Privacy Policy

We collect information you provide directly to us when you place an order, create an account, or contact us. This includes: • Personal identifiers: name, email address, phone number, and shipping address. • Payment information: card number, expiry date, and CVV — processed securely and never stored on our servers. • Device and usage data: IP address, browser type, and pages visited, used solely to improve your experience.

Your information is used exclusively to: • Process and fulfil your orders. • Send order confirmations and shipping updates. • Respond to your customer service enquiries. • Improve our website and product offerings. • Comply with legal obligations. We do not sell, rent, or share your personal data with third parties for marketing purposes.

All payment transactions are protected by 256-bit SSL (TLS 1.2+) encryption. Card details are transmitted directly to our PCI DSS-compliant payment processor and are never stored on our servers. We use tokenisation to handle repeat purchases securely. We accept Visa, Mastercard, Discover, and PayPal — all of which provide additional buyer protection.

Personal data at rest is encrypted using AES-256 encryption. Access to customer data is restricted to authorised personnel only, on a need-to-know basis. We conduct regular security audits and vulnerability assessments to maintain the integrity of our systems.

We use essential cookies to keep your shopping cart active and maintain your session. We also use analytics cookies (with your consent) to understand how visitors use our site. You can disable non-essential cookies in your browser settings at any time.

You have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data ("right to be forgotten"). • Withdraw consent for marketing communications at any time. • Lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at privacy@shopz3nza.com.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are retained for 7 years for tax and legal compliance. You may request earlier deletion of your account data at any time.

We use trusted third-party services to operate our store, including payment processors and shipping providers. These partners are contractually bound to protect your data and may only use it to provide services on our behalf. We do not allow them to use your data for their own marketing.

Our store is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email to the address associated with your account. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.