Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how ZARETHIN, LLC collects, uses, protects, discloses, and manages personal information when customers visit, browse, place an order through, or otherwise interact with zarethin.com.

This policy applies to information collected through our website, checkout process, customer service communications, order processing activities, shipping and return procedures, and other services directly associated with purchases made through our online store.

By using zarethin.com, you acknowledge that your personal information may be processed as described in this Privacy Policy, subject to applicable privacy and consumer protection laws.

2. Website Platform & Store Infrastructure

This website is a self-hosted store built on WordPress and powered by WooCommerce. Our website infrastructure is used to display products, manage customer orders, process checkout information, provide order tracking, manage returns and refunds, and support customer service activities.

Because the store is self-hosted, ZARETHIN, LLC is responsible for managing the website environment and for taking reasonable technical and organizational measures to protect personal information processed through the website.

WordPress, WooCommerce, installed extensions, security tools, hosting infrastructure, and authorized service integrations may process limited information where necessary to provide website and ecommerce functionality.

3. Information We Collect

We collect only information that is reasonably necessary to operate our online store, fulfill orders, communicate with customers, protect transactions, and comply with applicable legal obligations.

Depending on how you use our website, information we collect may include your name, billing address, shipping address, email address, telephone number, order information, products purchased, order value, shipping method, return information, refund status, customer service communications, IP address, browser information, device information, and website activity.

We do not intentionally collect personal information that is unrelated to the operation of our ecommerce services.

4. Information Collected During Checkout

When you place an order through zarethin.com, we may collect information necessary to verify, fulfill, deliver, and support the order. This may include your name, contact information, billing address, delivery address, selected products, order amount, shipping information, and payment status.

Checkout information is used primarily to complete your transaction, communicate order updates, arrange delivery, identify potential transaction problems, process returns or refunds, and maintain appropriate order records.

Customers are responsible for providing accurate and current information during checkout so that we can process and deliver orders correctly.

5. Payment Processing Through Stripe & PayPal

Payments made through zarethin.com are processed by authorized third-party payment service providers, including Stripe and PayPal.

Depending on the payment method selected during checkout, payment information is transmitted directly through the secure systems of Stripe, PayPal, participating card networks, digital wallet providers, issuing banks, and other authorized financial institutions.

These payment providers process payment information in accordance with their own privacy policies, security standards, fraud-prevention procedures, and applicable financial regulations.

6. We Do Not Store Sensitive Payment Information

ZARETHIN, LLC does not store customers' full payment card numbers, CVV or CVC security codes, online banking credentials, PayPal passwords, digital wallet credentials, or other sensitive payment authentication information on our website servers.

Sensitive payment information entered during checkout is handled through the applicable third-party payment provider's secure payment environment and is not retained by ZARETHIN, LLC.

For transaction administration, we may receive limited non-sensitive information from the payment processor, such as transaction confirmation, payment status, payment method type, transaction reference number, refund status, or other information necessary to identify and manage an order. Such information does not provide us with access to customers' complete payment credentials.

7. Payment Security Measures

To help protect online payments, our checkout process uses secure payment technologies provided through Stripe, PayPal, and supported payment networks.

Payment security measures may include HTTPS encryption, SSL/TLS encrypted transmission, secure hosted payment elements, tokenization, PCI DSS-compliant payment processing, 3D Secure authentication where applicable, payment-provider fraud screening, transaction risk analysis, card-network security controls, and issuer authentication procedures.

Tokenization helps prevent sensitive payment credentials from being stored directly by our website by replacing payment information with secure transaction tokens or references processed by the payment provider.

Where supported, 3D Secure and similar authentication technologies may require customers to verify transactions through their card issuer or financial institution, providing an additional layer of protection against unauthorized transactions.

8. Website & Personal Data Security

We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, destruction, misuse, and other forms of unauthorized processing.

Security measures used in connection with our website may include HTTPS, SSL/TLS encryption, secured hosting environments, controlled administrative access, user permission management, account authentication, software security updates, firewall or web application firewall protection, malware monitoring, security logging, backup procedures, and restricted access to administrative systems.

Access to customer and order information is limited to authorized personnel and service providers who reasonably require such information to perform legitimate business functions.

9. WordPress & WooCommerce Security Practices

As a self-hosted WordPress and WooCommerce store, we take reasonable steps to maintain the security of the ecommerce environment.

