Privacy policy
Our Attitude to Your Privacy
This store is powered by Shopify, a third-party e-commerce platform with its own data processing and cookie practices. See their privacy policies here: shopify.com/uk/legal/privacy and shopify.com/uk/legal/privacy/consumers.
The formal details of how we handle your data are set out below, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
This store is operated by Zanda, a sole trader based in the United Kingdom. Zanda is the data controller for personal information collected in connection with your order. Where Shopify processes data for its own platform purposes, Shopify is the data controller for that processing — not Zanda.
For questions about your order and how Zanda handles your data: admin@zanda.space.
For questions about Shopify's own platform data processing: privacy.shopify.com.
2. What Information We Collect
When you make a purchase: name, email address, delivery address, and payment information. Payment card details are processed securely by Shopify on our behalf and are never stored by us.
When you browse the store: Shopify's platform automatically collects certain technical information as part of its standard operation — including device type, browser, IP address, and how you interact with the store. This is not something we configure or control directly.
When you contact us: name, email address, and any information you include in your message.
3. How We Use Your Information
We use your personal information only for the purpose for which it was given:
- To process and fulfil your orders, including passing your name and delivery address to our fulfilment partner for the sole purpose of producing and shipping your order
- To send you order confirmations and dispatch notifications
- To respond to enquiries and customer service requests
We do not use your information for profiling, behavioural advertising, or any purpose beyond the above. For Shopify's own uses of platform data, please refer to their privacy policies at shopify.com/uk/legal/privacy and shopify.com/uk/legal/privacy/consumers.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance — to process and fulfil orders you have placed
- Legitimate interests — to respond to enquiries you have sent us
5. Sharing Your Information
Our fulfilment partner — your name and delivery address are passed to our print production and fulfilment partner solely for the purpose of producing and shipping your order. Their fulfilment platform is creativehub, operated by theprintspace. Your data is not used by them for any other purpose.
Shopify — this store is hosted on Shopify's platform. Your order and payment information is processed by Shopify on our behalf. For its own platform purposes — including analytics and platform improvement — Shopify acts as an independent data controller. Their privacy policies are available at shopify.com/uk/legal/privacy and shopify.com/uk/legal/privacy/consumers.
Beyond the two partners listed above, your personal data is never passed to any third party for any purpose. We do not sell it, share it, or make it available to anyone else under any circumstances.
6. Cookies
This store is powered by Shopify, which uses cookies as part of its standard operation. These include Required (essential cookies — for your cart, session, and checkout), Personalisation, Marketing and Analytics cookies. We cannot offer the same essential-cookies-only guarantee here that applies at zanda.space.
For visitors in the UK and European Economic Area, a cookie consent banner is displayed when you visit. This gives you the ability to accept or decline analytics cookies while essential cookies remain active. Your choice is respected and it does not affect performance.
You can manage or disable cookies through your browser settings at any time. Disabling essential cookies may affect your ability to complete a purchase.
7. How Long We Keep Your Data
- Order information — retained for six years in accordance with HMRC requirements for sole trader financial records
- Enquiry correspondence — retained for two years, or until the matter is resolved
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Erase your data, where we have no legal obligation to retain it
- Restrict or object to how we process your data in certain circumstances
- Data portability — to receive your data in a structured, commonly used format
To exercise any of these rights in relation to Zanda's own processing, contact us at admin@zanda.space. We will respond within one month, as required by UK GDPR.
For rights related to data processed by Shopify in its own capacity, visit privacy.shopify.com.
9. Complaints
If you are unhappy with how we handle your personal data, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection authority. You can do so at ico.org.uk or by calling 0303 123 1113.
We would always welcome the opportunity to address your concerns directly before you contact the ICO, so please reach out to us first if you are able to.
10. Changes to This Policy
We will update this policy if our practices change or if legal requirements oblige us to do so. The current version will always be available at shop.zanda.space.
Last updated: 15 June 2026