Zanzo

Privacy Policy

Last updated: 12 July 2026

1. About this Privacy Policy

This Privacy Policy explains how ZANZO AI LTD collects, uses, stores, shares and otherwise processes personal information when individuals access or use:

  • the Zanzo mobile application;

  • our website and associated webpages;

  • our customer support services; and

  • any other products, features or services that link to this Privacy Policy,

together referred to in this Privacy Policy as the "Platform" or the "Services".

Zanzo operates a technology-enabled local task marketplace. Through the Platform, individuals may request assistance with eligible local tasks ("Customers"), while approved individuals may review and accept available task opportunities ("ZanCrew").

Depending on the Services available at the relevant time, task categories may include everyday local assistance such as collection and delivery of eligible items, pick-up and drop-off assistance, help at a specified location, and other eligible short tasks. Certain tasks may be rejected or restricted where they are unsafe, unlawful, regulated, unsuitable for the Platform or contrary to our Terms and Conditions or Task Rules.

This Privacy Policy applies to Customers, ZanCrew applicants, approved ZanCrew users, website visitors, people who contact our support team and any other individuals whose personal information we process in connection with Zanzo.

It should be read together with our Terms and Conditions, Task Rules, Cancellation and Refund Policy, and any additional privacy explanation or permission request displayed when information is collected.

2. Who We Are

The organisation responsible for the personal information described in this Privacy Policy is:

ZANZO AI LTD Company number: 16566421 Registered office: 66 Paul Street, London, England, EC2A 4NA Email: hello@zanzo.ai

ZANZO AI LTD is a private limited company registered in England and Wales.

For questions about this Privacy Policy, our use of personal information or the exercise of a data protection right, contact us at hello@zanzo.ai.

3. Our Role as Data Controller

For most processing described in this Privacy Policy, ZANZO AI LTD acts as the controller. This means that we decide why and how the relevant personal information is processed.

Some organisations that provide services to Zanzo may process information on our instructions as processors. Other organisations, including certain payment, telecommunications or authentication providers, may act as separate controllers for aspects of their services. Their own privacy notices may therefore apply.

4. Personal Information We Collect

The information we collect depends on how an individual interacts with Zanzo, the features used and whether the individual is acting as a Customer, ZanCrew applicant, approved ZanCrew user, website visitor or support requester.

4.1 Account and identity information

When an individual creates or uses a Zanzo account, we may collect:

  • name;

  • mobile telephone number;

  • email address, where supplied;

  • account and user identifiers;

  • profile name, photograph or initials;

  • account type or role;

  • account status;

  • authentication and verification status;

  • dates and times of account activity; and

  • preferences and information associated with the account.

Zanzo currently uses telephone-based one-time passcode verification. We may process the submitted phone number, verification attempts, verification status, timestamps and technical records associated with sending and validating the passcode.

One-time passcodes must not be shared with another person. Zanzo will never ask a user to send a current authentication code through an ordinary email or support message.

4.2 ZanCrew application and onboarding information

Individuals applying to become ZanCrew may be asked to provide additional information so that Zanzo can assess their eligibility and administer onboarding.

Depending on the process in use, this may include:

  • full name and contact details;

  • date of birth or confirmation that the applicant meets the minimum age requirement;

  • address and geographic availability;

  • identity information;

  • photographs or copies of identity documents;

  • right-to-work information;

  • immigration share codes and related verification information;

  • work eligibility information;

  • onboarding answers and declarations;

  • preferred task types;

  • availability;

  • application status;

  • approval, rejection or reapplication information;

  • safety or compliance review information; and

  • records of manual administrative decisions.

ZanCrew access may require manual approval. Providing information does not guarantee that an application will be approved.

We seek to collect only the onboarding information reasonably necessary for eligibility, safety, compliance and Platform administration.

4.3 Task request information

When a Customer creates or attempts to create a task, we may process:

  • the task description;

  • task category;

  • collection, delivery or attendance location;

  • requested date and time;

  • special instructions;

  • requested outcome;

  • estimated duration;

  • pricing or estimated pricing information;

  • photographs or supporting information voluntarily uploaded;

  • information generated through AI-assisted task processing; and

  • records explaining whether the task was accepted, amended, rejected, cancelled or completed.

