Privacy policy

Privacy Policy

Last updated: 12 July 2026.

Zaviloo operates this store and website to provide products, customer support and related services. Shopify provides the e-commerce platform. This Policy explains how personal data is collected, used and disclosed when you visit https://zaviloo.com, place an order, contact us or otherwise use the services.

1. Controller and contact

Zaviloo is the controller for the merchant-side processing described here. Full information about the publisher and operator is available in the Legal Notice. Privacy requests may be sent to contact@zaviloo.com.

2. Data we collect

• Contact and account data: name, email, telephone number, address, account credentials and communication preferences.
• Order data: products, order value, billing and delivery details, returns, refunds, warranty requests and customer-service history.
• Payment data: payment status, method and transaction identifiers. Full card details are processed by payment providers and are not normally accessible to Zaviloo.
• Device and usage data: IP address, browser, device identifiers, pages viewed, referring website, interactions, approximate location, cookie identifiers and timestamps.
• Communications and submitted content: messages, photographs supplied for support, reviews and other information you choose to provide.
• Fraud and security data: indicators used to protect transactions, accounts and the website.

3. Sources

Data is collected directly from you, automatically through the website, and from service providers such as Shopify, payment processors, delivery partners, fraud-prevention providers, analytics providers and customer-support tools.

4. Purposes and legal bases

• To process orders, payments, delivery, returns and warranties where necessary to perform a contract.
• To answer enquiries and manage accounts, based on contract performance or legitimate interests.
• To prevent fraud, secure the services and enforce terms, based on legal obligations and legitimate interests.
• To keep tax, accounting and transaction records where required by law.
• To improve the store, understand performance and diagnose faults, based on legitimate interests or consent where required.
• To send marketing where you have consented or where otherwise legally permitted. You may unsubscribe at any time.
• To comply with legal requests, protect rights and resolve disputes.

5. Disclosure

Personal data may be disclosed only as reasonably necessary to Shopify and its group companies; payment processors; warehouses, suppliers and fulfilment partners; postal and courier services; IT, hosting, analytics, advertising and support providers; professional advisers; public authorities; and a purchaser or successor in connection with a business transaction. Providers are required to process data for authorised purposes and with appropriate safeguards.

6. Shopify

The store is powered by Shopify. Shopify processes customer data to provide the platform, checkout, security and related services and may act as an independent controller for some activities. More information is available in Shopify's consumer privacy notice at https://www.shopify.com/legal/privacy/consumers.

7. Cookies and similar technologies

The website may use strictly necessary cookies for checkout, security and preferences; analytics cookies to understand use; functional cookies to provide optional features; and advertising cookies to measure or personalise campaigns. Non-essential cookies are used only where permitted and, where required, after consent. You can use the cookie banner or browser settings to change preferences. Blocking necessary cookies may prevent checkout or account functions.

8. Advertising and marketing

Where enabled and lawfully permitted, Zaviloo and advertising partners may use identifiers and interaction data to measure campaigns or show relevant advertising. You can withdraw consent through cookie settings and unsubscribe links. Zaviloo does not sell personal data for money.

9. International transfers

Shopify and other providers may process data outside France, the EEA or the UK, including in Canada and the United States. Transfers use legally recognised safeguards where required, such as adequacy decisions or standard contractual clauses.

10. Retention

Data is retained only as long as necessary for the purposes above. Order and accounting records may generally be retained for up to 10 years where required by French law. Support and dispute records are retained for the period needed to resolve the matter and establish legal claims. Marketing data is kept until consent is withdrawn or it is no longer relevant. Cookie duration depends on the cookie and is shown where available in cookie settings.

11. Security

Reasonable technical and organisational measures are used to protect personal data. No transmission or storage method is completely secure, so absolute security cannot be guaranteed. Customers should protect account credentials and contact us if unauthorised activity is suspected.

12. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; and object to direct marketing. Rights may be limited where data must be retained by law or is needed for legal claims. Requests should be sent to contact@zaviloo.com. Identity verification may be required.

13. Complaints

Please contact Zaviloo first so we can investigate. You may also complain to the French data-protection authority, the CNIL (www.cnil.fr), or, where the UK GDPR applies, the UK Information Commissioner's Office (www.ico.org.uk).

14. Children

The services are not directed to children under 16 and Zaviloo does not knowingly collect their data. Contact us if you believe a child has provided personal data.

15. Third-party links

External websites have their own privacy practices. Zaviloo is not responsible for their content or privacy notices.

16. Changes

This Policy may be updated to reflect legal, technical or operational changes. The revised date will appear at the top.