Privacy Policy

Last updated: August 2026

Zayoura The Label AB respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit zayoura.se, create an account, place an order, subscribe to our marketing communications or otherwise interact with us.

Data Controller

Zayoura The Label AB is the data controller responsible for the processing of your personal data.

Zayoura The Label AB
Company registration number: 559587-6482
VAT number: SE559587648201
Address: Kolvgatan 1B, 653 41 Karlstad, Sweden
Email: support@zayoura.se

Personal Data We Collect

Depending on how you interact with us, we may collect:

• Your name

• Billing and shipping addresses

• Email address

• Phone number

• Order details and purchase history

• Account and login information

• Payment and transaction information

• Returns, refunds and customer service information

• Messages and other communications you send to us

• Device information, IP address and browser type

• Website activity, interactions and cookie information

• Marketing preferences and consent records

Payment information is processed securely by our payment providers. We do not directly store complete payment card details.

How We Collect Personal Data

We may collect personal data:

• Directly from you when you place an order, create an account, subscribe to marketing communications or contact us

• Automatically when you browse or interact with our website

• From payment providers when they confirm or process a transaction

• From shipping and logistics providers regarding the delivery or return of an order

• From analytics, advertising and fraud-prevention providers, where permitted by law

How and Why We Use Your Personal Data

We process your personal data for the following purposes:

Processing and Delivering Orders

We use your personal data to:

• Process and fulfil your order

• Process payments

• Arrange shipping and delivery

• Provide order confirmations and delivery updates

• Process returns, refunds and complaints

The legal basis is the performance of our contract with you.

Customer Accounts and Customer Service

We use your personal data to:

• Create and manage your customer account

• Respond to questions and requests

• Provide customer support

• Keep records of our communications

The legal basis is the performance of our contract with you or our legitimate interest in providing effective customer service.

Legal and Accounting Obligations

We process and retain certain information to:

• Maintain accounting and transaction records

• Comply with tax and VAT requirements

• Respond to lawful requests from public authorities

• Handle legal claims and consumer complaints

The legal basis is compliance with our legal obligations and, where applicable, our legitimate interest in establishing, exercising or defending legal claims.

Security and Fraud Prevention

We may process personal data to:

• Protect our website, customers and business

• Detect and prevent fraud, misuse and security incidents

• Verify transactions and investigate suspicious activity

The legal basis is our legitimate interest in protecting our business and customers and, where applicable, compliance with legal obligations.

Marketing Communications

If you subscribe to our newsletter or otherwise provide consent, we may send you information about:

• New products and collections

• Promotions and special offers

• Zayoura The Label news and updates

The legal basis is your consent.

You may withdraw your consent at any time by clicking the Unsubscribe link in a marketing email or contacting us at support@zayoura.se.

Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

Website Analytics and Personalisation

Where required, and only after receiving your consent, we may use cookies and similar technologies to:

• Understand how visitors use our website

• Measure website and marketing performance

• Improve our website, products and services

• Personalise content and advertising

You can change or withdraw your cookie preferences at any time through the cookie settings available on our website.

Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve our website.

Necessary cookies may be used without consent when they are required for essential website functions, such as:

• Keeping the shopping cart active

• Processing checkout

• Maintaining website security

• Remembering essential settings

Analytics, personalisation and advertising cookies are used only where permitted and, when required, after you provide consent through our cookie banner.

You can review or change your preferences through the cookie settings on our website. Disabling certain cookies may affect some website features.

How We Share Personal Data

We may share personal data with service providers where necessary to operate our business, including:

• Shopify, which provides our ecommerce platform and website infrastructure

• Payment providers, such as Shopify Payments, Klarna, PayPal or other providers available at checkout

• Shipping and logistics providers, such as PostNord

• Email and customer communication providers

• Accounting, legal and professional service providers

• Fraud-prevention and website-security providers

• Analytics and advertising providers, such as Google, Meta and TikTok, where enabled and subject to applicable consent requirements

• Government authorities when disclosure is required by law

These providers may process personal data only as necessary to provide their services, meet legal obligations or protect their legitimate rights.

We do not sell your personal data.

International Data Transfers

Some of our service providers or their subprocessors may process personal data outside Sweden or the European Economic Area.

When personal data is transferred outside the EEA, we rely on legally recognised safeguards where required, such as:

• An adequacy decision issued by the European Commission

• The European Commission’s Standard Contractual Clauses

• Additional technical and organisational safeguards

Shopify and certain other international service providers may process data in multiple countries to provide their services.

Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.

In general:

• Order, payment, invoice and accounting information is retained for the period required by Swedish accounting and tax laws, generally for seven years after the end of the calendar year in which the relevant financial year ended

• Customer service communications are retained for as long as necessary to resolve the matter and handle possible legal claims

• Account information is retained while the account remains active or until deletion is requested, unless continued retention is legally required

• Marketing information is retained until you unsubscribe or withdraw your consent

• Cookie and analytics information is retained according to the periods stated in our cookie settings or by the relevant service provider

When personal data is no longer required, we delete or anonymise it securely.

Your Rights

Under the GDPR, you may have the right to:

• Request access to your personal data

• Request correction of inaccurate or incomplete information

• Request deletion of your personal data

• Request restriction of certain processing

• Object to processing based on legitimate interests

• Object at any time to direct marketing

• Withdraw your consent at any time

• Request data portability where applicable

• Submit a complaint to a supervisory authority

These rights may be limited where we are legally required to retain or process certain information.

To exercise your rights, contact us at support@zayoura.se. We may need to verify your identity before completing your request.

Complaints

If you believe that we have processed your personal data incorrectly, please contact us so we can investigate the matter.

You also have the right to submit a complaint to the Swedish Authority for Privacy Protection:

Integritetsskyddsmyndigheten (IMY)
Website: www.imy.se

If you live in another EEA country, you may also contact the data protection authority in your country of residence.

Data Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, misuse or unauthorised access.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

Automated Decision-Making

We do not normally make decisions based solely on automated processing that produce legal or similarly significant effects.

Our payment and fraud-prevention providers may use automated systems to assess transactions. Where applicable, further information is provided by the relevant provider.

Children’s Privacy

Our website is not intended to be used independently by children under the age of 16.

Products intended for children must be ordered by a parent, legal guardian or other authorised adult. We do not knowingly collect personal data directly from children without appropriate authorisation.

If you believe that a child has provided personal data to us improperly, please contact us.

Third-Party Links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of those third parties. We recommend reviewing their privacy policies before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy when our practices, services or legal obligations change.

The updated version will be published on this page together with a revised Last updated date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us:

Zayoura The Label AB
Company registration number: 559587-6482
Kolvgatan 1B
653 41 Karlstad
Sweden

Email: support@zayoura.se