Zen Medica Privacy Policy

Effective Date: October 16, 2026

Last Updated: October 16, 2026

Zen Medica (“we,” “us,” or “our”) is an online store operated by a sole proprietor based in New Jersey, United States. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, purchase products, contact us, or subscribe to our marketing emails.

Because we sell health and wellness products, some information we hold, such as your order history, may reveal information about your health. How we handle that information, and the additional rights available to residents of Washington, Nevada, and other states, is described in our separate Consumer Health Data Privacy Policy, which forms part of this Privacy Policy.

For questions or requests, contact us at zenmedicanyc@gmail.com.

1. Information We Collect

Information you provide

When you place an order, contact us, or subscribe to marketing emails, we collect:

Your name and email address.
Billing and shipping addresses.
Order details and purchase history, including the products you buy.
Information you submit through our contact form.
Your marketing email subscription status and preferences.

Please do not include details about your medical conditions or treatment in contact form messages. If you do, we use them only to respond to your message.

Payment information

Payments are processed by Square. Square collects your payment card details and billing information to authorize and complete your transaction. We do not receive or store your full card number. We receive confirmation of payment, transaction status, and related order details.

Technical information

Our website is hosted by Hostinger and runs on WordPress and WooCommerce. These services process technical information needed to operate and secure the website, including IP addresses, browser and device information, access timestamps, and server and security logs.

Cookies

Our website uses cookies and similar technologies for these purposes:

Shopping cart and checkout: keeping items in your cart and completing your order.
Security and fraud prevention: protecting the website and payments, including cookies set by Square during checkout.
Order attribution: WooCommerce Order Attribution records how you arrived at our website, such as the referring site, campaign parameters, and session details, and links that information to your order. This information is stored on our website and is not sent to advertising networks.

We do not use Google Analytics, Google Tag Manager, Google Ads conversion tracking, Meta Pixel, or other advertising or cross-site tracking technologies.

You can manage or delete cookies through your browser settings. Blocking cookies may prevent the cart or checkout from working.

2. How We Use Personal Information

We use personal information to:

Process payments and fulfill orders.
Arrange shipping and send order-related communications.
Respond to questions and customer service requests.
Send marketing emails to people who subscribe.
Understand which referral sources and campaigns lead to orders, using WooCommerce Order Attribution.
Maintain, administer, and secure the website.
Detect and prevent fraud and misuse.
Keep business, tax, and accounting records.
Comply with legal obligations and protect our rights.

We do not use your purchase history to build health profiles, and we do not use it to target marketing emails unless you have given consent as described in our Consumer Health Data Privacy Policy.

We do not sell personal information, and we do not share it for targeted or cross-context behavioral advertising.

We disclose personal information only to the service providers below, and only as needed for them to perform services for us:

Recipient	What they receive	Why
Square	Payment card details, billing information, transaction amount	Processing payments and preventing payment fraud
Hostinger	Website data and technical information	Hosting and securing the website
Shipping carriers and shipping label services	Name, shipping address, package details	Delivering your order
Sender.net	Email address, name, subscription preferences	Sending marketing emails and handling unsubscribes
WordPress, WooCommerce, and website plugins	Data needed for cart, checkout, attribution, and security	Operating the store
Website developer and maintenance contractors	Access to website systems as needed	Building, maintaining, and fixing the website

We do not share your order history or the products you buy with Sender.net or any marketing service unless you have consented.

We may also disclose information:

For legal reasons: to comply with law, respond to valid legal process, prevent fraud, protect safety, or establish or defend legal claims.
In a business transfer: as part of a sale, restructuring, or transfer of the business. Any successor must handle your information consistently with this policy and applicable law.

Square may also process some payment data for its own fraud-prevention and compliance purposes under its own privacy notice.

4. Marketing Emails

If you subscribe, we send marketing emails through Sender.net about products, promotions, and store updates.

Email tracking. Our marketing emails contain small tracking images and tracked links. These tell us whether an email was opened, which links were clicked, and basic device and location information derived from your IP address. We use this to measure how our emails perform. You can limit open tracking by turning off automatic image loading in your email app.

Unsubscribing. Click the unsubscribe link at the bottom of any marketing email, or email zenmedicanyc@gmail.com. We process unsubscribe requests within 10 business days. We keep your email address on a suppression list so we can honor your choice.

Unsubscribing does not stop transactional messages such as order confirmations and shipping updates.

5. Do Not Track and Global Privacy Control

Our website does not track visitors across other websites, so there is no cross-site tracking for a Do Not Track or Global Privacy Control signal to turn off. We do not change our practices in response to these signals. If we later use technologies that track visitors across websites or for advertising, we will honor Global Privacy Control signals as an opt-out where required by law and will update this policy first.

6. Data Retention, Security, and Location

Retention. We keep personal information only as long as needed for the purposes in this policy:

Order and transaction records: as long as required for tax and accounting purposes, generally up to 7 years.
Contact form messages: until the matter is resolved, and no longer than 2 years.
Marketing subscriber data: until you unsubscribe; after that, only your email address on a suppression list.
Server and security logs: as set by our hosting provider, typically a few months.

When information is no longer needed, we delete it or make it unidentifiable.

Security. We use reasonable safeguards, including encrypted (HTTPS) connections, access controls, and payment processing by Square so that we do not handle full card numbers. No system is completely secure, and we cannot guarantee absolute security.

Location of processing. Some of our service providers, including Hostinger and Sender.net, are based outside the United States, and website maintenance may be performed from outside the United States. Your information may therefore be processed in other countries, where privacy laws may differ from those in your state.

7. Your Privacy Rights

Depending on where you live, you may have the right to:

Confirm whether we process your personal information and access it.
Correct inaccurate information.
Delete your information.
Obtain a copy of your information in a portable format.
Opt out of marketing emails.

Residents of Washington, Nevada, and certain other states have additional rights over health-related information, described in our Consumer Health Data Privacy Policy.

How to make a request. Email zenmedicanyc@gmail.com with the subject line “Privacy Request” and describe what you are asking for. We will verify your identity, usually by confirming details of a past order or by contacting the email address on file. An authorized agent may submit a request on your behalf with your signed permission.

Response time. We respond within 45 days. If we need more time, we will tell you why and may extend by another 45 days where the law allows.

Appeals. If we decline your request, you may appeal by replying to our decision with the subject line “Privacy Appeal.” We will respond to appeals within 45 days. If you disagree with our appeal decision, you may contact your state Attorney General.

We will not discriminate against you for exercising your privacy rights. Some information may be retained where the law requires it, such as transaction and tax records.

8. Children and Age Requirements

Our website is intended for adults. You must be 18 or older to purchase from us. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email zenmedicanyc@gmail.com and we will delete it.

9. Third-Party Websites

Our website may link to other websites. Their privacy practices are their own, and we encourage you to read their policies.

10. Changes to This Policy

We will post any changes on this page and update the “Last Updated” date. Before we begin using new tracking, analytics, or advertising technologies, we will update this policy. If we make a material change to how we use or share health-related information, we will obtain your consent where required by law.

11. Contact Us

Zen Medica New Jersey, United States