Privacy Policy
PRIVACY POLICY
This Privacy Policy describes how B.W.D. Online Ecommerce Ltd, trading as ZAROS, ("we", "us", "our") collects, uses, and shares your personal information when you visit or make a purchase from shopzaros.com (the "Site").
This Privacy Policy is compliant with the General Data Protection Regulation (GDPR), the Cyprus Law on the Protection of Natural Persons with Regard to the Processing of Personal Data (Law 125(I)/2018), and applicable EU consumer protection legislation.
PERSONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as "Device Information."
We collect Device Information using the following technologies:
Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies and how to disable cookies visit http://www.allaboutcookies.org
Log files track actions occurring on the Site and collect data including your IP address, browser type, internet service provider, referring and exit pages, and date and time stamps.
Web beacons, tags, and pixels are electronic files used to record information about how you browse the Site. We use Meta Pixel (Facebook Pixel) to track visitor activity and measure the effectiveness of our advertising campaigns. This may involve the collection and processing of data about your browsing behaviour on our Site.
Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you including your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as "Order Information."
When we talk about "Personal Information" in this Privacy Policy we are talking both about Device Information and Order Information.
LAWFUL BASIS FOR PROCESSING
Under GDPR we are required to identify our lawful basis for processing your personal data. We process your personal information on the following grounds:
Contract performance - to fulfil orders you place with us, process payments, arrange shipping, and provide customer service.
Legitimate interests - to improve our Site, prevent fraud, and where it does not override your rights and freedoms, to conduct marketing activities.
Consent - where you have explicitly opted in to receive marketing communications from us. You may withdraw consent at any time.
Legal obligation - where we are required to process your data to comply with applicable laws and regulations.
HOW WE USE YOUR PERSONAL INFORMATION
We use the Order Information we collect to fulfil any orders placed through the Site including processing your payment information, arranging for shipping, and providing you with invoices and order confirmations.
Additionally we use this Order Information to communicate with you, screen our orders for potential risk or fraud, and where you have given consent, provide you with information or advertising relating to our products or services.
We use the Device Information we collect to help us screen for potential risk and fraud, to improve and optimise our Site, to generate analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns.
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with the following third parties to help us operate our business:
Shopify - we use Shopify to power our online store. You can read more about how Shopify uses your Personal Information at https://www.shopify.com/legal/privacy
Google Analytics - we use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information at https://www.google.com/intl/en/policies/privacy and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout
Meta (Facebook and Instagram) - we use Meta Pixel to track visitor activity and run targeted advertising campaigns. You can read more about Meta's data practices at https://www.facebook.com/privacy/explanation
Klaviyo - we use Klaviyo to manage our email marketing. Your email address and purchase data may be shared with Klaviyo for this purpose. You can read Klaviyo's privacy policy at https://www.klaviyo.com/legal/privacy
Payment processors - we use Shopify Payments, Klarna, and PayPal to process payments. These processors handle your payment information in accordance with their own privacy policies and PCI DSS compliance standards.
We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
We do not sell your personal data to third parties.
BEHAVIOURAL ADVERTISING
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you based on your browsing behaviour and purchase history.
You can opt out of targeted advertising using the following links:
Facebook and Instagram - https://www.facebook.com/settings/?tab=ads
Google - https://www.google.com/settings/ads/anonymous
Additionally you can opt out of some of these services by visiting the Digital Advertising Alliance's opt out portal at http://optout.aboutads.info
COOKIES
Our Site uses cookies to enhance your browsing experience, remember your preferences, and help us understand how you use our Site.
We use the following types of cookies:
Strictly necessary cookies - essential for the Site to function. These cannot be disabled.
Analytics cookies - help us understand how visitors interact with our Site. These include Google Analytics cookies.
Marketing cookies - used to track visitors across websites to enable us to display relevant advertising. These include the Meta Pixel.
Preference cookies - remember your settings and preferences to improve your experience.
When you first visit our Site you will be presented with a cookie consent banner. You can choose to accept all cookies, reject non-essential cookies, or manage your cookie preferences individually. You can update your cookie preferences at any time by clearing your browser cookies and revisiting our Site.
DATA RETENTION
When you place an order through the Site we will maintain your Order Information for our records for a period of 7 years in accordance with Cyprus tax and accounting regulations unless and until you ask us to delete this information and there is no legal obligation requiring us to retain it.
Email marketing data is retained until you unsubscribe or request deletion.
Device Information collected through analytics and advertising pixels is retained in accordance with the respective third party provider's retention policies.
YOUR RIGHTS UNDER GDPR
If you are a resident of the European Union or European Economic Area you have the following rights regarding your personal data:
The right to access - you have the right to request a copy of the personal data we hold about you.
The right to rectification - you have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
The right to erasure - you have the right to request that we delete your personal data in certain circumstances.
The right to restrict processing - you have the right to request that we restrict the processing of your personal data in certain circumstances.
The right to data portability - you have the right to receive your personal data in a structured, commonly used and machine readable format.
The right to object - you have the right to object to the processing of your personal data where we are relying on legitimate interests as our lawful basis.
The right to withdraw consent - where we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.
The right to lodge a complaint - you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection or any other relevant supervisory authority.
To exercise any of these rights please contact us at info@shopzaros.com We will respond to your request within 30 days.
DATA TRANSFERS
Your personal information may be transferred to and processed in countries outside of the European Economic Area including the United States and Canada where our third party service providers operate. Where such transfers occur we ensure appropriate safeguards are in place in accordance with GDPR requirements including the use of Standard Contractual Clauses approved by the European Commission.
DO NOT TRACK
Please note that we do not alter our Site's data collection and use practices when we see a Do Not Track signal from your browser.
CHILDREN'S PRIVACY
Our Site is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16 please contact us immediately at info@shopzaros.com and we will take steps to delete such information.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time in order to reflect changes to our practices or for other operational, legal or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page with a revised effective date. We encourage you to review this Privacy Policy periodically.
CONTACT US
For more information about our privacy practices, if you have questions, if you would like to exercise your data protection rights, or if you would like to make a complaint, please contact us at:
Email: info@shopzaros.com
For complaints regarding our handling of your personal data you may also contact the Cyprus Commissioner for Personal Data Protection at http://www.dataprotection.gov.cy