Privacy Policy

Last updated: June 8, 2026

Wundrfy is a registered fictitious name (DBA) of Z’Le Studio Holdings, Inc., a Florida corporation. References in this policy to “Wundrfy,” “we,” “us,” or “our” mean Z’Le Studio Holdings, Inc. operating under the Wundrfy brand. This Privacy Policy explains what information we collect when you visit wundrfy.com (the “Site”), submit a form, subscribe to The Wundrfy Brief newsletter, or otherwise interact with us, and how we use, share, and protect that information.

All contracts, banking, tax filings, and legal obligations flow through Z’Le Studio Holdings, Inc. If you have questions about this policy, contact us at hello@wundrfy.com.

1. Quick summary

We try to keep this short and human. The plain version:

• We collect basic contact information when you fill out a form, email us, or subscribe to our newsletter.
• We use Airtable as our CRM, MailerLite as our newsletter platform, and n8n to orchestrate workflows between them.
• We use Google Analytics 4, Google Ads, Meta (Facebook) Pixel, and the TikTok Pixel to understand how the Site is used and to measure marketing performance.
• We display a cookie and privacy banner when you first visit the Site so you can accept or reject non-essential cookies before any analytics or marketing tags fire.
• We do not sell your personal information.
• If you are in the EU, UK, or California, you have specific rights described below.
• You can email hello@wundrfy.com at any time to access, correct, export, or delete your data.

The rest of this policy is the longer version of the same thing.

2. What information we collect

2.1 Information you give us directly

When you interact with Wundrfy, you may give us:

• Contact form data — name, email address, company, role, project description, budget range, timeline, and anything else you choose to type into a form on the Site.
• Newsletter subscription — first name and email address when you subscribe to The Wundrfy Brief.
• Discovery call information — calendar booking details, including the time of your meeting and any pre-call questions you answer.
• Client engagement information — if you become a client, we collect billing details, project files, brand materials, access credentials you share with us, and communications related to the engagement.
• Voluntary messages — email replies, LinkedIn messages, voicemails, and any other communication you initiate.

2.2 Information collected automatically

When you visit the Site, we automatically collect:

• Device and browser data — IP address, browser type and version, operating system, device type, screen size, language preferences.
• Usage data — pages viewed, time spent on pages, referring URL, clickstream behavior, scroll depth, search queries inside the Site.
• Cookie data — see Section 4 for the full breakdown.

2.3 Information from third parties

We may receive information about you from:

• Social platforms — when you click through to wundrfy.com from LinkedIn, Substack, or another platform, we may receive basic referral metadata.

We do not currently subscribe to firmographic enrichment vendors (Apollo, Clearbit, ZoomInfo, HubSpot Breeze, Common Room, etc.).

3. How we use your information

We use the information described above to:

• Respond to inquiries you send via the contact form, email, or LinkedIn.
• Schedule and prepare for discovery calls and proposal meetings.
• Send The Wundrfy Brief newsletter (only if you subscribed).
• Send transactional emails related to projects you’ve engaged us for.
• Operate, maintain, and improve the Site.
• Measure marketing performance and understand which content resonates.
• Comply with legal obligations, enforce our Terms of Service, and protect against fraud or abuse.
• For clients, deliver the services described in our engagement letter or statement of work.

We do not use your information for automated decision-making that produces legal or similarly significant effects. The Wundrfy lead-score formula in our Airtable CRM is a simple rule-based weighting used internally to prioritize follow-ups; it does not produce automated decisions about you.

3.1 Legal bases for processing (GDPR)

If you are in the European Economic Area or United Kingdom, we rely on the following legal bases under GDPR Article 6:

• Consent — for The Wundrfy Brief newsletter and non-essential cookies.
• Contract — for delivering services to clients who have signed an engagement letter or statement of work.
• Legitimate interests — for responding to your inquiries, running analytics, securing the Site, and conducting ordinary business communications. We believe these interests do not override your fundamental rights.
• Legal obligation — for tax records, accounting, and responding to lawful requests from authorities.

You can withdraw consent at any time by emailing hello@wundrfy.com or by using the unsubscribe link in any newsletter email.

4. Cookies and similar technologies

Wundrfy uses cookies and similar tracking technologies on the Site. A cookie is a small text file that a website saves to your device. Below is a breakdown of what we use and why.

4.1 Strictly necessary cookies

Required for the Site to function. These cannot be turned off.

• Session and security cookies set by our hosting provider.
• Cookie consent preferences (so we remember your choice).

4.2 Analytics cookies

Used to understand how visitors use the Site. Set only if you accept them via our cookie banner.

• Google Analytics 4 — sets _ga, _ga_*, and related identifiers. We use IP anonymization where available. Data retention is set to 14 months.

4.3 Marketing cookies

Used to measure marketing effectiveness, attribute conversions, and serve relevant ads on external ad platforms. These tags fire only after you accept marketing cookies via our cookie and privacy banner.

• Meta (Facebook) Pixel — sets _fbp and, if you are logged into Facebook or Instagram, reads fr. Used for conversion measurement, audience building, and retargeting across Facebook and Instagram.
• TikTok Pixel — sets _ttp and related identifiers for conversion measurement, audience building, and retargeting on TikTok.
• Google Ads — sets _gcl_au, _gcl_aw, _gcl_dc, and related identifiers for conversion tracking, remarketing audiences, and ad attribution across Google Search, YouTube, and the Google Display Network.
• Google Analytics 4 — listed in Section 4.2 above; also used to share conversion and audience data with Google Ads where Google Signals is enabled.

[LAWYER REVIEW FLAG #3] — Confirm each pixel is actually deployed at launch via Google Tag Manager (or equivalent) and that each one is gated behind cookie consent so it fires only after the user accepts marketing cookies. If LinkedIn Insight Tag or any additional pixel is added, list it here with the cookies it sets.