These steps may include keeping WordPress, WooCommerce, themes, plugins, and security components updated; limiting administrative privileges; removing unnecessary or unsupported components; monitoring for suspicious activity; maintaining appropriate backups; and restricting access to sensitive administrative functions.

We also seek to use extensions and third-party integrations only where they serve a legitimate ecommerce, operational, security, analytics, or customer-support purpose.

10. How We Use Personal Information

We may use personal information to:

process and fulfill orders; confirm payments; prepare shipments; provide tracking information; communicate about orders; manage returns and refunds; respond to customer inquiries; detect fraud or suspicious activity; investigate payment or delivery disputes; maintain transaction records; improve website functionality; maintain security; prevent abuse; and comply with applicable legal obligations.

We do not use personal information for purposes that are materially incompatible with the reason for which the information was originally collected unless permitted by applicable law.

11. Order, Shipping & Delivery Information

To fulfill orders, we may provide necessary personal information to shipping carriers, postal operators, fulfillment providers, customs authorities, and local delivery partners.

Such information may include the recipient's name, shipping address, telephone number, email address where required, parcel details, tracking information, and other information reasonably necessary to deliver the shipment.

Third-party logistics providers receive only the information reasonably required to perform delivery, customs clearance, tracking, or related transportation services.

12. Returns, Refunds & Customer Service Records

When you request a return, refund, replacement, cancellation, or other customer service assistance, we may collect and retain information necessary to evaluate and resolve the request.

This information may include your order number, contact information, reason for the request, photographs of merchandise or packaging, return tracking information, shipping records, delivery confirmation, communications, inspection results, refund status, and related transaction information.

These records help us provide customer support, prevent fraud, verify legitimate refund requests, and maintain consistent order records.

13. Fraud Prevention, Payment Disputes & Chargebacks

We may process relevant transaction and order information to identify suspected fraud, unauthorized transactions, payment abuse, duplicate refund requests, suspicious order activity, or other security concerns.

If a payment dispute, chargeback, or fraud claim is initiated through Stripe, PayPal, a card issuer, bank, card network, or another authorized payment provider, ZARETHIN, LLC may provide information reasonably necessary to respond to the dispute.

Such information may include order confirmations, transaction references, customer communications, payment status, shipping records, tracking information, proof of delivery, return authorization records, return tracking, photographs, refund confirmations, and other evidence directly related to the disputed transaction.

This information is provided only for legitimate transaction verification, dispute resolution, fraud prevention, regulatory compliance, or protection of our legal rights.

14. Cookies & Similar Technologies

Our website may use cookies and similar technologies to provide essential ecommerce functions, maintain shopping carts, remember customer preferences, support account sessions, secure checkout activity, measure website performance, and improve website functionality.

Some cookies are necessary for WordPress, WooCommerce, cart, checkout, security, and account functions to operate correctly. Other cookies may be used for analytics, functionality, or preference management where permitted by applicable law.

Where legally required, non-essential cookies will be subject to appropriate consent or preference controls.

15. Server Logs, Device & Technical Information

When you access zarethin.com, our server and security systems may automatically collect technical information such as IP address, browser type, device type, operating system, access time, requested pages, referring information, error logs, and security-related events.

This information may be used to maintain website performance, diagnose technical problems, identify malicious activity, prevent unauthorized access, detect fraud, investigate security incidents, and protect the integrity of our ecommerce environment.

Technical logs are not used to obtain sensitive payment credentials.

16. Sharing Information With Service Providers

We may share limited personal information with trusted third-party service providers when reasonably necessary to operate our business and provide services requested by customers.

These providers may include Stripe, PayPal, hosting providers, shipping carriers, postal operators, ecommerce technology providers, WordPress or WooCommerce service integrations, fraud-prevention providers, security providers, analytics providers, customer-support tools, and professional advisers.

We do not sell customers' personal information to third parties in exchange for monetary compensation.

Service providers are expected to process information only for legitimate purposes associated with the services they provide and in accordance with applicable contractual, privacy, and security obligations.

17. Legal Disclosure & Compliance

We may disclose personal information when reasonably necessary to comply with applicable law, regulation, court order, subpoena, governmental request, customs requirement, tax obligation, fraud investigation, or other valid legal process.

