Privacy Policy

Privacy Policy – Zorah Boutique

Last updated: 28 October 2026

1. Who We Are

Zorah Boutique is operated by IV-COM, a sole proprietorship registered in the Netherlands. IV-COM is the data controller responsible for personal information processed for the operation of Zorah Boutique.

Business name: IV-COM
Store name: Zorah Boutique
Address: Puccinilaan 10, 2151 GC Nieuw-Vennep, The Netherlands
Dutch Chamber of Commerce (KVK) number: 95969330
Dutch VAT number: NL005179296B50
Privacy contact: support@zorahboutique.com

This policy explains how we handle personal information when you visit our store, place an order, subscribe to marketing or contact us.

Applicable legislation includes the EU General Data Protection Regulation and, where applicable, the UK General Data Protection Regulation and Data Protection Act 2018, as amended.

2. Information We Collect

Depending on your interactions with us, we collect:

  • Contact details: your name, email address, telephone number if provided, and billing and delivery addresses.

  • Order information: products purchased, selected sizes and colours, order value, payment status, and delivery, return and refund details.

  • Payment information: transaction information available to us from your payment provider. Payment providers process your payment credentials; we generally do not receive or store complete payment-card details.

  • Customer-service information: messages, enquiries and information you provide when requesting assistance.

  • Technical and usage information: IP address, browser and device information, cookie identifiers, pages visited and interactions with our store, depending on the technologies used and your privacy choices.

  • Preferences: marketing subscriptions, consent records, and communication and cookie preferences.

  • Security information: information used to identify suspicious transactions, prevent fraud and protect our store.

We collect information directly from you, automatically through our website, and from providers involved in payments, store operation, security and delivery.

3. How We Use Your Information and Our Legal Grounds

We process personal information for the following purposes:

Orders and Related Services — Contract

To process payments, fulfil and deliver orders, send order updates, and manage returns, refunds and purchase-related enquiries.

You must provide certain contact, delivery and payment information for us to complete your order. Optional marketing consent is not a condition of purchase.

Legal Compliance — Legal Obligation

To retain required tax and accounting records, comply with applicable legislation and respond to lawful requests from authorities.

Security and Business Administration — Legitimate Interests

To protect our website and customers, prevent fraud, manage our operations, improve customer service, and establish or defend legal claims.

We rely on legitimate interests only where these interests are not overridden by your rights and freedoms.

Optional Tracking and Marketing — Consent Where Required

To use optional analytics and advertising technologies and send marketing communications where consent is required.

Where applicable law permits marketing to existing customers without separate consent, we provide an opportunity to opt out when collecting the details and in each marketing message.

Visiting our website does not itself constitute consent to optional tracking.

You can withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing.

4. Shopify and Other Recipients

Shopify hosts our store and processes personal information to provide the ecommerce platform, checkout and related services.

Where necessary, we also share relevant information with:

  • Payment providers.

  • Suppliers, warehouses and fulfilment partners.

  • Delivery and tracking providers.

  • Website, IT, email and customer-service providers.

  • Security and fraud-prevention providers.

  • Professional advisers and public authorities where legally justified.

Where optional analytics or advertising services are enabled, relevant information may be shared with those providers, subject to applicable consent requirements and your privacy choices.

Providers acting on our behalf are subject to appropriate contractual obligations. Some providers act as independent data controllers for certain purposes.

Shopify explains its processing in its Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

5. Cookies and Similar Technologies

Our website uses essential cookies and similar technologies for functions such as the shopping cart, checkout and security.

Optional technologies may support analytics, saved preferences, personalisation or advertising.

Where consent is required, optional technologies are used only after you consent. You can accept, reject or change available choices through our website’s cookie controls.

You can also delete or block cookies through your browser, although blocking essential cookies may affect store functionality.

Withdrawing consent does not affect earlier lawful processing.

6. International Processing and Transfers

Our business is based in the Netherlands. Shopify and other providers may process personal information in the UK, the European Economic Area, the United States, Canada or other countries.

Where international transfers are restricted under applicable law, appropriate safeguards are required. Depending on the transfer, these may include an applicable adequacy decision, EU Standard Contractual Clauses, the UK International Data Transfer Agreement or the UK Addendum to EU Standard Contractual Clauses.

Contact support@zorahboutique.com for information about safeguards applicable to your information and to request a copy, subject to necessary redactions.

7. Retention

We retain personal information only for as long as necessary for the purposes described in this policy.

Retention periods are determined by:

  • The time needed to fulfil orders and handle returns, refunds and enquiries.

  • Applicable tax and accounting recordkeeping obligations.

  • Relevant time limits for legal claims.

  • Unresolved disputes, security incidents or fraud investigations.

  • Your marketing preferences and withdrawal of consent.

We may retain limited information to ensure we respect unsubscribe requests.

When information is no longer needed, we delete or anonymise it, subject to legal obligations and secure backup cycles.

8. Your Rights

Depending on applicable law and the circumstances, you may have the right to:

  • Access your personal information.

  • Correct inaccurate or incomplete information.

  • Request erasure.

  • Request restriction of processing.

  • Object to processing based on legitimate interests.

  • Object to direct marketing at any time.

  • Receive or transfer qualifying information in a portable format.

  • Withdraw consent.

  • Exercise applicable rights concerning solely automated decisions with legal or similarly significant effects.

  • Complain to a relevant data protection authority.

To make a request, email support@zorahboutique.com.

We may request information reasonably necessary to verify your identity. Requests are normally free of charge, and we normally respond within one calendar month, subject to lawful extensions or other permitted adjustments. We will explain any applicable extension.

9. Privacy Complaints

If you are concerned about how we use your information, email support@zorahboutique.com or write to our business address.

We will investigate, keep you informed and explain the outcome without undue delay.

You may also complain to a relevant supervisory authority:

United Kingdom — Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/

The Netherlands — Autoriteit Persoonsgegevens:
https://www.autoriteitpersoonsgegevens.nl/

10. Marketing Communications

You can unsubscribe from promotional emails using the unsubscribe link in the message or by contacting us.

Unsubscribing does not stop necessary communications about orders, payments, delivery, returns or customer-service requests.

11. Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

No method of internet transmission or electronic storage is completely secure.

12. Children’s Privacy

Our store is intended for a general adult audience and is not directed at children.

If you believe a child has provided personal information inappropriately, contact us so we can investigate and take appropriate action.

13. Changes to This Policy

We may update this policy when our practices, services or legal obligations change.

The latest version will appear on this page with an updated date. Where required, we will provide additional notice or obtain renewed consent.

14. Contact

For privacy questions, complaints or requests, contact:

IV-COM / Zorah Boutique
Puccinilaan 10
2151 GC Nieuw-Vennep
The Netherlands

Email: support@zorahboutique.com