Customers should provide accurate information and avoid including unnecessary sensitive information in task descriptions.

Users must not place passwords, bank login information, full payment-card information, government authentication credentials, medical records or other unnecessary highly sensitive information in a task request or ordinary support message.

4.4 Task offer and lifecycle information

When a task is offered to or accepted by a ZanCrew user, we may process information concerning:

  • which eligible ZanCrew users received the offer;

  • when the offer was displayed;

  • acceptance or rejection;

  • task assignment;

  • travel or "on the way" status;

  • arrival status;

  • task start;

  • task progress;

  • task completion;

  • cancellation or task abandonment;

  • timestamps for lifecycle events;

  • task-related communications; and

  • customer and ZanCrew actions relating to the task.

This information enables Zanzo to operate live task functionality, display task progress, administer payments and respond to disputes or safety concerns.

4.5 Start PIN and End PIN information

Zanzo may use Start PIN and End PIN verification to confirm key stages of a task.

We may process:

  • generated PIN-related account information;

  • verification attempts;

  • whether a PIN was accepted or rejected;

  • task and user identifiers;

  • date and time of verification; and

  • the task status resulting from successful verification.

These controls are used to support task security, reduce disputes, confirm that the relevant stage occurred and administer payment or completion processes.

Users should disclose task PINs only at the correct task stage and only to the person performing the relevant task.

4.6 Voice and speech-to-text information

Zanzo may allow users to describe a task using voice input.

When voice input is used, speech may be processed by the user's device, operating-system speech service or another technology provider to convert the spoken request into text. The availability and operation of speech recognition may depend on device settings and the relevant platform provider.

Zanzo generally uses the resulting transcribed text to structure and process the request. We do not intend to retain raw voice recordings on Zanzo's application servers unless a particular feature expressly explains otherwise before collection.

A device or operating-system provider may process voice input under its own terms and privacy notice.

Users can choose to type a request instead of using voice functionality.

4.7 AI-assisted request information

Zanzo may use artificial intelligence-assisted technology to:

  • interpret a free-form request;

  • improve spelling or clarity;

  • structure a request;

  • suggest a task category;

  • identify missing task details;

  • assess whether a request may fall outside the Platform's permitted scope;

  • assist customer support; and

  • generate suggested responses or explanations.

The information processed may include the text of the task request, relevant task context, support questions and limited associated identifiers where required to provide the feature.

AI-generated or AI-assisted output may be incomplete or inaccurate. Users remain responsible for reviewing task information presented to them and correcting material errors before confirming a request.

Users should not submit unnecessary sensitive information through AI-assisted fields.

4.8 Location information

Location is a core part of the Zanzo Platform.

Where device permission is granted or the user otherwise provides location information, we may process:

  • precise or approximate device location;

  • collection location;

  • delivery location;

  • attendance location;

  • task origin and destination;

  • country or regional information;

  • location associated with an active task;

  • distance between users and tasks;

  • estimated travel or arrival information; and

  • timestamps associated with location activity.

We use location information to:

  • determine the relevant operating region;

  • show or distribute nearby task opportunities;

  • match Customers with eligible nearby ZanCrew;

  • support collection, delivery and attendance tasks;

  • calculate or support distance-based features;

  • provide task progress and estimated arrival information;

  • prevent tasks from being offered outside an eligible region;

  • support safety and dispute investigations; and

  • operate other location-dependent Platform features.

Device-level location permission can be controlled through the user's operating-system settings. Disabling location may prevent or materially limit core Platform functionality.

We do not use precise location information for unrelated third-party advertising.

4.9 Payment and transaction information

Zanzo uses third-party payment infrastructure to process task-related payments.

Payment card details may be entered directly into technology supplied by the relevant payment provider. Zanzo does not intentionally store full payment card numbers or card security codes on its own application servers.

We may receive or retain:

  • payment-provider customer identifiers;

  • payment-intent or transaction identifiers;

  • amount and currency;

  • authorisation status;

  • capture status;

  • payment status;

  • payment failure information;

  • cancellation information;

  • refund status;

  • chargeback or dispute information;

  • task references;

  • dates and times; and

  • limited card information made available by the payment provider, such as card brand and final digits.

