Privacy Policy

At ZenNatu Global LLC we respect your privacy. This policy explains what personal information we collect, how we use it, who we share it with and what rights you have. It applies to this website, the contact form and any orders you place with us.

1. Data controller

ZenNatu Global LLC, a New Mexico, United States limited liability company (entity number 0008090031), with a mailing address at 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. For any privacy matter: hola@zennatu.us.

2. Information we collect

Information you give us

• Contact form: name, email address, the content of your message and your acceptance of this policy.
• Orders: name, shipping and billing address, email, phone number and the products purchased.
• Payments: processed by third-party payment providers. We do not receive or store your full card number.
• Customer support: information you share when you write to us, including photos of damaged products for a return.

Information collected automatically

• Server logs: our hosting provider logs technical data such as IP address, browser type, pages visited, date and time, for security and operational purposes.
• Third-party resources: to display the site we load fonts from Google Fonts and animation libraries from cdnjs (Cloudflare) and unpkg. When the page loads, your browser connects to those services, which receive your IP address and technical browser data.
• Cookies: this site currently does not set analytics or advertising cookies. See our Cookie Policy.

We do not intentionally collect sensitive data (such as health information, ethnic origin or biometric data). Please do not include it in your messages.

3. How we use your information

• To answer your messages and requests.
• To process, ship and follow up on your orders, returns and refunds.
• To provide customer support and tell you about important changes to an order or to our policies.
• To prevent fraud and protect the security of the site and our customers.
• To comply with legal, accounting and tax obligations.
• To send you news or promotions only if you consent. You can unsubscribe at any time using the link in every email.

4. Legal bases (visitors from the EEA and the United Kingdom)

We process your data based on: your consent (contact form and marketing), the performance of a contract (orders), our legitimate interests (security, fraud prevention and service improvement) and compliance with legal obligations.

5. Who we share your information with

We do not sell your personal information or share it for cross-context behavioral advertising. We only share it with:

• Service providers that help us operate: hosting, email, payment processors, carriers and customs brokers, who may only use it to provide their services to us.
• The technical resource providers mentioned in section 2 (Google Fonts, cdnjs/Cloudflare, unpkg).
• Authorities, when required by law or to protect our rights, people's safety or prevent fraud.
• A buyer or successor in the event of a merger, acquisition or sale of assets, who must honor this policy.

6. How long we keep it

• Contact form messages: up to 24 months from the last contact, unless they become an order.
• Order and billing data: as long as required by applicable tax and accounting laws (generally up to 7 years).
• Server logs: according to our hosting provider's retention periods.

When these periods end, we delete or anonymize the information.

7. Security

We apply reasonable technical and organizational measures to protect your information, such as encrypted connections (HTTPS), restricted access to data and protection of server files. No system is 100% secure; if a breach affecting your data occurs, we will notify you as required by law, including the New Mexico Data Breach Notification Act.

8. Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy (access and portability);
• correct inaccurate data;
• request deletion of your data, except data we must keep by law;
• opt out of the sale of your data or its use for targeted advertising (we do neither);
• withdraw your consent at any time, without affecting prior processing;
• not be discriminated against for exercising your rights;
• lodge a complaint with your data protection authority (EEA and UK).

This includes the rights granted by, among others, the California Consumer Privacy Act (CCPA/CPRA) and other U.S. state privacy laws. To exercise them, email hola@zennatu.us with the subject "Privacy." We will verify your identity before responding and will reply within the legal deadlines (generally 45 days in the U.S. and one month in the EEA). You may act through an authorized agent.

Global Privacy Control (GPC): if your browser sends this signal, we treat it as a request to opt out of sale and targeted advertising.

9. Children

The site and our products are intended for adults. We do not knowingly collect information from children under 13 (or under 16 in the EEA). If you believe a child has sent us data, contact us and we will delete it.

10. International transfers

We are a U.S. company and your information is processed and stored in the United States, whose data protection laws may differ from those of your country. By using the site from outside the U.S., your information will be transferred there, and we will protect it as described in this policy.

11. Marketing emails

If you subscribe to our communications, we will comply with the CAN-SPAM Act and equivalent rules: every email will include our mailing address and an unsubscribe link, which we will honor within 10 business days.

12. Changes to this policy

We may update this policy. We will post the new version on this page with its date, and if the changes are significant we will notify you by reasonable means.