Privacy policy
Last updated: 11 August 2026
This Privacy Policy describes how Zylva (“Zylva”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or use zylvajwl.com (the “Site”), make a purchase, or otherwise communicate with us (collectively, the “Services”). In this policy, “you” and “your” means you as a customer, website visitor, or another individual whose information we have collected.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.
What Personal Information We Collect
The information we collect depends on how you interact with the Site. When we use the term “personal information”, we mean information that identifies, relates to, describes, or can be associated with you.
Information you give us directly:
Contact details, including your name, address, phone number, and email address.
Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number.
Account information, including your username, password, and other information used for account security.
Customer support information, including anything you choose to include when you contact us.
Some features of the Services require you to provide this information. You may choose not to, but this may prevent you from using those features.
Information we collect automatically:
We may automatically collect information about your interaction with the Services (“Usage Data”) using cookies, pixels, and similar technologies. Usage Data may include device information, browser information, information about your network connection, your IP address, and other information about how you use the Site.
Information we obtain from third parties:
Companies that support our Site and Services, such as Shopify.
Our payment processors, who collect payment information (such as card or bank details and billing address) in order to process your payment and fulfil your order.
Any information we obtain from third parties will be treated in accordance with this Privacy Policy.
How We Use Your Personal Information
Providing products and services. We use your personal information to perform our contract with you: to process payments, fulfil and ship your orders, send notifications about your account, purchases, returns, exchanges, or other transactions, create and manage your account, and handle returns and exchanges.
Marketing. Where you have given us permission, or where permitted by law for existing customers, we may send you marketing communications by email or text message about our products and offers. You can withdraw your consent or unsubscribe at any time using the unsubscribe link in any marketing email, by replying STOP to any marketing text message, or by contacting us. Withdrawing consent does not affect marketing we sent before you withdrew it, and we will still send you non-marketing messages about orders you have placed.
Security and fraud prevention. We use your personal information to detect, investigate, and act on possible fraudulent, illegal, or malicious activity. If you create an account, you are responsible for keeping your login details safe, and you should contact us immediately if you believe your account has been compromised. Our legal basis for this is our legitimate interest in keeping the Site secure for you and our other customers (Art. 6(1)(f) UK GDPR / GDPR).
Communicating with you and improving our Services. We use your personal information to provide customer support and improve what we offer. Our legal basis for this is our legitimate interest in being responsive to you and maintaining our business relationship with you (Art. 6(1)(f) UK GDPR / GDPR).
Cookies
Like most websites, we use cookies on our Site. For details of the cookies used to power our store through Shopify, see https://www.shopify.com/legal/cookies. We use cookies to run and improve the Site (including remembering your actions and preferences) and to understand how visitors use the Site, in our legitimate interest in administering and improving the Services.
Most browsers accept cookies automatically, but you can set your browser to remove or reject them. Blocking cookies may cause parts of the Site to work incorrectly or become unavailable.
How We Disclose Personal Information
We may disclose your personal information in the following circumstances:
With vendors and third parties who perform services on our behalf, such as payment processing, fulfilment and shipping, IT and website hosting, data analytics, and customer support.
Where you direct or ask us to, such as to ship your order, or through your use of social media widgets or login integrations.
In connection with a business transaction such as a merger or insolvency, to comply with legal obligations (including responding to lawful requests from authorities), to enforce our terms, and to protect our rights or the rights of others.
Third Party Websites and Links
Our Site may link to websites or platforms operated by third parties. If you follow those links, you should review their privacy and security policies and their terms. We are not responsible for the privacy or security of those sites, or for the accuracy of information found on them. Including a link does not imply endorsement.
Children’s Data
The Services are not intended for children, and we do not knowingly collect personal information from anyone under 16. If you are a parent or guardian of a child who has provided us with their personal information, please contact us using the details below and we will delete it.
Security and Retention of Your Information
No security measures are perfect, and information you send to us may not be secure while in transit. We recommend you do not use insecure channels to send us sensitive or confidential information.
How long we keep your personal information depends on why we hold it. We keep order and transaction records for six years after the end of the relevant tax year in order to meet our legal and accounting obligations. We keep marketing contact details until you unsubscribe or withdraw your consent, and customer support correspondence for as long as needed to resolve your query and handle any related dispute.
Your Rights
Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute, may apply only in certain circumstances, and in some cases we may decline a request where the law permits.
Access: to request a copy of the personal information we hold about you and details of how we use and share it.
Deletion: to request that we delete personal information we hold about you.
Correction: to request that we correct inaccurate personal information.
Portability: to receive a copy of your personal information and, in certain circumstances, ask us to transfer it to another organisation.
Restriction: to ask us to stop or restrict our processing of your personal information.
Objection: to object to processing we carry out on the basis of our legitimate interests, including for direct marketing.
Withdrawal of consent: where we rely on your consent, you may withdraw it at any time.
Marketing preferences: you may opt out of marketing at any time using the unsubscribe link in any marketing email or by replying STOP to a marketing text. If you opt out, we will still send you messages about orders you have placed.
You can exercise any of these rights by contacting us using the details below. We may need to verify your identity, for example by confirming the email address associated with your order, before we respond. You may authorise someone to make a request on your behalf, but we will need proof that you have authorised them. We will respond within the time required by law.
We will not treat you differently for exercising any of these rights.
Complaints
If you have a complaint about how we handle your personal information, please contact us first using the details below so we can try to resolve it.
If you are not satisfied with our response, you have the right to complain to a data protection authority. If you are in the UK, that is the Information Commissioner’s Office (ico.org.uk). If you are in the EEA, you may complain to the data protection authority in your country of residence, place of work, or where the issue occurred.
International Transfers
We may transfer, store, and process your personal information outside the country you live in, including by our third-party service providers.
Where we transfer personal information out of the UK or the EEA, we rely on recognised transfer mechanisms such as the UK International Data Transfer Agreement or Addendum, or the European Commission’s Standard Contractual Clauses, unless the destination country has been found to provide an adequate level of protection.
Contact
If you have any questions about this Privacy Policy or our privacy practices, or would like to exercise any of your rights, please email us at zylva504@gmail.com.
For the purposes of applicable data protection law, Zylva is the data controller of your personal information.