Privacy Policy

At Zappy, we are committed to handling your personal data with care and to providing a safe and reliable experience on our website. We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (“PECR”).

About this Privacy Policy

This Privacy Policy explains how Zappy collects, uses, stores and shares your personal data when you visit our website, place an order or contact us. By using our website, you acknowledge that you have read this Privacy Policy.

Definitions

Personal data: Any information relating to an identified or identifiable individual.

Processing: Any operation carried out on personal data, including collecting, using, storing, sharing or deleting it.

Controller: Zappy is the controller responsible for your personal data and for responding to enquiries regarding its processing.

Cookies: Small files stored on your device that help our website function and allow us to remember preferences and understand website use.

Personal data we collect

The personal data we collect depends on how you interact with our website. Please ensure that the information you provide to us is accurate and up to date.

We may collect the following information automatically:

IP address, browser type, device information, internet service provider, pages viewed, time spent on our website and other website usage information.

We may also collect:

Name, email address, telephone number, delivery address, billing address, payment-related information and any other information required to process orders, payments, deliveries, exchanges, returns or customer service requests.

How and why we use your personal data

We use personal data for the following purposes:

To process and deliver orders, process payments, manage returns, exchanges and refunds, and provide customer support;

To create and manage customer accounts, where available;

To prevent fraud, misuse, unauthorised activity and security incidents;

To comply with our legal and regulatory obligations;

To improve our website, products and services; and

To send marketing communications where we have the required consent or another lawful basis to do so.

We process personal data where necessary to perform a contract with you, comply with a legal obligation, pursue our legitimate interests where these are not overridden by your rights, or where you have given us consent.

Marketing communications

Where required by law, we will obtain your consent before sending marketing emails or text messages. You can withdraw your consent or opt out of marketing communications at any time by using the unsubscribe link in a message or by contacting us at support.zappyuk@gmail.com.

Sharing your personal data

We may share your personal data with trusted third parties where necessary to operate our business and provide our services, including payment providers, delivery and logistics companies, website and technology providers, customer support providers, marketing providers and professional advisers.

We may also share personal data with competent authorities where required by law or in response to a valid legal request.

We do not control third-party websites. If you follow a link to another website, please review that website’s privacy policy.

Cookies

We use strictly necessary cookies to operate our website. We may also use analytics, advertising and personalisation cookies. Where required, we will ask for your consent before placing non-essential cookies on your device. You can manage or withdraw your cookie preferences at any time through our cookie settings, where available, or through your browser settings. Please note that disabling certain cookies may affect website functionality.

International transfers

Your personal data may be stored or processed outside the United Kingdom. Where we transfer personal data internationally, we will ensure that appropriate safeguards are in place in accordance with applicable UK data protection law.

How long we keep your data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to meet legal, accounting, tax and reporting requirements.

Your rights

Subject to applicable law, you have the right to:

Request access to your personal data;

Request correction of inaccurate or incomplete personal data;

Request erasure of your personal data in certain circumstances;

Request restriction of processing in certain circumstances;

Object to processing based on legitimate interests, including direct marketing;

Request the transfer of your personal data to you or another organisation, where applicable; and

Withdraw consent at any time where we rely on consent to process your personal data.

To exercise any of these rights, please contact us at support.zappyuk@gmail.com.

You also have the right to make a complaint to the UK Information Commissioner’s Office (ICO). Further information is available at https://ico.org.uk/make-a-complaint/.

Data security

We use appropriate technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no method of transmission or storage is completely secure.

You should keep your account credentials secure and should not share passwords or sensitive information with third parties.

Contact

For questions about this Privacy Policy or how we process personal data, please contact us at:

support.zappyuk@gmail.com

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page. Where required by law, we will notify you of material changes and seek fresh consent where necessary.

Applicable law

This Privacy Policy is governed by the laws of England and Wales, subject to any mandatory consumer protection laws that apply in your country of residence.