Privacy Policy

At Zizara, we respect your privacy and strictly follow applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and, where relevant to visitors from other regions, the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Quick Summary

Data collected: full name, shipping address, email, phone number; payment details (processed by certified third parties, never stored by us); cookies, IP, device and browsing behaviour; your communications with our support team.
How we use it: order processing and delivery, order status updates, customer support, direct marketing (only with your explicit consent), and service-improvement analytics.
Your rights: access, correction, deletion, portability, and objection/opt-out of marketing.
Sharing: suppliers (only what's needed for production/shipping), carriers (name and delivery address only), payment processors, and authorities when legally required. We NEVER sell or rent your personal data.
Retention: order data for 7 years (tax obligation), marketing data until you withdraw consent, support data for 2 years after your last contact.

Our Store operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Our Store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

Personal Information We Collect

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. We may collect or process the following categories, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact details — name, address, billing address, shipping address, phone number, and email address.
Financial information — payment card information, financial account information, transaction details, form of payment, and payment confirmation.
Account information — username, password, security questions, preferences and settings.
Transaction information — items you view, add to cart, wish-list, purchase, return, exchange or cancel, and your past transactions.
Communications with us — the information you include when contacting our support team.
Device information — device, browser, network connection, IP address, and other unique identifiers.
Usage information — how and when you interact with or navigate the Services.

Where This Information Comes From

Directly from you — creating an account, using the Services, or communicating with us.
Automatically through the Services — via your device, cookies, and similar technologies.
From our service providers, when they collect or process information on our behalf.
From our partners or other third parties.

How We Use Your Personal Information

Provide, tailor, and improve the Services — fulfil your orders, remember your preferences, process returns/exchanges, manage your account, arrange shipping, and personalise your experience.
Marketing and advertising — with your consent, send promotional communications and show relevant ads.
Security and fraud prevention — authenticate accounts, secure payments, and detect fraudulent or malicious activity.
Communicating with you — customer support and maintaining our relationship with you.
Legal reasons — complying with applicable law, valid legal process, or enforcing our terms and policies.

Disclosure to Third Parties

We may disclose your personal information to: Shopify and other vendors who perform services on our behalf (IT, payment processing, analytics, support, fulfilment, and shipping); business and marketing partners, subject to your opt-out rights; parties you've directed us to share with; and, in connection with a business transaction or legal obligation, other relevant parties.

The Services are hosted by Shopify, which processes personal information to provide and improve the Services. To learn more about how Shopify uses your personal information, visit the Shopify Consumer Privacy Policy.

Third-Party Links

The Services may link to websites or platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security practices of such sites — please review their own policies.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with personal information, contact us to request its deletion.

Security and Retention

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." We recommend you avoid unsecure channels when sharing sensitive information with us. How long we retain your information depends on factors such as maintaining your account, providing the Services, complying with legal obligations, and resolving disputes.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

Access — request a copy of the personal information we hold about you.
Deletion — request that we delete your personal information (subject to legal obligations).
Correction — request that we correct inaccurate information.
Portability — receive a copy of your data to transfer to a third party.
Opt-out — object to marketing or targeted advertising. You may also enable the Global Privacy Control signal, which we will honour automatically where applicable.
Manage communication preferences — unsubscribe from promotional emails at any time using the link in any email we send. You may still receive non-promotional emails about your account or orders.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your request, and you may designate an authorised agent to act on your behalf, subject to identity verification.

Complaints

If you have concerns about how we process your personal information, contact us using the details below. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority — in the UK, this is the Information Commissioner's Office (ICO).

International Transfers

We may transfer, store, and process your personal information outside the country you live in. Where we transfer personal information out of the UK or the European Economic Area, we rely on recognised transfer mechanisms such as the UK's International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, unless transferring to a country already recognised as providing an adequate level of protection.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy here and update the "Last updated" date.

Contact Us

If you have questions about our privacy practices or this Privacy Policy, or would like to exercise any of your rights, please email us at support@zizarastore.com.

[Note to store owner: UK law requires a real trading/geographic address to be disclosed to consumers. Please provide your registered business or trading address so it can be added here.]