Privacy Policy – Zatilo®

Effective Date: August 31, 2026

This Privacy Policy explains how Zatilo® collects, uses, discloses, stores, and otherwise processes personal information when you visit our website, purchase products, contact Customer Service, or otherwise interact with us.

Zatilo® is operated by Xiangyang Jinxinyuan Trading Co., Ltd.

For purposes of applicable privacy and data protection laws, Xiangyang Jinxinyuan Trading Co., Ltd. is responsible for the personal information described in this Privacy Policy to the extent required by applicable law.

1. Information We Collect

Depending on how you interact with Zatilo®, we may collect the following categories of information.

Information You Provide to Us

This may include:

• Name
• Billing address
• Shipping address
• Email address
• Telephone number
• Order information
• Products purchased
• Account information, where accounts are available
• Customer service communications
• Return and refund information
• Information you voluntarily provide when contacting us

Order and Transaction Information

When you make a purchase, we may process information relating to:

• Order number
• Products ordered
• Purchase amount
• Discounts
• Shipping method
• Delivery information
• Payment status
• Refunds
• Returns
• Exchanges
• Transaction records

Payment Information

Payments are generally processed through third-party payment service providers.

Depending on your chosen payment method, those providers may process information such as payment card details, billing information, transaction data, and payment authorization information.

Zatilo® does not generally need to directly store complete payment-card numbers.

Information Collected Automatically

When you access our website, certain information may be collected automatically by our website, ecommerce platform, hosting providers, security providers, or other service providers.

This may include:

• IP address
• Browser type
• Device type
• Operating system
• Website pages viewed
• Approximate location derived from technical information
• Referring website or source
• Date and time of access
• Shopping-cart activity
• Website interaction information
• Technical and security logs

2. How We Use Personal Information

We may use personal information where reasonably necessary to:

• Operate and maintain our website
• Process and fulfill orders
• Process payments
• Arrange shipping and delivery
• Provide order confirmations and service communications
• Provide tracking information
• Respond to customer questions
• Process returns, exchanges, and refunds
• Investigate damaged, incorrect, or missing orders
• Detect and prevent fraud, abuse, and unauthorized transactions
• Protect our website, customers, and systems
• Maintain business and transaction records
• Comply with legal, regulatory, tax, accounting, or other obligations
• Establish, exercise, or defend legal claims
• Improve website functionality and customer experience
• Understand website performance where applicable

3. Transactional Communications and Marketing

Zatilo® may contact customers when reasonably necessary in connection with an order or customer service matter.

These communications may include:

• Order confirmations
• Payment confirmations
• Shipping confirmations
• Tracking notifications
• Delivery-related information
• Return or refund communications
• Security or fraud-related notices
• Responses to customer service requests

These are service or transactional communications associated with your purchase or request.

Zatilo® does not currently send promotional marketing emails or promotional marketing SMS/text messages.

Providing an email address or telephone number during checkout does not constitute consent to receive promotional marketing messages.

If Zatilo® introduces promotional email or SMS marketing in the future, we will implement any consent, notice, and opt-out mechanisms required by applicable law before using personal information for those purposes.

4. Cookies and Similar Technologies

Our website and the services supporting it may use cookies and similar technologies.

These technologies may be used for purposes such as:

• Keeping the website functioning
• Maintaining shopping-cart contents
• Remembering basic website settings
• Enabling checkout
• Preventing fraud
• Maintaining security
• Supporting technical website performance
• Measuring website activity where enabled

Depending on the configuration of our ecommerce platform and service providers, additional analytics or similar technologies may also be used.

The specific technologies in use may change when our website, service providers, or technical configuration changes.

At the Effective Date of this Privacy Policy, Zatilo® does not provide an on-site cookie preference center with “Accept All,” “Reject Non-Essential,” or “Manage Preferences” controls.

Zatilo® also does not currently provide a separate website-based opt-out control or an automated Global Privacy Control (“GPC”) response mechanism.

You may be able to manage some cookies through your browser settings. Disabling cookies may affect certain website functions.

Where applicable law requires prior consent, an opt-out mechanism, or another specific privacy control for particular technologies, Zatilo® will take steps to implement the required mechanism.

5. How We Disclose Personal Information

We may disclose personal information to service providers and other parties where reasonably necessary to operate our business and provide our services.

These may include:

Ecommerce, Hosting, and Technology Providers

We may use service providers that host, operate, secure, or support our online store and related technical systems.

Payment Service Providers

Payment providers may receive information necessary to process and verify payments.

Fulfillment, Shipping, and Logistics Providers

We may provide necessary order information to fulfillment companies, shipping carriers, logistics providers, customs-related service providers, and local delivery partners.

This information may include:

• Customer name
• Shipping address
• Telephone number
• Email address
• Order number
• Products ordered
• Delivery instructions where applicable

Fraud Prevention and Security Providers

Information may be processed by providers that assist with payment security, fraud prevention, account protection, and website security.

