Last updated: 31 October 2026

This policy explains what personal information Zura Labs collects, why we collect it, who we share it with, and the choices you have. It covers this website and our dealings with clients, prospective clients, job applicants and suppliers.

It does not cover personal information we handle on behalf of a client while delivering Zura FinServ or ZuraTM. That information stays under our client's control and their own privacy notice — see section 9.

1. Who we are

Zura Labs is the controller of the personal information described in this policy. We provide finance and accounting support services and workflow automation software, with operational support to the Americas, Europe and Asia.

2. Information we collect

Information you give us

When you email us, call us, or ask about our services, we collect your name, your employer, your contact details, and whatever you choose to tell us about your business and the work you want to improve. If you apply for a role, we collect your application: your CV, work history, qualifications, right-to-work information, and anything else you send.

Information we collect automatically

Our hosting provider records standard server logs when you visit this site — your IP address, the pages requested, the time of the request, and your browser's user-agent string. These logs exist to keep the site running and secure. We do not use them to build a profile of you, and this site does not track you across other websites.

Information from other sources

We may receive your contact details from a colleague who refers you to us, from a public business source such as a company website or a professional network, or from an event organiser where we have met.

3. Why we use it, and our legal basis

Where the GDPR or UK GDPR applies, we rely on these legal bases:

• To respond to you and to provide our services — performance of a contract with you, or steps taken at your request before entering one.
• To run and secure this website, keep records, and manage our own business — our legitimate interests in operating safely and efficiently.
• To consider you for a role — steps taken at your request before a contract, and our legitimate interest in recruiting.
• To send you material you asked for, where we do that — your consent, which you can withdraw at any time.
• To meet our legal, tax, accounting and regulatory obligations, and to establish or defend legal claims — legal obligation, and our legitimate interests.

We do not use your personal information to make decisions about you by automated means that produce legal or similarly significant effects.

4. We do not sell your information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy laws. We have not done so in the preceding twelve months.

5. Cookies

This website sets no cookies. It stores nothing in your browser, uses no analytics, and loads nothing from a third party — the fonts, images, styles and script all come from our own domain. There is no tracking here to opt out of, and nothing for a consent banner to ask you about.

If that ever changes, we will update this section before the change goes live, and where the law requires it we will ask for your consent first.

6. Who we share it with

We share personal information only where we need to:

• Service providers who work for us under contract — hosting, email, IT support, and professional advisers. They may use the information only to provide their service to us.
• Professional advisers — lawyers, auditors, accountants and insurers, where they need it to advise us.
• Authorities, where we are required to disclose by law, regulation, or valid legal process.
• A buyer or successor, if Zura Labs or part of its business is sold, merged or reorganised. We will tell you if your information becomes subject to a different privacy policy.

A current list of the providers we use to deliver our services is available from info@zuralabs.com on request.

7. How long we keep it

We keep personal information only as long as we need it for the purpose we collected it, and then for as long as we are required to keep records or may need to defend a claim. In practice that means:

• Enquiries that do not become work — while there is a realistic prospect of working together, and a reasonable period afterwards in case you come back to us.
• Client records and correspondence — for the engagement, and afterwards for as long as professional, tax and accounting record-keeping rules require, and while a claim arising from the work could still be brought.
• Unsuccessful job applications — for the recruitment process and a short period afterwards, and longer only if you ask us to keep you on file for future roles.
• Server logs — for a short period, for security and troubleshooting.

If you want to know how long we will hold something specific, ask us and we will tell you.

8. International transfers

We provide operational support to the Americas, Europe and Asia, so your personal information may be accessed from, or stored in, a country other than your own — including the United States and the other countries our delivery teams work from. We will tell you which countries are involved in your matter if you ask.

Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with any additional safeguards the transfer requires. You can ask us for a copy of the mechanism we use.

9. Client data we handle on our clients' behalf

Delivering Zura FinServ and ZuraTM means handling information inside our clients' finance and accounting systems. That information can include personal data about our clients' own employees, customers and suppliers — payroll records, invoices, and the contents of accounts payable and receivable.

For that information our client is the controller and we act as a processor. We handle it only on our client's documented instructions, under a written agreement that sets out the subject matter, duration, nature and purpose of the processing, the categories of data and data subjects, confidentiality obligations on our staff, security measures, rules on sub-processors, assistance with data subject requests, and what happens to the data when the engagement ends.

If you believe we hold information about you because of work we do for one of our clients, the quickest route is to contact that organisation directly — it controls the information and can act on your request. You are welcome to contact us as well and we will pass your request on.

10. Your rights

If you are in the EEA, the UK or Switzerland

You have the right to ask us for a copy of your personal information; to have inaccurate information corrected; to have information erased; to restrict or object to how we use it, including objecting to processing based on legitimate interests; and to receive information you gave us in a portable format. Where we rely on consent, you can withdraw it at any time, which does not affect anything we did before you withdrew it.

If you are in a US state with a privacy law

Depending on where you live, you may have the right to know what personal information we have collected, used and disclosed; to get a copy of it; to correct it; to delete it; and to opt out of sale, sharing for cross-context behavioural advertising, or profiling. As section 4 says, we do not sell or share your information in that sense. We will not discriminate against you for exercising any of these rights.

How to exercise them

Email info@zuralabs.com and tell us what you want to do. We will need to verify your identity before we act, and we will respond within the time the applicable law allows. You may use an authorised agent where the law permits.

11. Complaints

If you are unhappy with how we have handled your personal information, please tell us first at info@zuralabs.com so we can try to put it right.

You also have the right to complain to a data protection authority. In the EEA this is the supervisory authority where you live, work, or where you think the problem happened. In the UK it is the Information Commissioner's Office.

12. Children

Our services are for businesses. This website is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

13. Security

We maintain technical and organisational measures appropriate to the risk. These include controls over who can reach client systems and records, encrypted connections for the systems we use to exchange information, confidentiality obligations on our staff, and the defined workflows and review and quality controls that our service delivery is built around.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

14. Changes to this policy

We will update this policy when our practices change. The date at the top shows when it was last revised. If a change materially affects how we use information we already hold about you, we will tell you directly where we can.

15. Contact us

Questions about this policy, or about how we handle personal information, can go to info@zuralabs.com, or to Zura Labs, 1431 Greenway Drive, Suite 750, Irving, TX 75038, United States.

That page does not exist, or it has moved.

Go to the home page, or get in touch and we will point you in the right direction.