A payment may be authorised at one stage and captured at a later task stage, depending on the payment flow applicable to the task.

Payment providers may independently process information for security, fraud prevention, regulatory compliance and service administration under their own privacy notices.

4.10 ZanCrew earnings and payout information

Where ZanCrew users become eligible to receive earnings or payouts, we may process:

  • task earnings;

  • Platform fees;

  • adjustment information;

  • payout amount;

  • payout status;

  • payout schedule;

  • bank or payout-destination information;

  • transaction references;

  • tax or compliance information where required; and

  • records of successful, pending, failed or manually processed payouts.

We use this information to calculate earnings, administer payouts, maintain financial records, investigate disputes and comply with applicable legal obligations.

4.11 Communications and support information

When an individual contacts Zanzo or uses a customer-support feature, we may collect:

  • the contents of the message;

  • name and contact details;

  • task, payment or account identifiers;

  • photographs or documents voluntarily submitted;

  • support-chat information;

  • dates and times;

  • internal support notes;

  • action taken; and

  • the outcome of the enquiry.

Support tools may use AI-assisted technology to help understand enquiries, identify relevant information or suggest responses. Where support is opened from a task-related screen, relevant task identifiers or context may be used to provide more useful assistance.

We may retain communications where reasonably necessary to resolve an enquiry, investigate a dispute or safety matter, improve support quality and maintain an appropriate record of actions taken.

4.12 Ratings, reviews and feedback

We may process ratings, reviews, complaints, feedback and quality information associated with a user, task or Platform interaction.

This information may be used to:

  • operate reputation features;

  • assess Platform quality;

  • investigate complaints;

  • identify abuse or repeated misconduct;

  • make safety or access decisions;

  • resolve disputes; and

  • improve the Services.

Public-facing reviews must not contain another person's private information, discriminatory content, threats, harassment or unlawful material.

4.13 Push notification information

Where notifications are enabled, we may process:

  • device notification tokens;

  • device and operating-system information;

  • notification type;

  • delivery status;

  • task or offer identifiers;

  • notification interaction data; and

  • notification preferences.

Notifications may concern nearby tasks, task acceptance, travel, arrival, task start, completion, payments, refunds, payouts, security or other service-related matters.

Users can manage notification permissions through device settings. Disabling notifications may prevent timely receipt of important task information.

4.14 Device, technical and usage information

When the Services are accessed, we may automatically process technical information including:

  • IP address;

  • device type;

  • operating system;

  • app version;

  • technical identifiers;

  • date and time of access;

  • authentication events;

  • API requests;

  • feature interactions;

  • error and diagnostic information;

  • security events;

  • network information;

  • notification tokens; and

  • service logs.

We use this information to provide the Services, maintain compatibility, troubleshoot errors, prevent fraud and abuse, secure the Platform and improve performance.

4.15 Information from third parties

We may receive personal information from organisations that help us operate the Platform, including payment providers, telephone verification providers, cloud infrastructure providers, database and storage providers, mapping and location providers, notification providers and AI technology providers.

The information received depends on the service and may include payment status, verification status, technical identifiers, notification status, fraud indicators or other integration information required to provide the Services.

5. How We Use Personal Information

We may use personal information to:

  • create, authenticate and administer accounts;

  • verify mobile telephone numbers;

  • manage profiles and account settings;

  • review and administer ZanCrew applications;

  • conduct identity, eligibility or right-to-work checks where applicable;

  • receive and process task requests;

  • use AI-assisted tools to structure or categorise requests;

  • identify prohibited, unsafe or unsupported requests;

  • match Customers with eligible ZanCrew;

  • distribute nearby task opportunities;

  • administer task acceptance and assignment;

  • support live task status and location features;

  • process Start PIN and End PIN verification;

  • process payments, authorisations, captures, cancellations and refunds;

  • calculate earnings, Platform fees and payouts;

  • deliver service-related notifications;

  • provide support and respond to enquiries;

  • investigate safety incidents, complaints and disputes;

  • detect and prevent fraud, misuse and unauthorised access;

  • protect users, Zanzo and third parties;

  • enforce our Terms, Task Rules and other policies;

  • maintain, troubleshoot and improve the Platform;

  • perform analytics using aggregated or de-identified information;

  • comply with legal, tax, accounting and regulatory obligations;

  • establish, exercise or defend legal claims; and

  • administer our business operations.