We may also disclose information where reasonably necessary to protect the rights, property, security, customers, website, payment systems, or legitimate interests of ZARETHIN, LLC, provided that such processing is permitted by applicable law.

We do not voluntarily disclose customer information to unrelated third parties without a legitimate business or legal basis.

18. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including order fulfillment, customer service, return and refund processing, dispute resolution, fraud prevention, accounting, legal compliance, and protection of legitimate business interests.

Where no longer required for an active transaction, legal obligation, tax requirement, payment dispute, fraud investigation, or other legitimate purpose, personal information is generally scheduled for deletion, anonymization, or secure disposal.

Operational customer information that is not subject to a longer mandatory legal or accounting retention requirement is generally retained for no longer than approximately one year after it is no longer reasonably required for the original operational purpose.

Certain transaction, accounting, tax, legal, payment-provider, or fraud-prevention records may need to be retained for longer where required or permitted by applicable law.

19. International Data Transfers

Because zarethin.com provides worldwide shipping and uses international technology, payment, hosting, security, and logistics providers, personal information may be processed in countries other than the country in which the customer resides.

Where personal information is transferred internationally, we seek to use service providers and transfer mechanisms that provide appropriate safeguards as required by applicable privacy laws.

For personal information subject to European data protection law, appropriate safeguards may include contractual protections, Standard Contractual Clauses, adequacy decisions, or another lawful transfer mechanism where required.

20. European Economic Area, United Kingdom & GDPR Rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction applying substantially similar data protection requirements, the processing of your personal information may be subject to the General Data Protection Regulation (GDPR), UK GDPR, or applicable national privacy laws.

Where GDPR applies, we process personal information only where we have an appropriate legal basis. Depending on the circumstances, the legal basis may include:

Performance of a Contract: processing information necessary to accept payment, fulfill your order, arrange shipping, process returns, issue refunds, and provide requested customer service.

Legal Obligation: processing information necessary to comply with tax, accounting, consumer protection, regulatory, fraud-prevention, or other applicable legal requirements.

Legitimate Interests: processing reasonably necessary to operate and secure our store, detect fraud, maintain transaction records, resolve disputes, improve website performance, and protect our legal rights where those interests are not overridden by the fundamental rights of the individual.

Consent: where applicable, processing information based on consent, such as certain non-essential cookies or optional marketing communications. Where processing is based on consent, you may withdraw that consent at any time without affecting processing lawfully carried out before withdrawal.

Subject to applicable legal requirements and exemptions, European customers may have the right to request access to personal information, request correction, request deletion, restrict processing, object to certain processing, request data portability, withdraw consent, and lodge a complaint with an appropriate supervisory authority.

To exercise applicable GDPR rights, please contact us at service@zarethin.com. We may request reasonable information to verify your identity before processing a privacy request.

21. Your Privacy Choices & Data Requests

Depending on your location and applicable law, you may have rights concerning the personal information we maintain about you.

These rights may include requesting information about the personal data we hold, requesting correction of inaccurate information, requesting deletion where legally permitted, restricting certain processing activities, objecting to certain uses, or requesting a portable copy of qualifying information.

We may need to retain certain information even after a deletion request where retention is required for legal compliance, accounting, fraud prevention, transaction disputes, chargebacks, contractual obligations, or the establishment, exercise, or defense of legal claims.

Privacy requests may be submitted to service@zarethin.com. To protect customers from unauthorized disclosure, we may require reasonable identity or order verification before providing, correcting, or deleting personal information.

22. Privacy Policy Updates & Contact Information

We may update this Privacy Policy periodically to reflect changes to our website, WooCommerce configuration, security practices, payment providers, shipping services, legal requirements, or other operational practices.

Material changes will be reflected in the version of this Privacy Policy published on zarethin.com. Customers are encouraged to review this policy periodically to remain informed about how personal information is handled.

If you have questions about this Privacy Policy, personal information processed through our website, a GDPR request, payment-data handling, website security, or another privacy-related matter, please contact:

ZARETHIN, LLC
1901 N Central Expy, Ste 230, Richardson, TX 75080, US
Email: service@zarethin.com
Telephone: +1 (972) 474-8954
Website: zarethin.com

We will make reasonable efforts to review legitimate privacy requests and respond within the timeframe required by applicable law.