Privacy Policy

Last updated: 28 February 2026

Zofana operates this webshop and website, including all related information, content, features, tools, products, and services (the “Services”) to provide you with a personalized shopping experience.

This webshop is hosted by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, process, and share your personal data when you visit, use, make a purchase from, or otherwise interact with our Services.

If there is any conflict between our Terms & Conditions and this Privacy Policy, this Privacy Policy governs with respect to personal data.

By using our Services, you confirm that you have read and understood this Privacy Policy.

1. Personal Data We Collect

“Personal data” means any information that directly or indirectly identifies you.

We may collect the following categories of data:

Contact Information

Name
Billing and shipping address
Phone number
Email address

Payment Information

Payment method details
Transaction confirmations
(Note: Payment data is processed securely by third-party payment providers.)

Account Information

Username
Password
Preferences and saved settings

Transaction Data

Orders
Returns
Exchanges
Shopping cart data
Wishlist data
Purchase history

Communication Data

Customer service inquiries
Messages
Complaints or feedback

Device & Usage Data

IP address
Browser type
Device information
Network information
Website interaction and browsing behaviour

2. How We Collect Data

We collect personal data in the following ways:

Directly from you

When you place an order
Create an account
Subscribe to a newsletter
Contact customer support

Automatically

Through cookies and similar technologies when you use our website

From Third Parties

Shopify (hosting platform)
Payment providers
Shipping and logistics partners
Marketing and analytics partners

3. How We Use Your Data

We process personal data for the following purposes:

Providing and Improving Our Services

Processing orders and payments
Shipping products
Handling returns and warranty claims
Managing customer accounts
Providing customer support
Improving website functionality

Marketing & Advertising

Sending newsletters (if subscribed)
Showing personalised advertisements
Analysing shopping behaviour

You can unsubscribe from marketing emails at any time via the unsubscribe link.

Security & Fraud Prevention

Verifying transactions
Preventing fraud and abuse
Protecting accounts and website security

Legal Obligations

Complying with tax and accounting laws
Responding to lawful requests from authorities

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process personal data based on:

Performance of a contract (processing orders)
Legal obligations (tax and accounting requirements)
Legitimate interests (fraud prevention, website improvement)
Consent (marketing communications and certain cookies)

5. Sharing of Personal Data

We may share your personal data with:

Service Providers

Shopify (hosting and infrastructure)
Payment processors
Shipping providers
IT and marketing partners

Legal Authorities

If required by law or to protect our rights

We do not sell your personal data.

6. Shopify Hosting

Our store is hosted on Shopify Inc.

Shopify may process personal data outside the European Union or United Kingdom. Where international transfers occur, appropriate safeguards such as Standard Contractual Clauses (SCCs) are used to ensure an adequate level of protection.

More information can be found in Shopify’s Privacy Policy.

7. International Data Transfers

Your personal data may be transferred outside the EU/EEA.

Where this occurs, we ensure appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses or equivalent legal mechanisms.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:

Enable essential website functionality
Process orders
Analyse website performance
Provide personalised advertising

You can manage or disable cookies through your browser settings.

Where required by law, we request your consent before placing non-essential cookies.

9. Data Retention

We retain personal data only as long as necessary for:

Fulfilling orders
Meeting legal obligations
Resolving disputes
Enforcing agreements

When data is no longer required, it will be securely deleted or anonymised.

10. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against loss, misuse, unauthorised access, disclosure, or alteration.

However, no internet transmission is completely secure.

11. Your Rights Under GDPR

If you are located in the European Union, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Restrict processing
Object to processing
Data portability
Withdraw consent at any time
Lodge a complaint with your local data protection authority

You may exercise your rights by contacting:
📧 info@zofana.com

You may also file a complaint with your national supervisory authority.

For example:

Netherlands – Autoriteit Persoonsgegevens
https://autoriteitpersoonsgegevens.nl

Belgium – Gegevensbeschermingsautoriteit
https://www.gegevensbeschermingsautoriteit.be

12. Children

Our Services are not intended for children under 16 years of age.

We do not knowingly collect personal data from children under 16. If you believe that a child has provided personal data, please contact us so we can delete it.