We do not sell personal information in the ordinary meaning of selling information for payment.

6. Lawful Bases for Processing

Where UK data protection law applies, we process personal information using one or more of the following lawful bases.

6.1 Performance of a contract

We process information where necessary to provide the Services requested by a user or to take steps at the user's request before entering into a contract.

This includes processing needed to create accounts, receive task requests, connect Customers and ZanCrew, administer tasks, process Platform transactions and provide requested features.

6.2 Legitimate interests

We process information where necessary for our legitimate interests or those of another person, provided those interests are not overridden by the individual's rights.

These interests may include:

  • operating and improving the Platform;

  • protecting users;

  • preventing fraud and abuse;

  • securing systems and accounts;

  • investigating complaints and disputes;

  • maintaining accurate operational records;

  • supporting customer service;

  • understanding service performance; and

  • administering and developing our business.

6.3 Legal obligations

We process information where necessary to comply with legal, regulatory, accounting, tax, corporate, employment, immigration, safety or law-enforcement obligations that apply to us.

6.4 Consent

We may rely on consent for particular processing, including certain device permissions, optional marketing or other activities where consent is the appropriate legal basis.

Where processing depends on consent, the individual may withdraw consent at any time. Withdrawal does not make earlier processing unlawful.

Disabling a permission may prevent the associated feature from operating.

6.5 Legal claims and vital interests

In limited circumstances, we may process information where necessary to establish, exercise or defend legal claims, or to protect the vital interests of an individual where permitted by law.

7. Information Shared Between Customers and ZanCrew

The Platform requires some information to be shared between Customers and ZanCrew so that eligible tasks can be reviewed, accepted and completed.

Before acceptance, ZanCrew may be shown limited information such as:

  • task category;

  • general task description;

  • relevant timing;

  • approximate or task-relevant location;

  • estimated earnings or pricing information; and

  • other information needed to decide whether to accept the opportunity.

After acceptance, the relevant Customer and ZanCrew user may receive additional information necessary to perform the task, including:

  • name or profile information;

  • exact task address;

  • collection or delivery details;

  • task instructions;

  • task status;

  • timing information; and

  • limited communication information where required.

Users must use information obtained through Zanzo only for the relevant task and legitimate Platform purposes.

Information obtained through the Platform must not be used for unrelated advertising, harassment, surveillance, discrimination, fraud, impersonation, stalking or any unlawful purpose.

8. Service Providers

We use third parties to provide technology and operational services.

Current categories of providers include:

Stripe — Stripe may process payment information, payment identifiers, fraud and security information, transaction status, refunds, chargebacks and related records.

Twilio — Twilio may process telephone numbers and communications information to provide one-time passcode verification and related communications functionality.

Google Firebase — Firebase may process device identifiers, notification tokens and related technical information to support mobile functionality and push notifications.

Supabase — Supabase may provide database, authentication-related, storage or associated infrastructure used by the Platform.

Railway — Railway may provide hosting and application infrastructure used to operate Zanzo's backend services.

OpenAI and AI technology providers — AI technology providers may process task text, support questions or limited contextual information where AI-assisted task processing or support functionality is used.

Mapping and location providers — Mapping or device-platform providers may process location queries, addresses, coordinates and related technical information required to provide mapping or location features.

Providers are required to handle information in accordance with applicable contractual and data protection obligations.

Some providers may independently determine aspects of their processing and act as separate controllers. Their own privacy notices may apply.

The providers used by Zanzo may change as our technology and Services develop. Where a change materially affects how personal information is processed, this Privacy Policy will be updated as appropriate.

9. Other Circumstances in Which Information May Be Disclosed

We may disclose personal information:

  • where required by law;

  • in response to a valid court order or lawful authority request;

  • to regulators or law-enforcement bodies;

  • to protect the rights, safety or property of users, Zanzo or another person;

  • to investigate fraud, abuse, threats or serious safety concerns;

  • to legal advisers, accountants, auditors, insurers and other professional advisers;

  • to enforce our contracts and policies;

  • in connection with legal proceedings; or

  • as part of a merger, acquisition, restructuring, financing, insolvency, sale of assets or similar corporate transaction.

