Privacy Policy

Last updated: October 2, 2026

Zonivas operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Zonivas is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

---

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

• Contact details: Including your name, billing address, shipping address, phone number, and email address.
• Financial information: Including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, and payment confirmations.
• Account information: Including your username, password, security credentials, preferences, and saved settings.
• Transaction information: Including the items you view, add to cart, add to wishlist, purchase, return, exchange, or cancel, alongside your past order history.
• Communications: Any details you include when contacting customer support or communicating with us directly.
• Device & Usage information: Including your IP address, browser type, network connection details, unique identifiers, and browsing patterns across our store.

Personal Information Sources

We collect personal information through the following channels:

• Directly from you: When you place an order, create an account, communicate with our support desk, or submit personalization artwork.
• Automatically: Through standard cookies, tracking pixels, and session scripts when you navigate our site.
• Service providers: From technical partners that support IT infrastructure, secure payment gateways, and fulfillment logistics.

---

How We Use Your Personal Information

• Provide, Tailor, and Improve Services: To process payments, laser-engrave customized products, facilitate shipment delivery, manage returns, and enhance your shopping experience.
• Marketing and Advertising: To notify you of relevant product updates or promotions (subject to your opt-in consent where required by GDPR).
• Security and Fraud Prevention: To authenticate transactions, inspect potential payment fraud, and protect store safety.
• Customer Support: To answer inquiries, provide shipment tracking, and process order updates.
• Legal Compliance: To satisfy tax documentation requirements, accounting standards, and lawful governmental requests.

How We Disclose Personal Information

We may share your personal data with trusted third parties strictly for lawful operational needs:

• With Shopify and infrastructure vendors (payment gateways, cloud hosting, couriers).
• With professional logistics and postal couriers to execute doorstep delivery.
• In connection with business restructuring, legal audits, or statutory regulatory demands.

---

European Economic Area (EEA) & UK Rights

If you reside within the European Union or United Kingdom, you hold specific statutory rights under the General Data Protection Regulation (GDPR):

• Right of Access & Portability: Request confirmation and copies of personal data held about you.
• Right to Rectification: Request correction of inaccurate personal details.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data when no longer needed for legal or tax fulfillment.
• Right to Object & Restrict Processing: Request suspension or restriction of specific data handling operations.
• Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting prior lawful processing.

International Transfers & Retention

Personal data transmitted via Shopify or cloud hosting providers may be transferred across international borders. When data leaves the European Economic Area, transfers are governed under the European Commission's standard contractual clauses (SCCs) to ensure equivalent data security. We retain your information only as long as necessary to maintain your account, fulfill active orders, resolve disputes, and comply with Austrian commercial and tax law retention mandates.

---

Contact Information & Data Controller

For questions regarding our privacy practices, data deletion requests, or to exercise your GDPR privacy rights, please reach out to our designated Data Controller: