexus does not operate a newsletter or routine marketing list.
11. California and U.S. State Privacy Information
This Policy is intended to provide the disclosures generally expected for a commercial website that collects contact and device information, including the categories of information collected, purposes, recipient categories, retention approach, and available request method. ZFRNexus is currently a pre-revenue business and has not represented that it meets the applicability thresholds of any comprehensive U.S. state consumer privacy statute. If ZFRNexus later becomes subject to such a law, this Policy and the Site’s request and opt-out mechanisms will be updated before reliance on them for compliance.
12. Browser Signals
Some browsers transmit “Do Not Track” signals. Because there is no uniform industry standard for interpreting those signals, the Site does not currently respond to them. ZFRNexus does not currently sell personal information or engage in cross-context behavioral advertising. If a legally recognized opt-out preference signal becomes applicable to ZFRNexus’s practices, ZFRNexus will implement an appropriate response.
13. Children
The Site and ZFRNexus services are directed to organizations and adult professionals and are not intended for children under 13 or targeted to minors. We do not knowingly collect personal information directly from children through the Site. If you believe a child has provided personal information, contact us so we can evaluate and, where appropriate, delete it.
14. Third-Party Sites and Publications
The Site may link to third-party websites, publications, social networks, and scheduling services. This Policy does not govern third parties. Review their privacy notices before providing information. ZFRNexus is not responsible for their privacy, security, or content practices.
15. Changes to This Policy
We may update this Policy to reflect changes in law, technology, vendors, features, or business practices. The revised version will be posted with a new “Last Updated” date. If a change materially affects how previously collected information is used, we will provide additional notice or obtain consent where required.
16. Contact
Privacy questions and requests may be sent to:
ZFRNexus LLC
Email: hello@zfrnexus.com
Website: https://zfrnexus.com