Privacy Policy

Last Updated: December 16, 2025

At GSOIAX & Zitahli, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make purchases from our online store.

Information We Collect

Personal Information You Provide

When you visit our store or make a purchase, we may collect the following personal information:

• Contact Information: Name, email address, phone number, shipping address, billing address
• Payment Information: Credit card details, billing information (processed securely through our payment processors)
• Account Information: Username, password, purchase history, preferences
• Communication Data: Your messages, reviews, feedback, and customer service inquiries

Information Automatically Collected

When you browse our website, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience
• Location Data: General geographic location based on IP address

How We Use Your Information

We use the collected information for the following purposes:

Order Processing and Fulfillment

• Process and complete your orders
• Send order confirmations and shipping notifications
• Handle returns, exchanges, and refunds
• Provide customer support

Communication

• Respond to your inquiries and requests
• Send important updates about your orders
• Provide customer service and support
• Send marketing communications (with your consent)

Website Improvement

• Analyze website usage and trends
• Improve our products and services
• Personalize your shopping experience
• Detect and prevent fraud

Legal Compliance

• Comply with legal obligations
• Enforce our terms and conditions
• Protect our rights and property
• Prevent fraudulent activities

How We Share Your Information

We do not sell your personal information to third parties. We may share your information with:

Service Providers

• Payment Processors: To securely process your payments (e.g., Shopify Payments, PayPal, Stripe)
• Shipping Partners: To deliver your orders (e.g., USPS, FedEx, UPS, DHL)
• Email Services: To send order confirmations and marketing emails
• Analytics Providers: To understand website usage (e.g., Google Analytics)

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

Business Transfers

If our business is sold or merged with another company, your information may be transferred to the new owners.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Keep you logged into your account
• Analyze website traffic and user behavior
• Provide personalized content and advertisements
• Improve website functionality

Types of Cookies We Use

• Essential Cookies: Required for website functionality
• Performance Cookies: Help us understand how visitors use our site
• Functional Cookies: Remember your preferences
• Marketing Cookies: Track your browsing to show relevant ads

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our website.

Data Security

We implement industry-standard security measures to protect your personal information:

• SSL Encryption: All data transmitted between your browser and our website is encrypted
• Secure Payment Processing: We use PCI-DSS compliant payment processors
• Access Controls: Limited employee access to personal information
• Regular Security Audits: We regularly review and update our security practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

Access and Portability

• Request a copy of your personal information
• Receive your data in a portable format

Correction and Update

• Update or correct inaccurate information
• Complete incomplete information

Deletion

• Request deletion of your personal information
• Subject to legal retention requirements

Opt-Out

• Unsubscribe from marketing emails
• Opt out of targeted advertising
• Disable cookies through browser settings

Object and Restrict

• Object to certain data processing activities
• Request restriction of processing

To exercise these rights, please contact us using the information provided below.

Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

When your information is no longer needed, we will securely delete or anonymize it.

Children's Privacy

Our website and services are not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Marketing Communications

With your consent, we may send you:

• Promotional emails about new products and special offers
• Newsletter updates
• Personalized product recommendations

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Contacting our customer service team
• Updating your account preferences

Please note that you will still receive transactional emails related to your orders.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification for significant changes

We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [Your privacy contact email]
• Response Time: Within 48 hours
• Mailing Address: [Your business address]

GDPR Compliance (For EU Customers)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

CCPA Compliance (For California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information.

Thank you for trusting GSOIAX & Zitahli with your personal information. Your privacy and security are our priority.