Where reasonably possible and legally permitted, we will seek to limit disclosure to information relevant to the request or purpose.

10. International Transfers

Zanzo is established in the United Kingdom, but some technology and service providers may process personal information in other countries.

This means personal information may be transferred to, stored in or accessed from a country whose data protection laws differ from those of the United Kingdom.

Where UK law restricts an international transfer, we take reasonable steps to ensure that a lawful transfer mechanism applies. Depending on the recipient and destination, this may include:

  • UK adequacy regulations;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved standard contractual clauses;

  • another legally recognised transfer mechanism; or

  • a permitted legal exception.

Where required, we also consider the circumstances of the transfer and the safeguards applied by the recipient.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, fraud-prevention, safety and dispute-resolution requirements.

The following periods are general retention anchors. A longer or shorter period may apply where justified by the circumstances or required by law.

11.1 Account information

Account and profile information is generally retained while the account remains active.

Following an account-deletion request, information that is not subject to a legitimate retention requirement will normally be deleted or anonymised as part of our deletion process.

11.2 Task records

Task requests, status histories, Start and End PIN verification records, assignment records and related operational information may generally be retained for up to six years after completion, cancellation or closure of the task, where reasonably required for contractual records, dispute resolution, fraud prevention, tax or legal claims.

Less significant operational information may be deleted or anonymised earlier.

11.3 Payment, transaction and accounting records

Payment, refund, earnings, payout, fee and transaction records may generally be retained for six years from the end of the financial year to which they relate, or longer where required by tax, accounting, regulatory, litigation or compliance obligations.

11.4 ZanCrew onboarding and right-to-work information

Unsuccessful or incomplete ZanCrew application information may be deleted or anonymised after a reasonable period unless retention is required for fraud prevention, reapplication, complaints, legal claims or compliance.

Where Zanzo is legally required to retain evidence of a right-to-work check, relevant records may be retained for the duration of the applicable working or engagement relationship and for two years afterwards, or for another period required by applicable law.

11.5 Support and complaint records

Support, complaint and dispute records may generally be retained for up to six years after the matter is closed where necessary to establish what occurred, respond to further enquiries or protect legal rights.

Routine support conversations with no continuing relevance may be deleted sooner.

11.6 Security and technical logs

Technical, diagnostic and security logs are generally retained for shorter operational periods appropriate to troubleshooting, reliability, security monitoring and abuse prevention, unless a particular record is needed for an active investigation or legal matter.

11.7 Backups

Information removed from active systems may remain temporarily in protected backups until the relevant backup is overwritten or deleted through the normal backup cycle.

Information retained only in backups will not be restored for ordinary use unless required for disaster recovery, security or legal purposes.

12. Account and Data Deletion

Users may request deletion of their Zanzo account:

We aim to complete valid account-deletion requests within 30 days after receiving and verifying the request, subject to information we are legally permitted or required to retain.

We may ask for information reasonably necessary to confirm the identity of the requester and prevent unauthorised deletion.

Deleting an account will ordinarily result in deletion or anonymisation of personal information associated with the account that Zanzo no longer needs to retain.

Some information may be retained after account deletion where necessary to:

  • comply with tax, accounting or legal obligations;

  • maintain transaction records;

  • prevent fraud or repeated abuse;

  • investigate safety incidents;

  • administer chargebacks or disputes;

  • establish, exercise or defend legal claims;

  • respond to regulators or law-enforcement bodies; or

  • protect Zanzo, users or third parties.

Information retained for these purposes will remain protected and will not be used for unrelated marketing merely because the account has been deleted.

Account deactivation, suspension or logout is not the same as account deletion.

Where a separate controller, such as a payment provider, holds information independently, the user may need to contact that organisation directly regarding its records.

13. Data Security

We use technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse or destruction.

Depending on the relevant system and information, these measures may include:

  • encrypted network communications;

  • controlled access to infrastructure;

  • authentication and authorisation controls;

  • secure handling of secrets and credentials;

  • database access controls;

  • environment separation;

  • monitoring and logging;

  • limited staff or contractor access;

  • verification controls;

  • backup and recovery procedures; and

  • security review of relevant service providers.

