Privacy Policy

This Privacy Policy explains how Zurya ("we", "us", "our") collects, uses, shares, and protects your personal data when you visit our website ("Website") or purchase products through it ("Products"). This policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may revise this Privacy Policy from time to time by updating this page. Please check back periodically for any changes.

1. Who We Are

For the purposes of UK data protection law, Zurya is the data controller responsible for your personal data collected through the Website.

2. Who This Policy Applies To

This policy applies to the personal data of:

• Visitors — individuals who browse our Website;
• Customers — individuals who purchase, request, or receive our Products;
• Contacts — individuals who contact us via our Website, email, or other means.

3. What We Collect

We may collect, store, use, and share the following categories of personal data:

From Visitors:

• IP address and other unique device identifiers (required for the Website to function)

From Customers:

• Username and account password (if you register an account)
• Full name (required)
• Email address (required)
• Billing address (required)
• Delivery address (required)
• Payment information (required)
• Telephone number

From Contacts:

• Full name (required)
• Email address (required)
• Any other personal data you choose to provide to us

If you do not provide the personal data marked as required, we may be unable to give you access to the Website, deliver your order, or respond to your enquiry.

4. Why We Use Your Data, and Our Lawful Basis

UK GDPR requires us to have a valid legal basis for each way we use your data. Here is how that applies to us:

We will not use your personal data for a new purpose that is materially different from the purposes above unless we have a valid lawful basis to do so, and we will notify you of this change where required.

5. Who We Share Your Data With

We may share your personal data with:

• Our employees, officers, and group companies;
• Shopify Inc. and its affiliates, who provide the e-commerce platform that operates our Website and processes your orders;
• PayPal Holdings Inc. and other payment processors we use to handle your payment transactions;
• Suppliers and fulfilment partners who dispatch Products to you;
• Other service providers acting on our behalf, such as IT and hosting providers, data analytics providers, and cloud service providers;
• Our insurers, bankers, and professional advisors (legal, financial, accounting);
• Law enforcement, regulators, or other third parties where required by law, or to protect against fraud;
• A prospective buyer or successor in the event of a merger, acquisition, or sale of some or all of our business.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data.

If you make a payment via a payment processor such as PayPal, you also enter into a separate agreement directly with that processor, governed by its own privacy policy — we recommend you review it.

6. International Transfers

As some of our suppliers and service providers are located outside the UK (including outside the UK/EU), your personal data may be transferred internationally. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or reliance on an adequacy decision, to ensure your data is protected to UK standards wherever it is processed.

7. Cookies

Our use of cookies is also described in our Cookie Policy, which forms part of this Privacy Policy.

• A cookie is a small data file sent to your device when you visit our Website.
• We use cookies to make our Website work properly, remember your preferences, analyse how you use our Website, and understand what products may interest you.
• We use both session cookies (deleted when you close your browser) and persistent cookies (which remain until they expire or you delete them).
• Our cookies fall into three categories: necessary cookies (required for the Website to function), functionality cookies (remember your choices), and performance/analytics cookies (help us improve the Website).
• We use a limited number of third-party cookies, listed in our Cookie Policy.
• You can manage or withdraw your consent to cookies at any time via your browser settings, or via the cookie preference tool on our Website (where available). Blocking cookies may affect how the Website functions.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, including to meet any legal, accounting, or reporting requirements. As a general guide:

• Order and transaction data is retained for as long as necessary to comply with UK tax and accounting obligations (typically up to 6 years).
• Account data is retained for as long as your account remains active, plus a reasonable period afterwards.
• Marketing data is retained until you withdraw your consent or unsubscribe.

Once the relevant retention period ends, we will securely delete or anonymise your personal data.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectification — ask us to correct inaccurate or incomplete data;
• Erasure — ask us to delete your data in certain circumstances;
• Restriction — ask us to limit how we use your data in certain circumstances;
• Object to our use of your data, including for direct marketing (see below);
• Data portability — receive your data in a portable format, or have it transferred to another provider, where technically feasible;
• Withdraw consent at any time, where we rely on consent as our lawful basis (this does not affect the lawfulness of processing before withdrawal).

To exercise any of these rights, please contact us at service@zuryafashion.com. We may need to verify your identity before responding, and we will respond within one month as required by law. We do not charge a fee for most requests, though we may charge a reasonable fee for manifestly unfounded, repetitive, or excessive requests.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe we have not handled your data properly.

10. Direct Marketing

We will only use your personal data (your name and email address) to send you direct marketing — such as offers, product updates, and promotions — where you have given us your consent to do so, in line with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

You can withdraw your consent and opt out of marketing communications at any time by:

• Clicking "unsubscribe" in any marketing email we send you; or
• Emailing us at service@zuryafashion.com.

Opting out of marketing will not affect non-marketing communications relating to your orders (such as order confirmations or dispatch notifications), which we send as part of fulfilling your contract with us.

11. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact us:

Email: service@zuryafashion.com Response time: Within 24 hours

Trade name: Zurya

We sell exclusively to consumers in the United Kingdom; accordingly, our contracts and this Privacy Policy are governed by UK law.