Privacy policy

Effective date: April 21, 2026
Last updated: April 21, 2026

This Privacy Policy explains how Zeckos ("we," "us," "our") collects, uses, discloses, and protects personal information when you interact with us through our website, our direct-to-consumer storefront, and the online marketplaces on which we sell (Amazon, Walmart, eBay, Lowe's, Bed Bath & Beyond, Temu, TikTok Shop, Shopify, Faire, and others).

Zeckos is committed to protecting your privacy. By using our website or purchasing from us, you consent to the practices described below.

1. Information we collect

We may collect the following categories of personal information:

• Identifiers: name, email address, phone number, postal address, account username
• Commercial information: orders, purchases, returns, payment method identifiers (we do not store full payment card numbers — our payment processors do)
• Internet / network activity: IP address, browser type, pages viewed, referring URL, cookie identifiers
• Geolocation: approximate location derived from IP address or postal code
• Marketing preferences: email subscription status, survey responses
• Inferences: product preferences, likely interests, lifetime value estimates

We collect this information directly from you (e.g., at checkout or when you contact us), automatically through cookies and analytics, and from the marketplaces where you place an order with us.

2. How we use your information

We use personal information to:

• Fulfill and deliver orders, process returns, and handle customer support
• Communicate about your orders, account, or service issues
• Improve our products, website, and customer experience
• Send marketing communications (only where permitted — you can unsubscribe at any time)
• Prevent fraud, enforce our terms, and comply with legal obligations
• Analyze website traffic and shopping trends in aggregate form

We will never sell or rent your personal information in the traditional sense. We do not share your data with third parties for their independent marketing.

3. How we share your information

We share personal information only with:

• Marketplace partners where you placed your order (Amazon, Walmart, Temu, etc.) — limited to fulfillment and reconciliation of that order
• Service providers (sub-processors) who host or process data on our behalf, including:
  • Amazon Web Services (AWS) — cloud infrastructure and storage
  • Oracle Cloud Infrastructure — compute for back-office integration
  • Microsoft Azure (Power BI, SharePoint) — internal analytics and document storage
  • Google Workspace — email and productivity
  • Payment processors (Stripe, Shopify Payments, PayPal, marketplace processors) — to process transactions
  • Shipping carriers (USPS, UPS, FedEx, etc.) — to deliver your order
• Government or legal authorities where required by law, subpoena, or to protect rights and safety

All service providers are contractually bound to protect your information and use it only for the services they provide to us.

4. Data retention

We retain personal information only as long as necessary for the purposes described above, or as required by law.

• Order and transaction records: retained for up to 7 years to comply with US tax and accounting requirements
• Marketing preferences: retained until you unsubscribe, then retained in a suppression list to honor your opt-out
• Marketplace-supplied personal data used only for internal analytics (e.g., Temu order-level data flowing into our internal reporting): personally identifying fields are purged from analytics systems within 30 days of order fulfillment, consistent with marketplace data protection requirements
• Website analytics: retained in aggregated/de-identified form

When personal information is no longer required, it is securely deleted or anonymized.

5. Security

We implement reasonable technical, administrative, and physical safeguards to protect personal information, including:

• Encryption at rest (AES-256 on AWS S3, DynamoDB, and managed-key storage on Microsoft and Oracle services)
• Encryption in transit (TLS 1.2 or higher) for all data exchanged with our systems and service providers
• Access control based on the principles of least privilege and need-to-know
• Logging and monitoring of access to systems containing personal information
• Prompt revocation of access when employees change roles or leave

No system is perfectly secure; while we work hard to protect your information, we cannot guarantee absolute security.

6. Your rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal information we hold about you
• Correction — correct inaccurate or incomplete information
• Deletion — request deletion of your information (subject to legal retention requirements)
• Portability — receive your information in a portable format
• Opt-out of sale or sharing — request that we not sell or share your personal information (we do not sell in the traditional sense, but California residents may still exercise this right)
• Opt-out of targeted advertising
• Withdraw consent — where processing is based on consent
• Non-discrimination — we will not deny you service or charge you different prices because you exercised your rights

There is no fee for your first request in any 12-month period.

To exercise any of these rights, contact us at privacy@zeckos.com or using the address below. We will respond within 45 days (or as required by applicable law). We may need to verify your identity before fulfilling the request.

7. California residents — CCPA/CPRA

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you additional rights:

• The right to know what personal information we collect, use, disclose, and (if applicable) sell or share
• The right to delete personal information we have collected
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information
• The right to limit the use and disclosure of sensitive personal information
• The right to non-discrimination for exercising any of these rights

We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. If that ever changes, we will update this policy and provide an opt-out link.

The categories of personal information we collect and disclose are listed in Sections 1 and 3.

To submit a CCPA request, email privacy@zeckos.com with the subject "California Privacy Request."

8. European and UK residents

If you reside in the European Economic Area, United Kingdom, or Switzerland, processing of your personal information is governed by the GDPR (EU) and UK GDPR. Our legal bases for processing include performance of a contract (to fulfill your order), legitimate interest (to operate and improve our business), consent (for marketing), and legal obligations.

Where your personal information is transferred outside the EEA / UK / Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses and the EU-US Data Privacy Framework.

You may lodge a complaint with your local data protection authority.

9. Children's privacy

Our website and products are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Cookies and tracking

We use cookies and similar technologies to operate the website, remember preferences, measure traffic, and improve our services. You can control cookies through your browser settings. Disabling cookies may limit site functionality.

We do not currently respond to Do Not Track signals.

11. Links to other websites

Our website may link to third-party websites we do not control. This policy does not apply to those sites. Please review their privacy policies before providing personal information.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or on the website. We encourage you to review this policy periodically.

13. Contact us

Zeckos
240 Old Sanford Oviedo Rd
Winter Springs, FL 32708
United States

Email (general): info@zeckos.com