Privacy policy, data retention schedules, and tracking disclosures.

This Privacy Policy took effect on October 18, 2026.

It governs all data processing operations conducted through the domain zenittoskin.click, including direct catalog requisitions, consultation requests, support chat interactions, and digital advertising measurement.

Data Controller: Zenittoskin, trading at zenittoskin.click.

Physical postal address: 308 Brazos Street, Austin, Texas 78701, Austin, Texas, United States.
Direct contact email: office@zenittoskin.click.
Direct contact telephone: +1 (464) 595-9261.
Product desk operations managed by Irina Petrova since 2021 with Florida corporate registration and industry association credentials.

Exact categories of personal and technical data collected by this site.

We collect only the data necessary to provide skincare formulation information and non-binding requisition quotes:

• Inquiry Form (kajuaaa.php): Full name, telephone number, email address, postal address, formulation category of interest, specification notes, and affirmative consent checkbox.
• Automatic Technical Transmission: Connecting IP address, browser user-agent string, referring URL, timestamp when the form rendered, and timestamp when submission completed.
• Support Chat (giro797.php): Conversation message transcript, visitor session token stored in browser localStorage, and optional name or contact details provided during the session.
• Consent Choice: Visitor preference key stored under site_consent_v2 in the local browser context.
• Advertising Click Identifiers: Incoming URL query parameters including gclid, msclkid, and fbclid where traffic arrives via paid advertising campaigns.

Notice: Zenitto Skin operates no customer accounts, issues no login passwords, processes no payment transactions, and never collects payment card numbers or banking credentials.

Specific purposes for processing collected categories.

Zenitto Skin processes collected information strictly for:

• Evaluating skincare formulation availability, active concentrations, and packaging formats.
• Preparing and delivering written itemised price quotes by email or telephone.
• Coordinating in-person showroom appointments at 308 Brazos Street in Austin, Texas.
• Maintaining web application security, anti-bot filtering, and technical log diagnostics.
• Measuring advertising campaign effectiveness across approved digital marketing platforms in accordance with granted consent signals.

Lawful legal bases for processing operations.

Active advertising programs and platform click identifiers.

This website is an active destination for paid commercial advertising. Traffic arrives via campaigns running on:

• google ads: Google Ads transmits paid visitor traffic and appends the gclid click identifier to incoming URLs.
• microsoft advertising: Microsoft Advertising transmits paid search traffic and appends the msclkid click identifier to incoming URLs.
• Meta Ads: Meta Ads transmits targeted campaign traffic and appends the fbclid click identifier to incoming URLs.

Zenitto Skin states unequivocally that no advertising platform has reviewed, endorsed, or certified this catalog or its underlying formulations. Disclosures are provided in compliance with applicable publisher terms.

Google Consent Mode v2 implementation and storage states.

Our site implements Google consent mode v2. Before a visitor interacts with our consent interface, all four tracking and ad storage signals remain strictly denied:

• ad_storage: 'denied'
• ad_user_data: 'denied'
• ad_personalization: 'denied'
• analytics_storage: 'denied'

Only when the visitor selects "Allow Storage" are these parameters updated to granted. If the visitor selects "Deny" or subsequently withdraws permission via our consent interface, all four parameters are immediately returned to the denied state.

Named third-party data processors and infrastructure providers.

Zenitto Skin engages the following third-party recipients to process technical information and route communications:

• Google LLC / Google Ireland Ltd: Advertising delivery, conversion modeling, and tag management. Privacy terms governed by Google policies.
• Microsoft Ireland Operations Ltd: Microsoft Advertising delivery and search conversion tracking. Microsoft processing is governed by the Microsoft Privacy Statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Social advertising delivery and attribution services.
• Website Hosting Infrastructure: Secure enterprise hosting provider storing static files and processing PHP inquiry scripts within United States data centers.
• Transactional Mail Routing Service: SMTP relay transporting inquiry notifications from kajuaaa.php to office@zenittoskin.click.

Cross-border data transfers and jurisdictional safeguards.

Zenitto Skin operates primarily within the United States. Where visitors access the catalog from outside the United States (including the European Economic Area or United Kingdom), their data is transferred to and processed within the United States. Cross-border transfers to processors such as Google and Microsoft rely upon standard contractual clauses (SCCs) and applicable data privacy frameworks ensuring comparable safeguards.

Strict retention timelines across all data categories.

We reject indefinite data retention. Every record is purged according to established schedules:

Technical, organisational, and physical security measures.

All communications between your browser and zenittoskin.click are encrypted using Transport Layer Security (TLS 1.3). Form submissions are safeguarded against automated tampering via server-side honeypot validation and time-delta verification. Server infrastructure is maintained behind hardened firewalls with restricted administrative access limited to authorised operations staff.

Statutory rights under the European General Data Protection Regulation (gdpr).

Visitors residing within the European Economic Area or United Kingdom possess comprehensive rights under the gdpr:

• Right of Access: Request confirmation of whether your data is processed and obtain a copy.
• Right to Rectification: Request correction of inaccurate or incomplete formulation or contact records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where statutory retention grounds no longer apply.
• Right to Restriction: Limit processing while an accuracy or objection claim is verified.
• Right to Data Portability: Receive your provided data in a structured, machine-readable format.
• Right to Object: Object to processing grounded in legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting past lawful processing.

State privacy rights under the California Consumer Privacy Act (ccpa) and US state laws.

For residents of California and states with comprehensive privacy legislation (including Texas, Virginia, Colorado, and Connecticut), the ccpa and related statutes grant distinct rights:

• The right to know what personal information has been collected, disclosed, or shared.
• The right to delete personal information held by Zenitto Skin.
• The right to correct inaccurate personal records.
• The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.
• The right to freedom from discrimination for exercising statutory privacy rights.

Zenitto Skin does not sell your personal information for monetary consideration.

Universal opt-out recognition via global privacy control.

Our web platform detects and honors the global privacy control (GPC) signal transmitted via HTTP headers (Sec-GPC). If your browser broadcasts an active GPC signal, our system automatically sets advertising and tracking cookies to denied without requiring secondary manual opt-out steps.

Strict exclusion of minors and children's data.

Zenitto Skin is a professional cosmetic skincare catalog and consultation desk. The site is not directed to individuals under 18 years of age. We do not knowingly collect, solicit, or retain personal data from children. If we discover that an individual under 18 has submitted information through our forms, that data is permanently purged immediately.

Supervisory authorities and regulatory complaint procedures.

If you believe Zenitto Skin has handled your personal data in violation of applicable laws, you retain the right to lodge a formal complaint with a competent supervisory authority:

• In Texas: Office of the Texas Attorney General, Consumer Protection Division.
• In California: California Privacy Protection Agency (CPPA) or California Attorney General.
• In the European Union: The data protection supervisory authority of your EU member state of residence.

Formal data subject access request (DSAR) submission protocol.

To exercise your statutory rights to access, review, correct, or delete your personal records, submit a written request to our compliance desk:

Policy revision notifications and amendment logs.

Any amendments to this Privacy Policy will be published directly on this page with an updated effective date stamped at the top of the document. Significant modifications altering the scope of data processing will be accompanied by an alert notice within the site's primary navigation or via direct email notification to active trade requisition partners.

Direct access to human privacy officers.

For inquiries regarding our data handling procedures, this privacy disclosure, or formulation records, contact our Austin desk: