Privacy Policy

This policy explains how ZAVIO Market collects and uses your personal data, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Data controller

ZAVIO Market
80/2 Lubelska Street, 24-200 Bełżyce, Poland
Email: contact@zaviomarket.com
Phone: +48 574 088 409

For any question about your data, or to exercise any of the rights in section 7, write to the email address above with the subject line “GDPR request”.

2. What data we collect

Order data: your name, delivery and billing address, email address, phone number, the items you ordered, and the amount paid.
Payment data: handled by our payment provider. We receive confirmation that a payment succeeded and the last digits and type of the card. We never receive or store your full card number.
Account data: if you create an account, we hold your email address, saved addresses and order history.
Communications: emails and messages you send us, and our replies.
Marketing consent: your email address, if you choose to subscribe to our newsletter, together with a record of when and how you consented.
Technical data: IP address, browser and device type, and pages visited, collected through cookies and similar technologies.
Reviews: if you submit a product review, the name you choose to display and the content of your review.

3. Why we use it, and on what legal basis

To perform the contract (Art. 6(1)(b) GDPR): processing and delivering your order, handling returns, refunds and warranty claims, and answering questions about your order.
To comply with legal obligations (Art. 6(1)(c) GDPR): issuing and retaining invoices and accounting records, and complying with consumer and product safety law.
With your consent (Art. 6(1)(a) GDPR): sending marketing emails, and setting non-essential cookies. You can withdraw consent at any time, without affecting processing carried out before withdrawal.
For our legitimate interests (Art. 6(1)(f) GDPR): keeping the store secure, preventing fraud and abuse, and understanding in aggregate how the store is used so we can improve it.

4. Who we share it with

We share your data only with parties who need it to deliver your order or run the store, and only to the extent needed:

Shopify Inc. is our e-commerce platform and hosting provider, and processes store and order data on our behalf.
Our payment provider takes and, where applicable, refunds your payment.
Carriers and logistics partners receive your name, address and phone number, so your parcel can be delivered.
Judge.me is our product review platform, used if you submit a review or receive a review request.
Our accountant and the tax authorities receive invoice and transaction data, where required by law.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

5. Transfers outside the EEA

Some of our service providers, including Shopify, operate outside the European Economic Area. Where data is transferred outside the EEA, it is protected by an appropriate safeguard under Chapter V GDPR, typically the European Commission's Standard Contractual Clauses, or an adequacy decision. You can ask us for details of the safeguard used for a specific provider.

6. How long we keep it

Order and invoice data: for as long as required by Polish accounting and tax law, currently 5 years from the end of the tax year in which the transaction occurred.
Account data: until you ask us to delete your account.
Marketing data: until you unsubscribe or withdraw consent.
Customer service emails: normally up to 3 years, so we can handle warranty and conformity claims.
Cookie data: for the lifetime of each cookie, as set out in section 8.

7. Your rights

Under the GDPR you have the right to: access your data; obtain rectification of inaccurate data; request erasure; request restriction of processing; object to processing based on legitimate interests or to direct marketing; receive your data in a portable format (data portability); and withdraw consent at any time.

Email contact@zaviomarket.com and we will respond within one month. We may ask you to confirm your identity before acting on a request.

You also have the right to lodge a complaint with a supervisory authority, either the authority in your EU country of residence or the Polish authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

8. Cookies

Essential cookies keep your shopping cart and session working and cannot be switched off. Analytics and marketing cookies are only set if you consent through the cookie banner. You can change or withdraw your cookie choices at any time through the banner, and you can delete cookies in your browser settings at any time.

9. Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Our payment provider may run automated fraud checks on a transaction; if a payment is declined for that reason you can contact us and we will look at it manually.

10. Children

This store is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.