ZATIK INC.

WEBSITE PRIVACY POLICY

Effective Date: July 7, 2026

1. INTRODUCTION

ZATIK, INC., a California Corporation doing business as ZATIK ("Company," "We," "Us," or "Our"), respects your privacy and is committed to protecting it through compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit https://www.zatiknatural.com and our online Shopify store (together, the "Site"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

On this Site, including our Shopify-hosted storefront and checkout;

In email, text, and other electronic messages between you and this Site;

Through any mobile or desktop applications you may download from this Site; and

Through our social media and advertising activities on third-party platforms, including Meta (Facebook/Instagram), Google, and TikTok, to the extent those activities involve your personal information.

Please read this policy carefully. If you do not agree with our policies and practices, your choice is not to use our Site. By accessing or using this Site, you agree to this privacy policy. We may update this policy from time to time; continued use of the Site after changes are posted constitutes acceptance of those changes.

2. CHILDREN'S PRIVACY

This Site is intended for use only by persons 18 years of age or older. By using the Site, you represent that you are at least 18 years of age. We do not knowingly solicit or collect personal information online from children under the age of 13 without verifiable parental or guardian consent, consistent with the Children's Online Privacy Protection Act (COPPA).

Under recent amendments to California privacy law, any personal information we collect from a consumer we know to be under the age of 16 is automatically treated as Sensitive Personal Information and is subject to additional restrictions on use and disclosure, including with respect to targeted advertising. If we later determine that we have inadvertently collected personal information from anyone under the applicable age without appropriate consent, we will take steps to delete that information. If you believe we may have collected such information, contact us at info@zatiknatural.com.

3. INFORMATION WE COLLECT ABOUT YOU AND HOW WE COLLECT IT

Providing personal information to us is always voluntary. However, we may be unable to provide certain services, complete a purchase, or respond to a request if you choose not to provide certain information. We may collect several types of information from and about users of our Site, including information:

By which you may be personally identified, such as name, postal address, email address, telephone number, order history, and payment-related identifiers ("Personal Information");

That relates to you but does not by itself identify you; and

About your internet connection, the equipment you use to access our Site, and your usage details.

We collect this information:

Directly from you when you provide it to us, including at checkout through our Shopify store;

Automatically as you navigate the Site, including through cookies, pixels, and similar tracking technologies; and

From third parties, including our payment processor, shipping and fulfillment partners, marketing platforms, and advertising partners.

4. INFORMATION YOU PROVIDE TO US

Information provided when creating an account, placing an order, or requesting customer service through our Shopify store;

Information provided when entering a contest, promotion, or loyalty program we sponsor;

Records and copies of correspondence, including email addresses, if you contact us;

Responses to surveys conducted for research purposes; and

Search queries entered on the Site.

5. AUTOMATIC DATA COLLECTION, COOKIES, AND ADVERTISING TECHNOLOGIES

As you navigate our Site, we and our service providers and advertising partners use automatic data collection technologies to collect information about your equipment, browsing actions, and shopping patterns, including:

Details of your visits to our Site, including pages viewed, products browsed, items added to cart, and purchases completed;

Information about your device and internet connection, including IP address, browser type, and operating system; and

Approximate location information derived from your IP address or, where you consent, your device's precise location.

Cookies and Similar Technologies

We use cookies (including those set through our Shopify platform), pixels, and similar technologies to operate the Site, remember your preferences, analyze traffic, and support advertising. You may refuse browser cookies through your browser settings, though doing so may limit certain Site functionality.

Advertising and Analytics Partners

We use the following third-party advertising, analytics, affiliate, and marketing tools, confirmed as currently active on our Shopify store (Customer Events / Pixels and installed Apps):

Meta Pixel / Meta Conversions API ("Facebook & Instagram") — server- and web-based tracking used for ad measurement, retargeting, and audience matching on Facebook and Instagram. Personal information such as email address is hashed before being shared with Meta.

Google Ads conversion tracking ("AW-1034395695") — web-based conversion tracking.

Google & YouTube — server-based tracking used for analytics and ad measurement.

Pinterest — web-based pixel used for ad measurement and retargeting.

Omnisend Email Marketing & SMS — web-based pixel and installed app used to send marketing emails/texts and personalize offers based on your activity on the Site.

Collabs — web-based pixel and installed app used for influencer/affiliate marketing campaign tracking.

AWIN/Shareasale— web-based pixel and installed app used for affiliate marketing tracking and commission attribution.

Yotpo Product Reviews — web-based pixel and installed app used to collect and display product reviews, which may include customer name, photo, and review content you submit.

Other Installed Apps That May Process Personal Information

In addition to the advertising/pixel tools above, the following apps are installed on our store and may process customer data as part of their function:

ShipStation — order and shipping address data, for fulfillment (see also Section 7).