4.4 Your choices

• Cookie and privacy banner — when you first visit the Site, our cookie and privacy banner asks you to accept or reject non-essential cookies (analytics and marketing). Strictly necessary cookies are always on; analytics and marketing tags (Google Analytics 4, Google Ads, Meta Pixel, TikTok Pixel) fire only after you accept. You can change your choice at any time by clicking the “Cookie Preferences” link in the Site footer.
• Browser controls — most browsers let you block or delete cookies through their settings.
• Do Not Track — we currently do not respond to Do Not Track browser signals because there is no consistent industry standard. We honor Global Privacy Control (GPC) signals as required by California law.

5. How we share your information

We do not sell your personal information. We share information only in the following situations:

5.1 Service providers (data processors)

We share information with vendors who help us run the business, under contractual confidentiality and data protection obligations. The main ones:

5.2 Legal and safety reasons

We may disclose information if we believe in good faith that disclosure is required to:

• Comply with a subpoena, court order, or other valid legal process.
• Enforce our Terms of Service or other agreements.
• Investigate or prevent fraud, security threats, or illegal activity.
• Protect the rights, property, or safety of Wundrfy, our clients, or others.

5.3 Business transfers

If Wundrfy is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify you (typically by email or by a notice on the Site) before your information becomes subject to a different privacy policy.

5.4 With your consent

We will share information for other purposes if you give us specific consent to do so.

6. International data transfers

Wundrfy is based in the United States. If you access the Site from outside the U.S., your information will be transferred to, stored in, and processed in the United States and other countries where our service providers operate.

For transfers from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on:

• The European Commission’s Standard Contractual Clauses (SCCs) with our vendors.
• The UK International Data Transfer Addendum where applicable.
• Vendor participation in the EU-U.S. Data Privacy Framework where applicable (e.g., Google).

7. Data retention

We keep personal information only as long as needed for the purposes described in this policy or as required by law.

• Contact form submissions — kept in Airtable for the duration of the contact relationship; deleted on request.
• Newsletter subscribers — kept in MailerLite until you unsubscribe, then suppressed (not fully deleted) so we do not accidentally re-add you.
• Client engagement files — kept for the duration of the engagement plus seven (7) years for tax and accounting purposes.
• Analytics data — Google Analytics 4 set to 14-month retention. MailerLite engagement data (opens, clicks) retained per MailerLite’s defaults.
• Internal team notifications — Telegram alert messages sent to our private bot are retained in our chat history; they contain no personal data (only the event type — e.g. “New Wundrfy lead received” — and a link back to Airtable). They are auto-purged at our discretion.
• Backup copies — may persist for up to ninety (90) days after deletion from active systems.

8. Your rights

8.1 Rights for all users

Regardless of where you live, you may:

• Ask what personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete information (subject to legal exceptions).
• Unsubscribe from The Wundrfy Brief at any time.

Email hello@wundrfy.com to make any of these requests. We will respond within thirty (30) days.

8.2 EU, UK, and Swiss residents (GDPR)

In addition to the above, you have the right to:

• Access — obtain a copy of your personal data in a portable format.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion (“right to be forgotten”).
• Restriction — limit how we process your data.
• Data portability — receive your data in a machine-readable format and transmit it to another controller.
• Objection — object to processing based on legitimate interests, including profiling.
• Withdraw consent — at any time, where processing is based on consent.
• Lodge a complaint — with your local supervisory authority.

8.3 California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell.
• Request deletion of personal information.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not currently sell or share, as defined under CPRA, but we honor GPC signals).
• Limit the use of sensitive personal information (we do not collect sensitive personal information as defined under CPRA in the ordinary course of business).
• Non-discrimination for exercising your rights.

To exercise these rights, email hello@wundrfy.com with “California Privacy Request” in the subject line. We will verify your identity using the email address on file or, if necessary, additional information.

You may also designate an authorized agent to make requests on your behalf.

8.4 Other U.S. state laws

We aim to comply with consumer privacy laws in Colorado, Connecticut, Virginia, Utah, Texas, and other states as they become effective. Residents of these states have rights similar to those described under CCPA. Email hello@wundrfy.com to exercise them.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including:

• TLS encryption for data in transit, including for the form submissions that pass through our n8n workflow infrastructure (the n8n endpoint is exposed publicly via Tailscale Funnel, which terminates TLS at the Tailscale edge).
• Encryption at rest for sensitive data stored in Airtable, MailerLite, Stripe, and our infrastructure.
• Access controls and the principle of least privilege for our team and contractors. Airtable Personal Access Tokens are scoped to a single base; MailerLite API keys are stored only in n8n’s credential vault; the Cal.com webhook and contact-form webhook accept only POSTs to specific paths.
• Regular review of vendor security practices.

No system is perfectly secure. If a data breach affects your personal information, we will notify you and applicable regulators as required by law.

10. Children’s privacy

The Site is intended for business audiences. We do not knowingly collect personal information from children under sixteen (16). If you believe a child has provided information to us, contact hello@wundrfy.com and we will delete it.

11. Third-party links

The Site may link to external resources we do not control, including LinkedIn, Substack, client websites, and partner platforms. This policy does not apply to those sites. Review their privacy policies separately.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top and, where appropriate, notify you by email or a banner on the Site. Continued use of the Site after a change indicates acceptance of the updated policy.

13. Contact us

For privacy questions, requests, or complaints, email:

Z’Le Studio Holdings, Inc. (DBA Wundrfy)
1451 W. Cypress Creek Road, Suite 300
Fort Lauderdale, FL 33309
United States
Email: hello@wundrfy.com
Subject line: “Privacy Inquiry”