Here is the polished, professional optimization of your privacy policy, followed by a guide on how your new AI Chatbot interacts with this data.

Effective Date: June 13, 2026

At Zesho (“we,” “us,” or “our”), accessible via zesho.ca, we are committed to safeguarding your privacy. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you visit our website, utilize our automated services, and purchase products from us.

By using our website, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We may collect personal information that you voluntarily provide when you:

  • Browse our website or interact with our automated services.
  • Create an account.
  • Place an order.
  • Contact our customer service channels (including live chat).
  • Subscribe to emails or marketing newsletters.
  • Utilize site features such as wishlists or product inquiries.

The personal data collected may include:

  • Full name.
  • Email address and phone number.
  • Billing and shipping addresses.
  • Secure payment-related tokens (processed via external gateways).
  • Account login credentials.

We also automatically collect non-personal information, including:

  • IP address and approximate location.
  • Browser type and device specifications.
  • Site interaction metrics (pages visited, time spent, referral sources).
  • Cookies and tracking pixel data.

2. How We Use Your Information

Your data is utilized to optimize your e-commerce experience, specifically to:

  • Process, fulfill, and ship footwear orders.
  • Provide automated and manual customer support.
  • Distribute transactional updates, order confirmations, and shipping tracking information.
  • Personalize your retail experience and improve website functionality.
  • Identify, mitigate, and prevent fraudulent activity.
  • Deliver targeted promotional marketing and newsletters (subject to explicit user opt-in).
  • Comply with governing legal and regulatory frameworks.

3. Payment Processing

All online transactions are executed through specialized, secure third-party payment processors. Zesho does not store credit card numbers, debit card details, or sensitive financial authentication numbers on its local servers. Financial information is encrypted and securely handled strictly according to the privacy and security practices of our payment providers.

4. Cookies and Tracking Technologies

We deploy cookies, web beacons, and local session storage to:

  • Retain user preferences and cart selections across sessions.
  • Maintain active account logins securely.
  • Analyze website traffic patterns to refine overall performance.

You may choose to restrict or disable cookies via your browser configurations; however, doing so may limit specific front-end functionalities of the e-commerce storefront.

5. Automated Customer Support and AI Interactions

To elevate our user experience, our website features an automated AI customer support chatbot.

  • Data Processing: When you communicate with our virtual assistant, the textual inputs you provide are processed in real-time to generate relevant, helpful support replies concerning shoe sizing, inventory availability, shipping speeds, and retail procedures.
  • Data Retention: Any files or media objects voluntarily uploaded directly into the chat interface are stored securely within our local filesystem and are systematically purged after one (1) hour to protect user privacy and maximize server security.

6. Information Sharing and Disclosure

Zesho does not sell, rent, or trade your personal information to third parties.

We disclose information to trusted corporate service providers exclusively to facilitate operational necessities, including:

  • Payment processing networks.
  • Logistics, fulfillment, and courier services.
  • Core infrastructure web hosting and database maintenance.
  • Analytical and email distribution platforms.
  • Legal authorities, solely when strictly mandated by enforceable law.

7. Data Retention and Security

We retain personal data only as long as necessary to satisfy transaction completions, maintain thorough corporate business records, resolve discrepancies, or satisfy statutory tax, accounting, and legal requirements.

We utilize verified technical, physical, and administrative security configurations to protect your records. However, because no transmission over the internet is completely bulletproof, absolute security cannot be guaranteed.

8. International Users and Jurisdictional Rights

Our infrastructure operates fundamentally out of Canada. If you access our platform internationally, your information may be transferred to, stored, and processed in jurisdictions where our service providers maintain server systems.

Depending on your geographic location, you may possess distinct privacy privileges. This includes the right to request access to, correction of, restriction of, or permanent deletion of your stored personal profile.

9. Contact Us

For inquiries, compliance documentation requests, or adjustments regarding your personal information, please reach out to:

Zesho Support Operations Website: zesho.ca

Email: support@zesho.ca

🤖 Internal Guide: How Your AI Chatbot Uses This Policy

Now that your AI Engine (GPT-5.4 Mini) chatbot is successfully activated, here is a functional look at how it operates in tandem with your compliance standards:

  1. The GDPR Shield: Because you have enabled compliance controls, users are greeted with the Compliance Text you saved (“By using this chat, you agree to our privacy policy.”). This establishes immediate legal authorization before data hits the OpenAI API.
  2. Strict System Limitations: Under your optimized settings, the chatbot does not look at outside search networks or create generated image links. It only reads the local store rule parameters you assigned to it (2-day shipping, $80 free shipping threshold, 7-day returns).
  3. Automated Clean-up: The Files & Media rule you set acts as an automatic garbage collector. If a user drops a photo of a shoe style into the chat box to ask if you carry it, your server holds it for exactly one hour to let the AI process it, then deletes it forever to comply with the storage rules in Section 5 above.