When you order, we collect your name, email address, delivery address and the contents of your order. When you subscribe to the Sunday hexagram, we collect your email address and nothing else. We do not collect payment card details ourselves — those go directly to our payment processor and never touch our servers.
We share what is necessary to run the business, and nothing more: our payment processor, our email service, our shipping carrier, and the tax authorities we are required to report to. We do not sell personal information, and we do not share it for advertising.
If you choose to sign in with Google or Apple, we receive the basic profile information those providers share with us — typically your email address, display name and profile picture — and use it only to create and sign you into your account. We never receive your password; this sign-in is governed by each provider’s own privacy policy (Google: privacy.google.com; Apple: apple.com/legal/privacy). You may disconnect the linked account at any time from your account settings.
We send email through our email provider (Resend). Transactional email — order confirmations, shipping notices and password resets — is sent because it is part of the service you asked for. Marketing email, such as the Sunday hexagram, is sent only if you opt in. Every marketing email includes a one-click unsubscribe link and a physical mailing address, and you can also unsubscribe at zhenhesheng.com/unsubscribe. Once you unsubscribe we keep your address on a suppression list so it is never emailed again.
We use a small number of cookies: some are required for the site to work at all, and others tell us which pages are read so we can write more of what is useful. You can refuse the optional ones without losing any functionality.
Order records are kept for as long as our tax obligations require. Newsletter subscriptions are kept until you unsubscribe, and we remove them from our list within thirty days of a request.
You can ask to see the personal data we hold about you, ask us to correct it, or ask us to delete it where we are not legally required to keep it. California residents have specific rights under the CCPA, including the right to know and the right to delete; residents of states with similar laws have the same. Write to us and we will respond within thirty days.