Privacy Policy
This policy explains how personal data is collected and used in connection with orders, payments, customer service, website operation and other business activities.
Personal data categories
Name, billing and shipping information, order contents, transaction references and fulfillment details.
Payment status, payment method information and transaction identifiers needed to process or reconcile payments.
Messages, return or refund requests, support history and information you provide when contacting us.
Device, browser, network, log and security information generated when you use the website.
Cookie choices and similar technology data where used, enabled or permitted.
Account identifiers and profile information if an account feature is available and used.
Processing purposes and GDPR legal bases
Where the GDPR applies, personal data may be processed for contract performance, compliance with legal obligations, legitimate interests, or consent, depending on the activity.
- Contract performance: processing orders, arranging delivery, handling returns, refunds and customer service.
- Legitimate interests: fraud prevention, service improvement, record keeping, security and protecting our business and customers where those interests are not overridden by individual rights.
- Legal obligations: tax, accounting, consumer-law and other compliance requirements.
- Consent: activities that require consent, including non-essential cookies where applicable.
Payment processing
Payments are processed through Stripe. Payment data may be transmitted to Stripe and relevant financial institutions or payment networks as necessary to authorize, process, settle, prevent fraud or refund a transaction.
Service providers
We may use service providers for hosting, order fulfillment, shipping, customer support, payment processing, security, technical operations and other functions needed to run the website and fulfill orders. Providers are given access only as appropriate for the relevant service and legal basis.
International data transfers
Because our services may involve international providers or cross-border fulfillment, personal data may be processed in countries other than your own. Where required, appropriate legal safeguards for international transfers are used.
Data retention
Personal data is retained for as long as reasonably necessary for the purpose for which it was collected, including order fulfillment, customer service, accounting, legal compliance, fraud prevention, dispute resolution and security. Retention periods may differ by data type and legal requirement.
Data subject rights
Where applicable, you may have the following rights under data-protection law:
- Access to personal data
- Rectification of inaccurate data
- Erasure in applicable circumstances
- Restriction of processing
- Data portability
- Objection to certain processing
- Withdrawal of consent at any time where processing is based on consent
- Complaint to a competent supervisory authority
To exercise a privacy right, contact privacy@zuryvan.com. We may request information reasonably necessary to verify and process the request.
Cookies and similar technologies
The website may use necessary, functional, analytics and advertising or marketing cookies where applicable. Non-essential cookies are handled in accordance with applicable consent requirements. See the Cookie Policy for more information.
Privacy contact
Questions about privacy, personal data, GDPR rights, consent or cookies should be sent to privacy@zuryvan.com.