1. Information We Collect

1.1 Information You Provide Directly

We collect the following types of personal information when you create an account, place a subscription order, or contact us:

• Identity Information: First name, last name
• Contact Information: Email address, phone number
• Delivery Information: Delivery address, zip code
• Payment Information: Credit/debit card details (processed and stored securely by Stripe; we do not store full card numbers)
• Account Information: Login credentials, subscription preferences, portal activity
• Communications: Messages, feedback, or inquiries you send to us

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, referring URLs, click patterns
• Cookies and Tracking Data: See Section 7 below

1.3 Information from Third Parties

We may receive information about you from third-party services we use to operate our business, including GoHighLevel (our CRM and marketing platform), Stripe (payment processing), and Google Workspace (email and communications).

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• To process and fulfill your subscription orders and deliveries
• To manage your account and Client Portal access
• To process payments and manage billing
• To send transactional communications including order confirmations, delivery notifications, and billing notices
• To send promotional communications (with your consent, which you may withdraw at any time)
• To send SMS/text message notifications related to your subscription (see Section 4)
• To respond to your inquiries and provide customer support
• To improve our website, products, and services
• To comply with legal obligations
• To prevent fraud and ensure the security of our services

3. Legal Basis for Processing

We process your personal information under the following legal bases:

• Contract Performance: Processing necessary to fulfill your subscription and deliver products to you
• Legitimate Interests: Operating and improving our business, preventing fraud, and maintaining security
• Consent: Sending marketing emails and SMS messages where you have opted in
• Legal Obligation: Complying with applicable laws and regulations

4. SMS / Text Message Communications (TCPA)

By providing your mobile phone number and subscribing to our service, you expressly consent to receive recurring automated text messages from Zavor & Co. at the mobile number you provide. These messages may include order confirmations, delivery scheduling notifications, billing confirmations, subscription status updates, and customer service follow-ups. Message frequency varies. Standard message and data rates may apply. Consent to receive SMS is not a condition of purchase.

4.1 How to Opt Out

To stop receiving text messages, reply STOP to any message we send. You will receive one final confirmation message. To re-enable messages, reply START or contact us at [email protected]. For help, reply HELP.

4.2 TCPA Compliance

Our SMS program complies with the Telephone Consumer Protection Act (TCPA) and CTIA Messaging Principles and Best Practices. We will not send marketing text messages to numbers registered on the National Do Not Call Registry.

5. Email Communications (CAN-SPAM)

We send transactional emails (order confirmations, delivery notices, billing updates) as necessary to fulfill your subscription. We may also send promotional emails with your consent. You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or contacting us at [email protected]. We honor opt-out requests within 10 business days. All marketing emails include a valid mailing address and unsubscribe mechanism, in compliance with the CAN-SPAM Act.

6. How We Share Your Information

We do not sell your personal information. We may share your information with trusted third-party service providers:

• Stripe — Payment processing. Privacy Policy: https://stripe.com/privacy
• GoHighLevel / LeadConnector — CRM, marketing automation, subscription management. Privacy Policy: https://www.gohighlevel.com/privacy-policy
• Google Workspace — Email and business communications. Privacy Policy: https://policies.google.com/privacy

We may also disclose your information when required by law, court order, or government regulation, or in connection with a business merger or acquisition. We will never sell your personal data to third parties for their marketing purposes.

SMS Data Sharing Policy: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and analyze usage. Types include:

• Essential Cookies: Required for the website to function, including maintaining your session and enabling secure checkout
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Functional Cookies: Remember your preferences to personalize your experience

You can control cookie settings through your browser. You may opt out of Google Analytics tracking at https://tools.google.com/dlpage/gaoptout.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, or destruction. Payment information is processed exclusively by Stripe using industry-standard encryption. No method of data transmission is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required under applicable Pennsylvania and federal law.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including maintaining your active subscription, complying with legal obligations, and resolving disputes. When you cancel your subscription, we may retain certain information for up to three (3) years for legal and business purposes. You may request deletion of your information by contacting us at [email protected].

10. Your Privacy Rights

You may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information, subject to legal retention requirements
• Right to Opt Out: Opt out of marketing communications at any time
• Right to Portability: Request your data in a portable format where feasible

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days and may need to verify your identity before processing your request.

11. California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; and the right to non-discrimination for exercising your CCPA rights.

Do Not Sell: Zavor & Co. does not sell your personal information to third parties.

In the past 12 months, we have collected the following categories of personal information: identifiers (name, email, address, phone number, IP address), commercial information (subscription and order history), financial information (payment details via Stripe), geolocation data (delivery address), and internet activity (website usage).

California residents may submit a CCPA request by contacting us at [email protected] with the subject line "CCPA Privacy Request." We will respond within 45 days.

12. Children's Privacy (COPPA)

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at [email protected] and we will promptly delete such information.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies before providing any personal information.

14. Pennsylvania Data Breach Notification

In the event of a data breach involving your personal information, Zavor & Co. will provide notification as required by the Pennsylvania Breach of Personal Information Notification Act (73 P.S. §§ 2301–2329), including notification to affected individuals and, where required, to the Pennsylvania Attorney General.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on our website and update the Effective Date. For material changes, we will provide additional notice by email or a prominent notice on our website at least 14 days before the changes take effect.

16. Contact Us