Security & Privacy Policy | ZaroMailer

Security & Privacy Policy

At Zaro Mailer, we take your privacy and data security seriously. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our custom mailer services.

1. Information We Collect

We collect information that you provide directly to us when using our services:

Personal Information

  • Name, email address, phone number
  • Company name and business information
  • Billing and shipping addresses
  • Payment information (processed securely via Stripe and PayPal)

Design and Order Information

  • Custom designs, logos, and artwork you upload
  • Product selections and order history
  • Design preferences and saved templates

Usage Information

  • Browser type, IP address, and device information
  • Pages visited and features used
  • Time and date of visits

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Process and fulfill your custom mailer orders
  • Communicate with you about your orders, designs, and account
  • Provide customer support and respond to inquiries
  • Improve our products, services, and website functionality
  • Send marketing communications (with your consent)
  • Detect and prevent fraud and security threats
  • Comply with legal obligations and enforce our terms

3. Data Security

We implement industry-standard security measures to protect your personal information:

Encryption

All data transmitted between your browser and our servers is encrypted using SSL/TLS protocols.

Secure Payment Processing

Payment information is processed through Stripe and PayPal, both PCI-DSS compliant payment processors. We never store your full credit card details.

Data Protection

Your designs and personal data are stored on secure servers with regular backups and access controls.

4. Information Sharing

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party vendors who help us operate our business (payment processing, shipping carriers, printing services)
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Your Rights and Choices

You have the following rights regarding your personal information:

Access and Correction

You can access and update your account information at any time through your account settings.

Data Deletion

You may request deletion of your personal data, subject to legal retention requirements.

Marketing Communications

You can opt out of marketing emails at any time by clicking the unsubscribe link or updating your preferences.

Cookie Management

You can control cookies through your browser settings, though some features may not work properly if cookies are disabled.

6. Cookies and Tracking

We use cookies and similar technologies to improve your experience, analyze usage, and deliver personalized content. Types of cookies we use include:

  • Essential Cookies: Required for the website to function properly (for example, session management, shopping cart, and login authentication)
  • Analytics Cookies: Help us understand how visitors use our site. We use Google Analytics (GA4) to collect anonymized usage data such as pages visited, session duration, and traffic sources. Google Analytics may set cookies including _ga, _ga_*, and _gid with retention periods of up to 2 years.
  • Preference Cookies: Remember your settings and preferences
  • Marketing Cookies: Track visits across websites for advertising purposes. These may be set by third-party advertising partners.

Managing Cookies: You can control or delete cookies through your browser settings. Most browsers allow you to block or delete cookies via their privacy or settings menu. Please note that disabling essential cookies may prevent certain features, such as checkout, from functioning properly. For more information on managing cookies, visit allaboutcookies.org.

7. Your Rights Under CCPA & GDPR

Depending on your location, you may have additional rights under the California Consumer Privacy Act (CCPA) or the EU General Data Protection Regulation (GDPR).

California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose about you
  • Request deletion of your personal information
  • Opt out of the sale of your personal information — we do not sell your personal information
  • Not be discriminated against for exercising your CCPA rights

To submit a CCPA request, email us at [email protected] with the subject line “CCPA Request.” We will verify your identity and respond within 45 days.

EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have the right to:

  • Access, correct, or delete your personal data
  • Restrict or object to the processing of your personal data
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your local data protection authority

Our legal basis for processing personal data includes performance of a contract (order fulfillment), legitimate interest (improving our services), and consent (marketing communications).

8. Children’s Privacy

Our services are not intended for children under 13 years of age (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in the United States, where our payment and shipping service providers operate, and in China, where Zaro Mailer’s business operations and internal systems are based. For transfers outside your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized mechanisms, to ensure your data is protected in accordance with applicable data protection laws.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records and transaction data are retained for a minimum of 7 years for tax and accounting purposes. Design files associated with your account are retained until you request deletion.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending you an email.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your data, please contact us:

Email: [email protected]

Data Rights Requests: Email us with the subject line “Privacy Request” and we will respond within 30 days (45 days for CCPA requests).