Privacy policy
In accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we inform you about how we process your personal data.
Data controller
Company: Eterna by Zahara LTD
Registered office: 14-2 Argyle Walk, London WC1H 8HA, United Kingdom
Email: customer@byzahara.com
What do we process your data for, and on what legal basis?
Managing your orders, payments and deliveries — Performance of the sales contract
Issuing invoices and complying with tax and accounting obligations — Legal obligation
Responding to your questions and requests — Consent / legitimate interest
Sending you marketing communications and newsletters — Your consent
Preventing payment fraud — Legitimate interest
How long do we keep your data? For as long as our business relationship lasts and, afterwards, for the periods required by law (for tax and accounting purposes, typically up to 6 years). Data used for marketing communications is kept until you withdraw your consent.
Who do we share your data with? We do not share your data with third parties except where legally required. The following service providers (data processors) support our store's operations:
Platform and hosting: Shopify (Shopify International Limited, Ireland).
Payment gateways: Shopify Payments and PayPal.
Delivery: our shipping carrier(s).
Where applicable, invoicing/accounting and email marketing service providers.
Some providers may process data outside the UK; in such cases, international transfers are carried out with appropriate safeguards under UK data protection law (adequacy regulations, or the UK's International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses).
What are your rights? You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to customer@byzahara.com, stating the right you wish to exercise and enclosing a copy of your ID. You may withdraw your consent at any time and lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
Children's data. Our products and services are not directed at children under 16. We do not knowingly collect data from children without the consent of a parent or guardian.
Security. We apply appropriate technical and organisational measures to keep your data secure and prevent unauthorised alteration, loss or access.
Cookies. This website uses cookies. Please see our Cookie Policy for further information.