From the earth's rarest harvests, we share the extraordinary.

PRIVACY POLICY

zonteasan.com · Sostra Limited

Last Updated: May 26, 2026

NOTICE: This Privacy Policy is a starting-point document prepared to reflect the data practices of ZON Teasan™. It is not legal advice. We recommend review by a qualified attorney before publication.

1. Introduction

ZON Teasan™ is a luxury herbal infusion brand operated by Sostra Limited (“we,” “us,” or “our”). Our website is located at zonteasan.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, submit an enquiry, or engage with us in connection with the acquisition of our products.

By accessing or using zonteasan.com, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the website.

This document tells you what personal information we collect, why we collect it, and what we do with it. We respect your privacy and will only use your data for the purposes described here.

2. Information We Collect

2.1 Information You Provide Directly

• Full name and contact details (email address, phone number) when you submit an enquiry or order request

• Billing and shipping address when fulfilling an order

• Payment information — processed securely by our payment processor; we do not store full card or banking details

• Messages, preferences, and special instructions included in your correspondence with us

• Trade, wholesale, and hospitality information if you submit a business enquiry

2.2 Information Collected Automatically

• IP address and approximate geographic location

• Browser type, device type, and operating system

• Pages visited, time spent on pages, and referring URLs

• Cookie and tracking data (see Section 5)

2.3 Information from Third Parties

• If you interact with our social media profiles or press coverage, those platforms may share limited data with us in accordance with their own privacy policies

We collect what you type in — your name, contact details, and any ordering information. We also collect some technical data automatically (like which pages you viewed) to help us improve the site.

3. How We Use Your Information

• To respond to your enquiries and facilitate orders for ZON Teasan™ products

• To process and fulfil your purchase, including arranging shipping and handling payment

• To communicate order status, shipping updates, and relevant product information

• To maintain records required for legal, tax, and accounting purposes

• To improve and optimise the performance of zonteasan.com

• To detect, investigate, and prevent fraudulent or unauthorised activity

• To comply with applicable laws and regulatory obligations

• To send marketing or brand communications, only where you have provided consent or where we have a legitimate interest in doing so

We use your information to fulfil your orders, keep you informed, improve the website, and stay legally compliant. We do not use your data for unrelated purposes.

4. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of trusted parties:

4.1 Service Providers

• Payment processors (e.g. Stripe or equivalent) — to securely handle transaction data

• Shipping and logistics partners — to deliver your order

• Email and communication platforms — to manage correspondence

• Website hosting and analytics providers — to operate and monitor our site

4.2 Legal and Regulatory Bodies

• We may disclose information where required by law, court order, or regulatory authority

• We may share data to protect the rights, property, or safety of ZON Teasan™, our customers, or the public

4.3 Business Transfers

• In the event of a merger, acquisition, or sale of assets, personal data may transfer to the successor entity, subject to the same privacy protections

We share your data only with companies that help us run our business (like payment and shipping providers) or when required by law. We never sell your personal information.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and understand how visitors use our site.

Types of Cookies We Use

• Essential cookies — required for the website to function (cannot be disabled)

• Analytics cookies — help us understand page performance and visitor behaviour (e.g. Google Analytics or equivalent)

• Preference cookies — remember your settings and choices

• Marketing cookies — may be used to deliver relevant content (only where consent is obtained)

Managing Cookies

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website. For more information on managing cookies, visit www.allaboutcookies.org.

Cookies are small files that help the website work and help us understand how it’s being used. You can turn off non-essential cookies in your browser settings.

6. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this Policy or as required by applicable law. The table below summarises our standard retention periods:

• Data Type Retention Period Reason

• Enquiry & contact messages 3 years Business correspondence and follow-up

• Order information 7 years Tax, legal, and accounting compliance

• Email communications 3 years from last interaction Relationship management

• Website analytics (anonymised) 26 months Performance and improvement

• Cookie preferences 12 months Respecting your consent choices

We don’t hold on to your data longer than necessary. Order records are kept for 7 years because our law requires it. Other information is deleted or anonymised when it’s no longer needed.

7. Your Rights

Subject to applicable law, you have the following rights in relation to your personal information:

• Right to Access — Request a copy of the personal data we hold about you

• Right to Rectification — Ask us to correct inaccurate or incomplete information

• Right to Erasure — Request deletion of your personal data where we have no legal basis to retain it

• Right to Restrict Processing — Ask us to limit how we use your data

• Right to Data Portability — Receive your data in a structured, machine-readable format

• Right to Object — Object to processing based on legitimate interests or for direct marketing purposes

• Right to Withdraw Consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days.

You are in control of your data. You can ask us to show you what we have, fix it, delete it, or stop using it. Just email us and we’ll sort it within 30 days.

8. Additional Rights for EEA, UK, and EU Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, this section applies to you. This Policy is designed to address the requirements of the General Data Protection Regulation (GDPR) and the UK GDPR.

Legal Basis for Processing

• Contract performance — Processing your order and fulfilling our obligations to you

• Legitimate interests — Improving our website, fraud prevention, and business analytics

• Legal obligation — Retaining records as required by law

• Consent — Marketing communications and non-essential cookies

International Data Transfers

As Zon International Holdings US, Inc. is a US-registered entity, your personal data may be transferred to and processed in the United States. Where such transfers occur, we apply appropriate safeguards in accordance with applicable data protection law.

Data Protection Contact

For data protection enquiries related to GDPR, you may contact us at the details in Section 13. You also have the right to lodge a complaint with your local data protection supervisory authority.

If you’re in Europe, you have stronger legal protections under GDPR. This means we need a clear legal reason to use your data, and you have robust rights to access or delete it. We always handle EU data with care.

9. Additional Rights for California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following additional rights:

• Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months

• Right to Delete — Request deletion of personal information we have collected about you (subject to certain exceptions)

• Right to Opt-Out — We do not sell personal information. If this changes, you will have the right to opt out

• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights

To exercise these rights, contact us using the details in Section 13. We will respond within 45 days.

If you live in California, you have specific rights under state law — including the right to know what data we have and to delete it. We don’t sell your data, ever.

10. Children’s Privacy

ZON Teasan™ is not directed at children under the age of 16. We do not knowingly collect personal information from individuals under 16. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete the information.

Our products are intended for adults. We don’t knowingly collect data from anyone under 16.

11. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encrypted data transmission via HTTPS (TLS)

• Restricted access controls for personnel who handle personal data

• Secure, reputable third-party processors for payment and data handling

• Regular review of our security practices

While we strive to protect your information, no method of transmission or storage is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

We take reasonable steps to keep your data safe. If something goes wrong, we’ll tell you.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last Updated” date at the top of this document. We encourage you to review this Policy periodically.

Your continued use of zonteasan.com following any changes constitutes your acceptance of the updated Policy.

If we update this policy significantly, we’ll change the date at the top. Check back occasionally to stay informed.

13. Contact Information

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

Sostra Limited

Website: zonteasan.com

Email: [email protected]

Mailing Address: 7 West Arcadia Avenue, Kingston 10

If you have any questions about this policy or how we handle your data, just reach out. We will always respond.