Policies & Terms

Privacy Policy

How ZUTTO collects, uses, and protects your information

Effective August 13, 2026

On this page

1.Introduction

This Privacy Policy explains how U and Me Communication, Inc. (“U and Me Communication, Inc.,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information in connection with the ZUTTO eCommerce platform, including our website, mobile applications, and related services (collectively, the “Platform”).

The Platform serves three principal groups of users: customers who browse and purchase goods, vendors who list and sell goods, and administrators who operate the Platform. This Policy applies to all of them. By accessing or using ZUTTO, you acknowledge that you have read and understood this Policy.

Contact for privacy matters: legal@shopzutto.com — U and Me Communication, Inc., Attn: Data Protection.

2.Information We Collect

2.1 Information you provide directly

Account and profile data: name, email address, phone number, username, password, and billing/shipping addresses.

Vendor onboarding data: business name, tax identification, business registration details, bank or payout account information, and authorized-representative contacts.

Transaction data: items ordered or sold, order value, quantities, discounts, invoices, and receipts.

Communications: messages, support tickets, reviews, ratings, and dispute records.

2.2 Financial and payment information

When you make or receive payments through the Platform, we and our payment processors collect information needed to complete financial transactions. This may include the last four digits of a payment card, card type, expiry, billing address, payout account identifiers, and transaction identifiers. Full card numbers and sensitive authentication data are handled by PCI-DSS compliant payment processors and are not stored on ZUTTO servers in plaintext.

Customer financial data: payment method tokens, transaction amounts, refunds, and chargeback records.

Vendor financial data: settlement amounts, commission deductions, payout schedules, and payout account references.

Platform-level records: ledgers reconciling sales, fees, taxes, and disbursements.

2.3 Information collected automatically

Device and connection data: IP address, device type, operating system, browser, and unique device identifiers.

Usage data: pages viewed, products searched, cart activity, session duration, and referral URLs.

Cookies and similar technologies used to keep you signed in, remember preferences, and measure performance.

3.How We Use Information

To create and manage accounts and authenticate users.

To process orders, payments, payouts, refunds, and other financial transactions.

To connect customers with vendors and facilitate order fulfillment and delivery.

To calculate commissions, taxes, and settlement amounts owed to vendors.

To detect, prevent, and investigate fraud, abuse, and security incidents.

To provide customer support and resolve disputes between customers and vendors.

To send transactional messages and, where permitted, marketing communications.

To comply with legal, tax, accounting, and regulatory obligations.

To analyze and improve the Platform, including personalization and recommendations.

4.How We Share Information

We do not sell personal information. We share information only as described below:

Between transacting parties: to complete an order, relevant details are shared between the customer and the vendor (for example, shipping address to the vendor; vendor identity to the customer).

Service providers: payment processors, hosting, logistics/shipping partners, analytics, and communications vendors acting on our instructions under contract.

Legal and safety: to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of users and the public.

Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5.Data Retention

We retain personal and transaction information for as long as your account is active and thereafter as required to meet legal, tax, accounting, and dispute-resolution obligations. Financial transaction records are typically retained for a minimum period required by applicable tax and commercial law. When information is no longer required, we delete, anonymize, or securely archive it.

6.Data Security

Encryption of data in transit using industry-standard TLS.

Encryption or tokenization of sensitive financial identifiers at rest.

Role-based access controls and least-privilege access for staff.

Monitoring, logging, and periodic security assessments.

No method of transmission or storage is completely secure. We cannot guarantee absolute security but work to protect information using reasonable safeguards.

7.Your Rights and Choices

Access, correct, or update your account and profile information.

Request a copy or deletion of your personal information, subject to legal retention duties.

Opt out of non-essential marketing communications at any time.

Manage cookie preferences through your browser or the Platform settings.

To exercise these rights, contact legal@shopzutto.com. We may need to verify your identity before acting on a request.

8.Children’s Privacy

ZUTTO is not directed to children under the age required by applicable law to consent to online services, and we do not knowingly collect their personal information. If we learn that we have collected such information, we will delete it.

9.International Transfers

Your information may be processed in countries other than where you reside. Where required, we implement appropriate safeguards for cross-border transfers consistent with applicable law.

10.Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on the Platform with a revised effective date. Continued use of ZUTTO after changes take effect constitutes acceptance of the updated Policy.

11.Contact Us

U and Me Communication, Inc. — Data Protection. Email: legal@shopzutto.com. We will respond to privacy inquiries within a reasonable timeframe.