Privacy Policy
Last Updated: June 16, 2025

1. Who We Are

Zhenleaf is a cross-border e-commerce platform dedicated to the sale and promotion of premium tea products. We primarily serve customers in Asia-Pacific, the United States, and Europe.

Our website address is: https://zhenleaf.com

2. Compliance with GDPR & CCPA

As a global online business operating in the EU and serving users in California, we are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2.1 Your Rights under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request that we correct any inaccurate or incomplete information.
Right to Erasure (“Right to be Forgotten”): Under certain conditions, you may request the deletion of your personal data.
Right to Restriction of Processing: You may request that we limit how we process your data, for example, during a dispute.
Right to Data Portability: You may request that we provide your data in a structured, commonly used format so it can be transferred to another service.
Right to Object: You may object to our processing of your data based on legitimate interests, including direct marketing.
Right to Withdraw Consent: If we rely on your consent to process your data, you may withdraw that consent at any time.

2.2 Your Rights under CCPA
If you are a resident of California, you have the following rights:

Right to Know: You may request details about the categories of personal information we collect, use, or disclose.
Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
Right to Opt-Out of Sale: You may opt out of the sale of your personal information to third parties.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

3. What Information Do We Collect?

3.1 Information You Provide Directly
Comments: When you leave a comment on our site, we collect the data shown in the comment form, as well as your IP address and browser user agent string to help detect spam.
Media Uploads: If you upload images to the website, please avoid uploading files containing embedded location data (e.g., EXIF GPS data). Visitors may download and extract this data from images.
Account Registration: If you register an account, we collect your name, email address, and other necessary profile information.
Order Information: When you make a purchase, we collect your shipping address, phone number, payment details, etc., to fulfill orders and manage logistics.
3.2 Automatically Collected Information
Device and Browser Information: Including IP address, browser type, operating system, visit times, and page views.
Cookies and Tracking Technologies: We use cookies, local storage, and other tracking technologies to improve your browsing experience, analyze traffic, and deliver personalized content.

4. How We Use Your Information

We use your personal data only for the following purposes:

To provide, maintain, and improve our services;
To respond to your inquiries or support requests;
To process orders, logistics, and customer service;
To send marketing communications (only with your prior consent);
To enhance website functionality and user experience;
To prevent fraud and ensure security;
To comply with legal obligations.

5. How We Protect Your Information

We implement appropriate technical, physical, and organizational measures to protect your personal data from unauthorized access, misuse, alteration, or destruction. All sensitive information, such as payment details, is transmitted securely using encryption.

6. Use of Cookies

Functional Cookies: These cookies remember your name, email, and website preferences when leaving comments, or save login information and screen display settings. Functional cookies last up to one year.
Session Cookies: These are temporary cookies set when you log in to verify your browser accepts cookies. They are deleted when you close your browser.
Third-Party Cookies: We may use tools like Google Analytics to analyze traffic. Please review their privacy policies for more details.
You may adjust your browser settings to block or delete cookies at any time, though some features of our website may become unavailable.

7. Embedded Content from Other Websites

Articles on this site may include embedded content (such as videos, images, articles, etc.) from third-party websites. Such embedded content behaves exactly as if you had visited the third-party site directly.

These third-party websites may collect data about you, use cookies, embed additional tracking scripts, and monitor your interaction with the embedded content — including if you are logged into their services.

7.1 Gravatar Avatar Service
When you leave a comment, an anonymized version of your email address (called a hash) may be sent to the Gravatar service to check whether you are using it. You can view Gravatar’s privacy policy here: https://automattic.com/privacy/

Once your comment is approved, your Gravatar profile picture will be publicly visible alongside your comment.

8. With Whom We Share Your Data

We do not sell, rent, or trade your personal information to third parties unless:

You give us permission to do so;
It is necessary to fulfill an order, logistics, or payment processing;
Required by law or government authorities;
Necessary to protect Zhenleaf, our users, or the public interest.

9. How Long We Retain Your Data

Comments and Metadata: Comments and related metadata are retained indefinitely to allow us to automatically approve follow-up comments without moderation.
User Account Data: Registered users may view, edit, or delete their own personal information at any time. Administrators also have access to edit or view this data.
Order Records: For legal, tax, and accounting purposes, we retain order records for at least five years.
CCPA Deletion Requests: We will respond to deletion requests within 30 days.

10. Cross-Border Data Transfers

Due to our international operations, your personal data may be transferred to and processed in countries outside your country of residence, including China, the U.S., and the EU. We ensure that all such transfers comply with applicable data protection laws and that your data remains secure.

11. Children’s Privacy
This website is not intended for children under the age of 16, and we do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from a child, we will promptly delete it.

12. How to Exercise Your Rights

For GDPR Users
Please contact us at support@zhenleaf.com and specify the type of request (e.g., access, deletion).

For CCPA Users
You may submit a request via:Online Form: https://zhenleaf.com/privacy-ccpa
Email: ccpa@zhenleaf.com (please include valid identification)

13. Contact Us

📧 Email: support@zhenleaf.com

🌐 Website: https://zhenleaf.com

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in laws, technology, or our business practices. Any updates will be posted on this page and the “Last Updated” date will be revised accordingly.

Thank you for choosing Zhenleaf! We are committed to protecting your data with transparency and security.