Professional and Legal Advisers

We may disclose information to accountants, auditors, lawyers, insurers, consultants, or other professional advisers where reasonably necessary.

Legal Requirements

We may disclose personal information where required by applicable law, court order, regulation, legal process, governmental request, or where reasonably necessary to protect legal rights or safety.

Analytics or Advertising Providers

Where such services are enabled, certain technical or website interaction information may be processed by analytics or advertising-related providers.

We do not state that any particular advertising or analytics provider is currently installed unless that provider is actually configured on our website.

Zatilo® does not sell personal information in exchange for money.

6. International Processing and Transfers

Zatilo® is operated by a company registered in China and serves customers in multiple countries and regions.

As a result, personal information may be processed or stored in China, the customer's country or region, or other locations where our service providers operate.

Privacy and data protection laws may differ between countries.

Where applicable law requires specific safeguards for international data transfers, we will take reasonable steps to use the safeguards required by that law.

7. Legal Bases Where Required

Where laws such as the GDPR or UK GDPR apply, our legal bases for processing may include:

Performance of a contract:
For processing necessary to accept, process, fulfill, deliver, return, or refund an order.

Legal obligations:
For recordkeeping, tax, accounting, regulatory, fraud-prevention, or other obligations imposed by law.

Legitimate interests:
Where appropriate for operating and securing our website, preventing fraud, improving services, responding to customers, and protecting our business, provided those interests are not overridden by applicable individual rights.

Consent:
Where applicable law specifically requires consent for a particular processing activity.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal and business requirements.

Retention may depend on the type of information and the reason it is processed.

Order and Transaction Records

We may retain order and transaction information for as long as reasonably necessary to:

• Fulfill purchases
• Process returns and refunds
• Provide customer service
• Maintain accounting and tax records
• Resolve disputes
• Detect fraud
• Meet legal requirements

Customer Service Records

Customer service communications may be retained for the time reasonably necessary to resolve the matter, maintain appropriate business records, and address future questions or disputes relating to the request.

Account Information

Where customer accounts are available, account information may be retained while an account remains active and for a reasonable period afterward where necessary for legal, security, fraud-prevention, or recordkeeping purposes.

Technical and Security Information

Technical logs and security information may be retained for periods reasonably necessary to maintain website security, investigate technical issues, detect fraud, and protect our services.

Privacy Request Records

Records relating to privacy requests may be retained as required or permitted by applicable law to demonstrate that the request was handled appropriately.

When information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it subject to applicable legal obligations.

9. Your Privacy Rights

Depending on your place of residence and the laws that apply to you, you may have rights concerning your personal information.

These rights may include the right to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of certain information
• Request information about categories of information collected or disclosed
• Request a copy or portability of certain information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Exercise applicable rights relating to certain data-sharing or targeted-advertising activities
• Appeal certain privacy-request decisions where applicable law provides such a right
• Lodge a complaint with an appropriate data-protection authority where applicable

These rights are subject to applicable legal conditions, limitations, and exemptions.

10. How to Exercise Your Rights

To submit a privacy request, contact us at:

Email: service@zatilo.com

Please explain the type of request you are making and provide enough information for us to locate the relevant records.

We may request information reasonably necessary to verify your identity and protect personal information from unauthorized disclosure.

We will respond within the period required by applicable law. Where the law permits an extension, we may extend the response period and will provide any notice required by applicable law.

If applicable law gives you a right to appeal a privacy decision, you may submit an appeal using the same email address and clearly state that your request is an appeal.

11. Non-Discrimination

Where prohibited by applicable law, we will not unlawfully discriminate against you for exercising a privacy right.

12. Data Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, network, transmission method, or storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their account credentials and for notifying us if they believe their account or information has been compromised.

13. Children's Privacy

Our website is intended for general retail customers and is not specifically directed to children.

We do not knowingly seek to collect personal information from children in circumstances where parental or guardian authorization is required by applicable law.

If you believe a child has provided personal information inappropriately, please contact us at service@zatilo.com.

14. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security, or content of independent third-party websites. We encourage customers to review the privacy policies of those services before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, website functions, service providers, legal requirements, or data-processing practices change.

Any revised policy will be posted on our website with an updated effective or revision date where appropriate.

Changes to this Privacy Policy do not replace or override any consent that applicable law requires us to obtain separately.

16. Contact Us

For privacy questions or requests:

Xiangyang Jinxinyuan Trading Co., Ltd.

Registered Address:
188 Jiaotong Road, Chenghe Town, Xiangzhou District, Xiangyang City, Hubei Province, China 441113

Email: service@zatilo.com
Contact Phone Number: +1 (352) 696-0273
Customer Service Hours: Monday–Friday, 9:00 AM–6:00 PM PDT