Last updated 10 September 2026

Privacy policy

LONUT, Singapore, operates Zigzag & And and is responsible for the personal information described here. Contact our data protection contact at hello@zigzagandand.com for privacy questions or requests.

What we collect

When you subscribe, we receive your email address, Stripe customer and subscription identifiers, subscription status, trial and billing dates, and payment or invoice information needed to operate the service. Stripe collects your payment details directly; we do not store your full card number.

We keep delivery records, such as the recipient, edition, send time and delivery result, to send your collections and investigate problems. If you email us, we receive your message, contact details and any information you choose to include.

Our hosting and infrastructure providers may process technical request information such as IP addresses, browser details, requested pages and timestamps to deliver and secure the website.

How we use it

We use this information to manage subscriptions and payments, deliver PDFs and trial reminders, answer support requests, prevent duplicate sends and misuse, resolve disputes, and meet legal and accounting obligations. Subscription emails are part of the service you request.

We do not sell personal information, use it for targeted advertising, or create learner profiles. We do not send subscriber details to the AI process that generates worksheets; it works from reading passages and activity instructions.

Who helps us provide the service

• Stripe processes payments and provides subscription management. See Stripe's privacy policy.
• Resend delivers emails and processes recipient addresses, email contents and delivery events.
• Cloudflare and Google Gmail route and store support email so we can respond.
• Cloudflare provides website hosting and related infrastructure.

We may also disclose information where required by law, to protect legal rights, to professional advisers when necessary, or as part of a business transfer subject to appropriate protections. We do not publish subscriber information.

Cookies and tracking

We have not added advertising pixels or website analytics. Infrastructure providers may use technologies needed for security or operation. When you visit Stripe checkout or its billing portal, Stripe's own cookie and privacy practices apply.

Children

Adults subscribe and receive the materials. There are no learner accounts, homework uploads or child-facing chat features. Please do not send children's names, school records or other sensitive information in support requests. If you believe we have collected a child's information unnecessarily, contact us so we can address it.

Storage, security and international processing

We keep information only for as long as it is needed to provide the service, handle support or disputes, prevent misuse, and meet legal or accounting obligations. Cancellation stops future subscription delivery when the subscription ends; it does not automatically erase records that we still need for these purposes.

We use access controls and reasonable security measures, but no system or email transmission can be guaranteed completely secure. Our service providers operate internationally, so information may be processed outside Singapore or your country, including in the United States. Applicable transfer safeguards are required where the law calls for them; contact us for information about the arrangements relevant to your data.

Your choices and rights

You can update billing details and cancel through the subscription management link on our website. You may contact us to request access to or correction of your personal information, ask for deletion, or withdraw consent where processing relies on consent. We may need to verify your identity and retain information where the law permits or requires it. If a request affects information needed for delivery, we will explain the effect on your subscription.

Depending on where you live, you may also have rights to data portability, restrict or object to processing, and complain to your local data protection authority. In Singapore this is the Personal Data Protection Commission. We will handle requests in accordance with applicable law.

Additional information for the EEA and UK

Where European or UK data protection law applies, we process subscription and delivery information to perform our contract with you; security, troubleshooting and proportionate service records for our legitimate interests in operating a reliable service; and legally required records to meet legal obligations. Where we rely on consent, you may withdraw it without affecting earlier lawful processing. We do not make decisions with legal or similarly significant effects about you solely through automated profiling.

Changes and contact

We may update this policy as the service changes. We will publish the updated date here and notify subscribers of material changes where appropriate or required. For questions or to exercise your rights, email hello@zigzagandand.com.