No internet-connected system can be guaranteed to be completely secure.

Users should protect their device, phone number, authentication codes and account access. Suspected unauthorised access should be reported promptly to hello@zanzo.ai.

14. Automated and AI-Assisted Processing

Zanzo uses or may use automated systems and AI-assisted technology to support parts of the Platform.

These systems may assist with:

  • speech-to-text processing;

  • structuring free-form requests;

  • improving request clarity;

  • suggesting task categories;

  • identifying missing information;

  • identifying potentially prohibited or unsupported requests;

  • distributing task opportunities based on location and eligibility;

  • providing customer-support assistance; and

  • detecting possible fraud, misuse or safety concerns.

Not every output is correct, and not every decision is made entirely by an automated system.

Manual review may be used for ZanCrew onboarding, task-policy concerns, account restrictions, safety matters, complaints, disputes and fraud investigations.

Where a decision is made solely through automated processing and produces legal or similarly significant effects, we will provide any information and safeguards required by applicable law.

15. Marketing and Service Communications

Zanzo may send communications necessary to provide and secure the Services, including:

  • OTP messages;

  • account and security alerts;

  • onboarding updates;

  • task offers;

  • task lifecycle updates;

  • payment and refund messages;

  • payout information; and

  • support communications.

These service communications may be necessary for the relevant feature or transaction.

Optional promotional or marketing communications will be sent only where permitted by law. Users may unsubscribe through the method included in the communication or by contacting us.

Disabling device notifications does not necessarily stop other communications that are necessary for account security, authentication or legal purposes.

16. Cookies and Website Technologies

The Zanzo website may use cookies or similar technologies that are necessary for security, functionality, session management and user preferences.

Where non-essential analytics, advertising or similar technologies are used and consent is legally required, we will provide an appropriate choice before activating them.

More detailed information may be provided through a separate Cookie Policy or website consent interface.

17. Children

The Zanzo Platform is intended only for people aged 18 or over.

People under 18 must not independently create an account, request tasks or apply to become ZanCrew.

We do not knowingly seek to collect personal information from children through the Platform.

Where we become aware that information has been collected from a person under 18 contrary to this Policy, we will take reasonable steps to investigate and delete or restrict the information where appropriate.

Concerns can be reported to hello@zanzo.ai.

18. Your Data Protection Rights

Depending on applicable law and the circumstances, individuals may have the right to:

  • request access to personal information;

  • request correction of inaccurate information;

  • request deletion of information;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • receive certain information in a portable format;

  • withdraw consent where processing relies on consent;

  • object to certain direct marketing;

  • complain about the use of personal information; and

  • obtain information about certain automated decisions.

These rights are subject to legal requirements, exemptions and limitations.

Requests should be sent to hello@zanzo.ai.

We may request information reasonably necessary to confirm identity and protect against unauthorised disclosure.

We will respond within the period required by applicable law.

19. Complaints to the Information Commissioner's Office

We encourage individuals to contact Zanzo first so that we can investigate and attempt to resolve the concern.

Individuals in the United Kingdom also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk

20. Third-Party Services and Links

The Platform may contain links to or integrations with websites, applications or services operated by third parties.

We do not control the independent privacy practices of third parties. Their own terms and privacy notices may apply when users interact with their services.

The existence of a link or integration does not mean Zanzo controls all processing undertaken by the relevant third party.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

  • the Platform;

  • our data practices;

  • our service providers;

  • applicable law;

  • regulatory guidance; or

  • our business operations.

The "Last updated" date will be revised when the Policy changes.

Where a change materially affects individuals and applicable law requires additional notice or consent, we will provide notice through an appropriate method, such as the app, website, email or account communication.

Users should review this Privacy Policy periodically.

22. Contact Us

Questions, concerns, complaints and privacy-rights requests may be directed to:

ZANZO AI LTD Company number: 16566421 Registered office: 66 Paul Street, London, England, EC2A 4NA Email: hello@zanzo.ai

Please provide sufficient information for us to understand and respond to the request.

Do not send passwords, one-time passcodes, complete payment-card information or other unnecessary security credentials by email.