Privacy Policy

1. Who We Are

ZEVLONA operates the website zevlona.com. When we refer to "we", "our", or "us" in this policy, we mean ZEVLONA.

We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR 2016/679), and applicable data protection laws.

2. Data We Collect

When you use our website or place an order, we may collect:

• Identity data: First name, last name
• Contact data: Email address, shipping address, phone number
• Transaction data: Payment details (processed securely by Shopify Payments — we never store card data), order history
• Technical data: IP address, browser type, operating system, referring URLs, pages visited, time on site
• Usage data: How you interact with our website, products viewed, items added to cart
• Marketing data: Email open rates, click-through data (if you opt in to marketing emails)

3. How We Use Your Data

We use your data to:

• Process and fulfil your orders, including notifying you of order status
• Manage your account and customer relationship
• Process payments and prevent fraud
• Send transactional emails (order confirmation, shipping updates)
• Send marketing emails, if you have opted in (you can unsubscribe at any time)
• Improve our website and product offering through analytics
• Comply with legal obligations

4. Legal Basis for Processing

We process your data on the following legal bases:

• Contract: To fulfil your order and provide our services
• Legitimate interests: To improve our services and prevent fraud
• Consent: For marketing communications — you can withdraw consent at any time
• Legal obligation: To comply with applicable laws

5. Cookies & Tracking

We use cookies and similar tracking technologies to operate our website, analyse traffic, and support advertising. These include:

• Essential cookies: Required for the website to function (shopping cart, checkout)
• Analytics cookies: Google Analytics (GA4) to understand how visitors use the site
• Advertising cookies: Meta Pixel and Meta Conversions API to measure ad performance and personalise ads

You can manage your cookie preferences at any time via the cookie banner on our site or your browser settings.

6. Who We Share Your Data With

We share data only with trusted third parties necessary to operate our business:

• Shopify Inc. — our ecommerce platform, which processes payments and stores order data
• Shipping carriers and fulfilment partners — to deliver your order (including CJ Dropshipping for fulfilment)
• Meta Platforms Inc. — for advertising measurement via Meta Pixel and Conversions API
• Google LLC — for analytics via Google Analytics 4
• Klaviyo Inc. — for email marketing (only if you have opted in)
• Legal authorities — where required by law

We do not sell your personal data to third parties.

7. International Data Transfers

Some of our service providers are based outside the UK and EU (e.g., the United States). Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by relevant authorities.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy. Order and transaction data is typically kept for 7 years to comply with financial regulations. Marketing data is retained until you unsubscribe.

9. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — ask us to restrict processing of your data
• Portability — request your data in a portable format
• Objection — object to processing based on legitimate interests or for marketing
• Withdraw consent — for any processing based on consent (e.g., marketing emails)

To exercise your rights, email us at hello@zevlona.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All payment processing is handled by Shopify Payments using PCI DSS-compliant systems — we never store card details.

11. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you are in the UK and believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

If you are in the EU, you may lodge a complaint with your local data protection authority.