QuickBooks Online — order and payment-related data, for bookkeeping (see also Section 7).

Appstle Subscription — customer and payment data, for managing recurring subscription orders.

Square K: QR Code Generator — (K: QR Code Generator Hub by Kaktus)

We use the K: QR Code Generator Hub app, provided by Kaktus, to create and manage QR codes on our Shopify store. In connection with this app, the following data may be accessed, used, or stored:

Customer data accessed:

  • Device and activity data, including geolocation, IP address, browser type, and operating system (collected when a customer scans a QR code)

Store data accessed and edited:

  • Customer records (for personalization/targeting features)
  • Products, inventory, and collections
  • Order history (last 60 days)
  • Online Store pages, script tags, and theme files

Data sharing and sale:

  • Kaktus states that it does not sell personal data to third parties for their own marketing purposes.
  • Data may be shared with trusted third-party service providers who help operate Kaktus's services (e.g., hosting, analytics).
  • Data may be disclosed to comply with legal obligations, subpoenas, or government requests, or transferred as part of a business sale or acquisition.
  • Data may be processed or stored in Canada, the United States, and the European Union.

Section Store, Translate & Adapt, Subscriptions, Bundles, Messaging, Flow — Shopify storefront and automation tools that may access limited store or customer data depending on their function.

Shopify Collective — used to fulfill certain orders through a network of partner merchants. Where used, customer name, shipping address, and order details are shared with the fulfilling merchant to complete delivery.

Shopify Claude Connector App — an AI assistant integration with access to store data (products, orders, customers, analytics) to support administrative tasks; treated as a service provider.

6. HOW WE USE YOUR INFORMATION

To present the Site and its content to you, including personalized product recommendations;

To process and fulfill orders placed through our Shopify store, including sharing necessary information with our payment processor and shipping partners;

To provide customer service and respond to inquiries;

To send transactional and, where you have opted in, marketing communications;

To measure and improve the performance of our advertising, including on Meta, Google, and TikTok platforms;

To detect and prevent fraud; and

For any other purpose disclosed to you at the time of collection, or with your consent.

7. DISCLOSURE OF YOUR INFORMATION

We may disclose aggregated or de-identified information without restriction. We may disclose personal information that we collect, or you provide:

To service providers and contractors who perform services on our behalf, including order fulfillment (Shipstation, Unishippers, UPS, USPS, GlobalPost, Shopify Collective), payment processing, bookkeeping (QuickBooks Online), subscription management (Appstle), product reviews (Yotpo), email/SMS marketing (Omnisend), and store administration support (Shopify Claude Connector App);

To advertising, analytics, and affiliate/influencer marketing partners as described in Section 5 (Meta, Google, Pinterest, ShareASale, Collabs), for advertising measurement, retargeting, and commission attribution purposes;

To a buyer or successor in the event of a sale, merger, financing, or similar transaction involving some or all of our assets;

To comply with a court order, law, or legal process, or to respond to a government or regulatory request;

To enforce our terms of use and other agreements; and

If we believe disclosure is necessary to protect the rights, property, or safety of Zatik, our customers, or others.

8. CATEGORIES OF PERSONAL INFORMATION DISCLOSED TO SERVICE PROVIDERS AND CONTRACTORS (PAST 12 MONTHS)

The table below identifies categories of personal information disclosed to service providers and contractors in the preceding 12 months, and the category of recipient.

Category of Personal Information Category of Recipient Purpose
Identifiers (name, email, address, phone) Shipping & fulfillment (Shipstation, Unishippers, UPS, USPS, GlobalPost) Order fulfillment and delivery
Identifiers, shipping address, order details Shopify Collective (partner fulfillment network) Cross-store order fulfillment
Payment information Shopify Payments Payment processing
Identifiers, commercial/order history QuickBooks Online (bookkeeping app) and accounting service providers Financial recordkeeping
Online identifiers, device data, commercial info Meta (Facebook & Instagram), Google Ads, Google & YouTube, Pinterest Ad measurement, retargeting, analytics
Contact information, order/browsing history Omnisend Email Marketing & SMS Marketing communications
Order/referral data, commissions ShareASale, Collabs Affiliate and influencer marketing attribution
Name, photo, review content (if submitted) Yotpo Product Reviews Collecting and displaying product reviews
Customer, order, and payment data Appstle Subscription Managing recurring subscription orders
Store data (products, orders, customers, analytics) Shopify Claude Connector App AI-assisted store administration

9. YOUR CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you have the following rights with respect to your personal information, subject to certain exceptions:

Right to Know / Access — request disclosure of the categories and specific pieces of personal information we have collected about you;

Right to Delete — request deletion of personal information we have collected from you;

Right to Correct — request correction of inaccurate personal information;

Right to Opt Out of Sale/Sharing — opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising;

Right to Limit Use of Sensitive Personal Information — limit our use of sensitive personal information to purposes necessary to provide the goods or services you requested; and

Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

Where you have retained personal information for longer than 12 months, you may request information collected prior to that period by specifying a date range, except for information collected before January 1, 2022.

