Privacy policy

Privacy Policy

Last updated: [9/12/2026]

ZONIA & CO ("we", "us", "our") operates the website zoniaesstentialltd.com (the "Site"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or make a purchase on our Site, in line with UK data protection law (UK GDPR and the Data Protection Act 2018).

By using our Site, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

ZONIA & CO is a UK-registered online retailer selling health & beauty, toys, home & kitchen, office, sports & outdoors, and garden products.

Contact details:

  • Email: [altafmasooma104@gmail.com]
  • Address: [98 Pemdevon Road, Croydon, England, CR0 3QP]

If you have questions about this policy or how we handle your data, please contact us using the details above.

2. Information We Collect

We collect the following types of information:

Information you give us directly:

  • Name, email address, postal address, and phone number (when you place an order or contact us)
  • Payment information (processed securely by our payment provider — see Section 5)
  • Email address (if you subscribe to our newsletter)
  • Any messages or information you send us via our Contact page

Information collected automatically:

  • IP address, browser type, and device information
  • Pages visited, time spent on the Site, and referral source
  • Cookies and similar tracking technologies (see Section 6)

We do not knowingly collect information from children under 16.

3. How We Use Your Information

We use the information we collect to:

  • Process and fulfil your orders, including shipping and customer service
  • Communicate with you about your order (confirmations, shipping updates, support)
  • Send you marketing emails, where you have opted in (you can unsubscribe at any time)
  • Improve our Site, products, and customer experience
  • Detect and prevent fraud or misuse of our Site
  • Comply with legal obligations

4. Legal Basis for Processing (UK/EU Visitors)

We process your personal data under the following legal bases:

  • Contract – to fulfil an order you have placed with us
  • Consent – for marketing communications you have opted into
  • Legitimate interest – to improve our Site and prevent fraud
  • Legal obligation – where required by law (e.g. tax and accounting records)

5. Sharing Your Information

We do not sell your personal information. We may share your information with trusted third parties who help us operate our business, including:

  • Shopify – our e-commerce platform, which processes and stores order and customer data on our behalf
  • Payment processors (e.g. Shopify Payments, PayPal) – to securely process transactions. We do not store your full payment card details ourselves
  • Shipping and courier partners – to deliver your order
  • Email/marketing service providers – if and when we use one to send newsletters or promotions (this policy will be updated to name the specific provider once selected)

These third parties are only permitted to use your data to provide services to us and are required to keep it secure.

We may also disclose your information if required to do so by law, or to protect our rights, property, or safety.

6. Cookies

Our Site, hosted on Shopify, uses cookies and similar technologies to:

  • Keep items in your cart as you browse
  • Remember your preferences
  • Understand how visitors use our Site

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of the Site, such as your ability to complete a purchase.

If we add analytics or advertising tools (such as Google Analytics or Meta Pixel) in the future, this policy will be updated to reflect those tools and the choices available to you.

7. International Transfers

As we ship to the UK and EU, and use third-party service providers (such as Shopify, which may store data outside the UK/EEA), your information may be transferred to and processed in other countries. Where this happens, we take steps to ensure your data is protected in line with UK data protection law, including through the use of appropriate safeguards such as Standard Contractual Clauses where required.

8. Data Retention

We retain your personal information only for as long as necessary to:

  • Fulfil the purposes described in this policy
  • Comply with legal, accounting, or reporting requirements (e.g. tax records)

Order and account information is generally retained for as long as necessary to resolve disputes, enforce our policies, and comply with legal obligations.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict certain processing
  • Request a copy of your data in a portable format
  • Withdraw consent at any time (e.g. unsubscribe from marketing emails)

To exercise any of these rights, contact us at [insert email]. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Data Security

We use commercially reasonable technical and organizational measures to protect your personal information, including secure hosting through Shopify and encrypted checkout. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Note: This template is a general starting point based on UK GDPR. Please review with a legal professional to confirm full compliance, especially once analytics, advertising, or email marketing tools are added to the Site — those additions will need to be named specifically in this policy along with the relevant cookie/consent disclosures.