ZON Collection ("ZON", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share information when you visit www.zoncollection.com (the "Site") or purchase our products. By using the Site, you agree to the collection and use of information as described in this policy.

ZON is incorporated in the Netherlands and acts as the data controller for personal data collected through our website. We are regulated by the EU General Data Protection Regulation (GDPR), the UK GDPR (for customers in the United Kingdom), and the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (for customers in Australia).

TYPES OF INFORMATION WE COLLECT

Unless you voluntarily provide personal information to us, we will not collect it. When you do provide it, we may collect the following:

Order & Account Information

• Full name, email address, shipping and billing address
• Order history and purchase details
• Account login credentials if you create an account

Payment Information

Payment card details are processed securely by Shopify Payments. We do not store full card numbers on our systems.

Technical & Browsing Information

When you visit our Site, we automatically collect certain information, including your IP address, browser type, device type, operating system, pages visited, time spent on the Site, referral source, and session data. This information is collected via cookies and similar tracking technologies.

Communications & Social Media

• Emails, messages, and enquiries you send us
• Marketing preferences and consent records
• If you interact with our social media pages or tag us in posts, we may receive your handle, profile information, or publicly shared content about our products

USAGE OF INFORMATION

We may use the information we collect to:

• Process and fulfil your orders, including shipping and returns
• Send transactional emails such as order confirmations and shipping updates
• Send marketing communications where you have opted in
• Improve our website and customer experience through analytics
• Detect, investigate, and prevent fraudulent transactions
• Comply with our legal and regulatory obligations
• Respond to your enquiries and support requests

LEGAL BASIS FOR PROCESSING

As an EU-based business, we process your personal data under the following legal bases under GDPR Article 6:

• Contract performance – to process your order and deliver your purchase
• Legitimate interests – fraud prevention, site security, and analytics, where our interests are not overridden by your rights
• Legal obligation – tax records, accounting, and regulatory compliance
• Consent – marketing emails and non-essential cookies; you may withdraw consent at any time

USE OF COOKIES AND TRACKING TECHNOLOGIES

Our Site uses cookies and similar tracking technologies, including pixel tags and web beacons. These technologies collect information automatically when you visit our Site and help us operate and improve it.

Strictly Necessary Cookies

Essential for the website and checkout to function. These cannot be disabled.

Analytics Cookies

We use Google Analytics to understand how visitors use our Site — which pages are visited, how long people stay, and how they found us. This may involve the transfer of data to Google’s servers in the United States. To opt out, visit: https://tools.google.com/dlpage/gaoptout

Marketing & Advertising Cookies

We use Meta Pixel (Facebook/Instagram) to measure the performance of our advertising and to help show relevant ads on social media. This may involve the transfer of data to Meta’s servers in the United States. Some of these technologies may also track your activity across other websites to deliver interest-based advertising.

Managing Your Cookie Preferences

When you first visit our Site, you will see a cookie consent banner. You may accept or decline non-essential cookies and update your preferences at any time via the cookie settings link in our website footer. Most browsers also allow you to manage cookies directly through their settings.

DISCLOSURE OF INFORMATION

We share your personal data only with trusted service providers who process it on our behalf and under our instructions. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

• Shopify Inc. – e-commerce platform and payment processing (Canada/US)
• Klaviyo / Mailchimp – email marketing platform (US-based)
• Google LLC – analytics via Google Analytics (US-based)
• Meta Platforms Inc. – advertising measurement via Meta Pixel (US-based)
• Shipping carriers – your name and address are shared only as required to fulfil your order

We may also disclose your information where required by law, court order, or in response to a valid request from a government authority, or where necessary to protect the rights, safety, or property of ZON, our customers, or others.

INTERNATIONAL TRANSFERS OF INFORMATION

ZON is based in the Netherlands (EU). Some of our service providers operate outside the European Economic Area (EEA), including in the United States. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

UK customers: We comply with the UK GDPR. Transfers outside the UK rely on the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Australian customers: Your data may be stored or processed outside Australia. We take steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.

You may request a copy of the applicable transfer safeguards by contacting us at info@zoncollection.com.

MARKETING COMMUNICATIONS

We will only send you marketing emails if you have opted in to receive them — at checkout, via a sign-up form, or through another explicit consent mechanism. You may unsubscribe at any time by clicking the “Unsubscribe” link in any email, or by contacting us at info@zoncollection.com. Unsubscribing from marketing communications does not affect transactional emails related to your active orders.

SMS

If we offer SMS marketing in the future, we will only contact you with your explicit consent. You may opt out at any time by replying STOP. We will not share your SMS opt-in status with any third party for unrelated purposes.

RETENTION OF INFORMATION

• Order and account data: 7 years, in line with Dutch and EU tax and accounting law
• Marketing consent records: duration of subscription plus 3 years
• Analytics data: per provider settings (typically 14 months for Google Analytics)
• Customer service communications: 3 years after last interaction

When information is no longer required, we securely delete or anonymise it. Retention periods are determined by how long the data is needed to provide our services, the nature of the information, and any applicable legal or contractual obligations.

PRIVACY RIGHTS

EU / EEA Residents

Under the GDPR, you have the right to access, correct, or request deletion of your personal data; restrict or object to its processing; receive it in a portable format; and withdraw consent at any time. To lodge a complaint, contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at https://autoriteitpersoonsgegevens.nl

UK Residents

You have equivalent rights under the UK GDPR. Complaints may be directed to the Information Commissioner’s Office (ICO) at https://ico.org.uk

Australian Residents

Under the Privacy Act 1988, you have the right to access and correct your personal information, and to make a complaint to the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au

To exercise any of these rights, contact us at info@zoncollection.com. We will respond within 30 days and may need to verify your identity. We will never treat you differently for exercising your privacy rights.

DO NOT TRACK

Our Site does not respond to browser Do Not Track (DNT) signals, as there is no consistent industry standard for interpreting them. We do, however, recognise the Global Privacy Control (GPC) signal where technically feasible. If your browser sends a GPC signal, we treat it as a request to opt out of data sharing for targeted advertising on that browser. For more information, visit https://globalprivacycontrol.org

UNDER AGE 16

Our Site is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently done so, please contact us at info@zoncollection.com and we will delete it promptly.

SECURITY

We maintain appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, disclosure, or misuse. These include SSL/TLS encryption and restricted access controls. No internet transmission is completely secure, but we take every reasonable precaution to protect your data.

ZON will never contact you by email requesting your password, credit card number, or other sensitive personal information. If you receive such a request, do not respond and please report it to info@zoncollection.com.

LINKS TO OTHER SITES

Our Site may contain links to third-party websites. This Privacy Policy applies only to www.zoncollection.com. We are not responsible for the privacy practices or content of external sites and encourage you to review their policies before providing any personal information.

POLICY UPDATES

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date at the top of this page and, where appropriate, by email or notice on our website. We encourage you to review this policy periodically.

CONTACT US

For any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data, please contact:

ZON Collection

info@zoncollection.com

67 Tollensstraat, 1053RS Amsterdam, The Netherlands