Privacy Policy

Last updated: June 2026

ZenAlign ("we", "our" or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your information when you visit our store at hswbkn-9z.myshopify.com.

1. Who we are

ZenAlign is the data controller responsible for your personal data. You can contact us at zenalignsupport@gmail.com.

2. What data we collect

We collect the following personal data when you place an order or create an account:

Name and surname
Email address
Shipping and billing address
Phone number (if provided)
Payment information (processed securely by Shopify Payments — we never store card details)
Order history and purchase behaviour
Device and browsing data (IP address, browser type, pages visited) via cookies

3. Why we collect your data (legal basis)

To fulfil your order — processing and shipping your purchase (contractual necessity)
To manage your account — if you create a customer account (contractual necessity)
To send transactional emails — order confirmations, shipping updates (contractual necessity)
To send marketing emails — only if you have explicitly opted in (consent). You can unsubscribe at any time.
To improve our store — analytics and performance monitoring (legitimate interest)
To comply with legal obligations — tax records, fraud prevention (legal obligation)

4. How long we keep your data

Order data: 7 years (required by EU tax law)
Account data: until you request deletion
Marketing data: until you unsubscribe or request deletion
Cookie data: see our cookie section below

5. Who we share your data with

We never sell your personal data. We share it only with the following trusted third parties to operate our store:

Shopify Inc. — our ecommerce platform (data processor). Shopify is GDPR-compliant. See Shopify's Privacy Policy.
Shipping carriers — to deliver your order (name, address, phone number only)
Klaviyo — email marketing platform, only if you have opted in to marketing
Payment processors — Shopify Payments, Stripe or PayPal to process payments securely

All processors are required to handle your data in accordance with GDPR.

6. Cookies

We use the following types of cookies:

Essential cookies — required for the store to function (cart, session, security). Cannot be disabled.
Analytics cookies — to understand how visitors use our store (e.g. Google Analytics). You can opt out.
Marketing cookies — to personalise ads and measure campaign performance. Only with your consent.

You can manage your cookie preferences at any time through your browser settings.

7. Your rights under GDPR

If you are based in the European Economic Area (EEA) or United Kingdom, you have the following rights:

Right of access — request a copy of the personal data we hold about you
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion of your data ("right to be forgotten")
Right to restrict processing — ask us to limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interest or for marketing purposes
Right to withdraw consent — withdraw marketing consent at any time without affecting past processing

To exercise any of these rights, contact us at zenalignsupport@gmail.com. We will respond within 30 days.

8. International transfers

Your data may be processed outside the EEA (e.g. by Shopify in the United States). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Children's privacy

Our store is not intended for children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our store. The date at the top of this page indicates when the policy was last updated.

11. How to complain

If you are unhappy with how we handle your data, you have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.