How to Exercise Your Rights

You may submit a request by emailing info@zatiknatural.com or writing to the address in Section 17. We will confirm receipt of opt-out requests and honor them consistently across our systems and advertising platforms, regardless of whether the request is submitted via a link, form, or a recognized opt-out preference signal.

Global Privacy Control

Where technically supported, our Site is designed to recognize the Global Privacy Control (GPC) browser signal as a valid request to opt out of the sale or sharing of personal information.

Do Not Sell or Share My Personal Information

To submit a "Do Not Sell or Share My Personal Information" request, email info@zatiknatural.com or write to us at the address in Section 17.

10. PRIVACY RIGHTS FOR OTHER U.S. RESIDENTS

Depending on your state of residence, you may have similar rights to access, delete, correct, or opt out of certain processing of your personal information under state privacy laws, including those of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy statutes. To exercise these rights, contact us using the information in Section 17, and we will respond consistent with the applicable law of your state of residence.

11. LINKS TO THIRD-PARTY WEBSITES

The Site may include links to blogs, social media, and third-party websites. These third-party sites have their own privacy policies and are not controlled by this Privacy Policy. We encourage you to review the privacy policies of any third-party site before providing personal information. We are not responsible for the privacy or security practices of third-party sites, including those linked from our Site.

California Civil Code Section 1798.83 permits California residents to request certain information regarding disclosure of personal information to third parties for direct marketing purposes. Requests may be sent to info@zatiknatural.com or to the address in Section 17.

12. CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION

If you do not wish to have your contact information used to promote our own or third parties' products or services, you may opt out via the mechanism described in Section 9, or by emailing info@zatiknatural.com. You may also adjust ad preferences directly within Meta, Google, and TikTok's own advertising settings to limit personalized advertising from us.

13. ACCESSING AND CORRECTING YOUR INFORMATION

You may email info@zatiknatural.com to request access to, correction of, or deletion of personal information you have provided to us. We may not accommodate a request if we believe it would violate any law or legal requirement or would cause the information to be incorrect. We will take reasonable steps to verify your identity before fulfilling a request.

14. VISITORS FROM OUTSIDE THE UNITED STATES

If you access our Site from outside the United States, information you voluntarily provide, along with technical information from your browser, will be transferred to and processed in the United States. Data protection laws in the U.S. may differ from those in your home country. If you do not wish for your information to be transferred to the U.S., please do not provide it via our Site.

Visitors from the European Union / United Kingdom

For purposes of the General Data Protection Regulation (GDPR), we act as the data controller for personal information collected through our Site from EU/UK visitors. Our legal basis for processing includes your consent, the performance of a contract with you (e.g., fulfilling an order), and our legitimate interests in operating and marketing our business, as applicable. We do not currently maintain a data protection officer or EU representative. Based on our periodic review of order data, personal information from European Union, United Kingdom, and Swiss visitors represents a small percentage of our total transactions, and we do not otherwise regularly and systematically monitor EU data subjects or habitually offer goods and services targeted specifically at the EU market. We will reassess this determination periodically as our international order volume evolves.

Personal information collected from EU/UK visitors is stored in the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses. We retain personal information provided via our Site for seven (7) years from the date it was provided or last updated, unless you request earlier deletion. To exercise GDPR rights, email info@zatiknatural.com or write to the address in Section 17. We may request identity-verifying information before acting on a request, and may decline or charge a reasonable fee for requests that are manifestly unfounded or excessive.

EU visitors may also be offered a choice, where applicable through our advertising partners, between a fully personalized advertising experience and a less-personalized experience with more limited data sharing.

15. DATA SECURITY

We have implemented measures designed to protect your personal information from accidental loss and unauthorized access, use, alteration, or disclosure. Payment card information submitted through our Shopify checkout is handled by our payment processor in accordance with applicable card industry security standards; Zatik does not directly store full payment card numbers. No transmission of information via the internet is completely secure, and we cannot guarantee absolute security.

16. CHANGES TO THIS PRIVACY POLICY

We will post any changes to this policy on this page and update the Effective Date above. If we make material changes to how we treat personal information, we will provide additional notice, such as an email to your account's primary address or a prominent notice on the Site.

17. CONTACT INFORMATION

To ask questions or comment about this privacy policy, contact us at:

Zatik Inc. ATTN: Website Privacy Policy 509 S. Flower St. Burbank, CA 91502 info@zatiknatural.com