Privacy Policy

1. Introduction

Welcome to Zafora (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, share and protect your personal information when you visit our website or shop with us in the UK. By using our services you agree to the practices described in this policy.

2. Data Controller

Zafora is the data controller for personal data collected via www.zafora.co.uk (and any associated platforms) in relation to your purchases and website usage.

3. What Information We Collect

We collect personal data you provide directly when you:

  • Create an account or profile

  • Make a purchase (online)

  • Contact customer service or otherwise inquire

  • Subscribe to marketing communications
    We also automatically collect information when you use our website, such as your IP address, device/browser information, browsing behaviour, and cookies.

4. How We Use Your Information

We use your personal data for the following purposes:

  • To process and manage your orders, payments, delivery, returns and customer support.

  • To manage and optimise our website, platforms and services.

  • To send you marketing communications (only where you have given your consent or where permitted by law).

  • To conduct surveys, promotions or profiling (where permitted).

  • To comply with legal obligations, protect our rights and facilitate any mergers or transfers of business.

5. Legal Basis for Processing

We rely on one or more of the following lawful bases to process your data:

  • Performance of a contract (for example, fulfilling your order).

  • Compliance with legal obligations.

  • Legitimate interests (for example, fraud prevention, improving our services).

  • Consent (for marketing or where required).

6. Sharing & Disclosure of Your Information

We may share your personal data with:

  • Service providers who assist us (e.g., delivery companies, payment processors, IT service providers) – always under our instruction and safeguards.

  • Affiliates and subsidiaries of Zafora (as required).

  • Law enforcement, regulatory or legal authorities when required by law or to protect our rights.

  • In the event of a business sale, merger, re-organisation or asset transfer, your personal data may be transferred or assigned.

Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place (such as standard contractual clauses).

7. How Long We Keep Your Information

We keep your personal data only as long as necessary to fulfil the purposes set out in this policy or as required by law. For example, we may retain your transaction records for a certain number of years for accounting or statutory limitation purposes.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to collect information on our website, including to recognise returning visitors, understanding how you use our site, and delivering marketing or tailored content. You may manage your preferences or disable cookies via your browser settings — please note that this may affect your ability to use certain features of our site.

9. Your Rights

Under UK and EU data protection laws you have the following rights in relation to your personal data:

  • Right of access — to request a copy of the data we hold about you.

  • Right to rectification — to correct inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”) in certain circumstances.

  • Right to restriction of processing.

  • Right to data portability — receive certain data in a structured, commonly used format.

  • Right to object — including to processing for direct marketing.

  • Right to withdraw consent (where processing is based on consent).

You may also lodge a complaint with the Information Commissioner’s Office (ICO) or other supervisory authority if you believe your data protection rights have been breached.

10. Links to Other Sites

Our website may include links to third-party websites, platforms, or tools. We have no control over their privacy practices or content and so we are not responsible for how they process your personal data. We encourage you to review their policies.

11. Changes to This Privacy Policy

We may update this policy from time to time. Any substantive changes will be published on our website with an updated effective date. We encourage you to review this policy regularly.

12. Contact Us

If you have any questions or requests regarding this Privacy Policy or how we process your personal data, please contact us at:

Email: support@zafora.co.uk