🔒 Privacy Policy — Dr. Zitacne

 

Last updated: June 8, 2025
Effective date: June 19, 2010

This Privacy Policy describes how Dr. Zitacne collects, uses, shares, and protects personal information in connection with our website and services. Applicable globally; primary market: United States (California).

1. Information We Collect

Information you provide: name, shipping/billing address, email, phone (optional), payment info (processed by third-party providers), order history, customer messages, reviews, and marketing preferences.
Automatically collected: IP address, device/browser data, page views, cookies, and analytics data.
Third-party sources: social login data, analytics providers, advertising platforms.

2. How We Use Information

We use personal data to: process and fulfill orders; communicate order updates and support; improve the Site; personalize content; send marketing (with consent); detect and prevent fraud; comply with legal obligations.

3. Legal Bases (where required)

Contract performance (orders), legitimate interests (fraud prevention, service improvement), and consent (marketing).

4. Sharing & Disclosure

We do not sell personal data. We share information with: payment processors (Stripe, PayPal), fulfillment and shipping partners, trusted service providers (email delivery, analytics, advertising), and law enforcement/regulators when required by law.

5. Cookies & Tracking Technologies

We use cookies and similar technologies for cart/session functionality, analytics, and advertising. You may manage cookie preferences via your browser or our cookie banner.

6. International Transfers & Safeguards

Data may be processed or stored outside your country (e.g., in the U.S.). Where required, we implement safeguards such as contractual protections.

7. Data Retention

Order and transactional records are retained for business and legal purposes (generally 5–7 years). Marketing preferences and non-essential data are retained while consent is active.

8. Your Rights (General / California / EU)

Depending on jurisdiction, you may have rights including: access, rectification, deletion, portability, objection, and to opt-out of sale (we do not sell data). California residents may submit CCPA/CPRA requests to wenyixiaoma@gmail.com with “CCPA Request” in the subject. EU/UK residents may submit GDPR requests similarly.

9. Security

We implement industry-standard measures (SSL/TLS, access controls). No system is 100% secure; in the event of a breach, we will follow applicable notification laws.

10. Children

Our services are not directed to children under 16. We do not knowingly collect children’s data; if discovered, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy; material changes will be posted with an updated date and, where appropriate, account holders will be notified by email.

12. Contact & Data Requests

For privacy inquiries or rights requests: wenyixiaoma@gmail.com