GDPR Privacy Policy

This Privacy Policy explains how Zaralivia may collect, use, disclose, and retain personal data when you visit our website, purchase furniture, arrange delivery, or contact customer service.

We primarily serve customers in the United States. The General Data Protection Regulation (GDPR) applies only where its legal requirements are met. When it applies, we handle personal data in accordance with the relevant GDPR requirements.

1. Scope and Applicability

This policy applies to personal data processed through our website, shopping activities, orders, deliveries, payments, and customer communications.

Under Article 3 of the GDPR, the regulation may apply to organizations established in the EU or organizations outside the EU that offer goods or services to individuals in the EU or monitor their behavior there. Website accessibility from the EU alone does not automatically make all processing subject to the GDPR.

Other privacy laws may also apply depending on our activities and your location.

2. Data Controller and Contact Information

The data controller is the legal entity that determines the purposes and means of processing personal data. The responsible entity must be identified according to our actual business arrangements.

Website: https://zaralivia.com
Email: assist@zaralivia.com
Phone: +1 (414) 442-7891
Address: 4481 N 45th St, Milwaukee, WI 53218, United States
Customer Service Hours: Monday–Friday, 9:00 AM–6:00 PM

3. Personal Data We May Collect

Depending on your interactions with our website, we may process the following categories of personal data:

  • Contact and delivery information: Name, email address, telephone number, billing details, and shipping address.
  • Order information: Order number, purchased products, transaction value, delivery status, and return or refund records.
  • Payment-related information: Payment method, transaction references, payment status, and verification results provided by payment processors.
  • Account information: Information needed to maintain an account, if account features are available and used.
  • Customer communications: Messages, complaints, and information provided when contacting customer service.
  • Technical information: IP address, browser or device information, and website logs, where collected by our systems.
  • Cookie and usage information: Browsing activity, preferences, and website interactions, depending on the technologies used.
  • Marketing preferences: Communication choices and related information, where marketing features are offered.

We do not assume that every category is collected in every situation. Please avoid sending unnecessary sensitive information or full payment card details through ordinary email.

4. Sources of Personal Data

We may obtain personal data directly from you, through your interactions with our website, from payment or delivery providers involved in your order, and through communications with customer service.

Where the GDPR applies and data is not collected directly from you, we will provide source information where required by law.

5. How We Use Personal Data

Depending on the services used and the applicable legal requirements, we may process personal data to:

  • Process orders, payments, deliveries, returns, and refunds.
  • Respond to customer inquiries and complaints.
  • Operate, maintain, and secure our website.
  • Detect suspected fraud, misuse, or unauthorized activity.
  • Maintain records required by tax, accounting, and other applicable laws.
  • Improve website performance where appropriate analytics tools are used.
  • Send marketing communications where permitted by law and manage communication preferences.

We use personal data only for purposes supported by an applicable legal basis.

6. Legal Bases for Processing

Where the GDPR applies, processing must rely on an appropriate legal basis under Article 6. Depending on the circumstances, these may include:

  • Contract: To process orders, arrange delivery, and provide purchase-related services.
  • Legal obligation: To meet applicable recordkeeping, tax, accounting, or other legal requirements.
  • Legitimate interests: To maintain website security, prevent misuse, resolve operational issues, or establish and defend legal claims, where permitted by law.
  • Consent: For activities such as certain nonessential cookies or marketing where consent is legally required.

Consent may be withdrawn at any time where applicable. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

The legal basis for each activity depends on its specific purpose and circumstances.

7. Cookies and Similar Technologies

Our website may use cookies or similar technologies to support essential functions, remember preferences, analyze website performance, or measure advertising activity, depending on the tools implemented.

Where applicable law requires prior consent, nonessential cookies and similar technologies will be activated only after valid consent is obtained. Where required, users must also be able to manage or withdraw their choices.

You can review our Cookies Policy for further information. Browser settings may also allow you to block or delete cookies, although some website functions may be affected.

8. Sharing Personal Data

We may share personal data when necessary for legitimate business purposes, contractual obligations, or legal requirements. Depending on the services we use, recipients may include:

  • Payment processors.
  • Delivery and logistics providers.
  • Website hosting, maintenance, and security providers.
  • Customer service and communications providers.
  • Analytics or marketing providers, where applicable.
  • Courts, regulators, or other authorized parties when required or permitted by law.

The actual recipients depend on our service arrangements. Providers may act as processors or independent controllers depending on their roles and applicable law.

Any disclosures involving data sales, sharing, or targeted advertising must be assessed against our actual practices and applicable privacy laws.

9. International Data Transfers

Personal data may be processed in countries where our business systems or service providers operate.

Where the GDPR applies to transfers outside the European Economic Area, we will use a lawful transfer mechanism where required. Depending on the circumstances, this may include an adequacy decision, Standard Contractual Clauses, or another mechanism permitted by the GDPR.

The applicable transfer arrangements depend on the actual recipients, destinations, and processing activities.

10. Data Retention

We retain personal data only for as long as reasonably necessary for its intended purpose or as required or permitted by law.

Retention periods may depend on order status, customer service needs, legal recordkeeping obligations, disputes, and other applicable requirements. Different categories of data may therefore be retained for different periods.

Requests for deletion will be assessed under applicable law. Some information may need to be retained to meet legal obligations or establish, exercise, or defend legal claims.

11. Data Security and Personal Data Breaches

We aim to protect personal data through appropriate technical and organizational measures based on the information involved and the risks of processing.

No method of transmission or storage is completely secure in every circumstance. Please do not send passwords, full payment card numbers, or card security codes through ordinary email.

If a personal data breach occurs, the responsible controller will assess and address it in accordance with applicable law. Where the GDPR applies, this may include notifying a supervisory authority or affected individuals when legally required.

12. Your Privacy Rights

Where the GDPR applies, you may have the right to:

  • Access your personal data and obtain information about its processing.
  • Rectify inaccurate or incomplete personal data.
  • Erase personal data when the legal conditions are met.
  • Restrict certain processing activities.
  • Receive and transfer certain personal data in a structured, commonly used, machine-readable format.
  • Object to processing based on legitimate interests and to direct marketing, subject to applicable legal conditions.
  • Withdraw consent where processing relies on consent.
  • Challenge certain automated decisions where Article 22 of the GDPR applies.
  • Lodge a complaint with a competent data protection supervisory authority.

These rights are subject to applicable conditions, exceptions, and limitations. We do not represent that we currently use automated decision-making covered by Article 22.

Depending on your location, you may also have rights under US state or other privacy laws.

13. How to Exercise Your Rights

To submit a privacy request or ask a question about this policy, contact us:

Email: assist@zaralivia.com
Phone: +1 (414) 442-7891
Address: 4481 N 45th St, Milwaukee, WI 53218, United States

Please describe your request clearly. We may request proportionate information to verify your identity or authority to act on another person's behalf.

Where the GDPR applies, we will respond within the applicable legal time limits, including any lawful extensions or exceptions. The outcome of a request depends on the relevant law and circumstances.

Please do not include full payment card details, passwords, or other sensitive authentication information in ordinary email communications.

14. Automated Decision-Making and Profiling

Certain automated decisions and profiling activities may be subject to additional GDPR requirements, particularly where they produce legal or similarly significant effects.

We do not represent that we currently conduct automated decision-making covered by Article 22. If such processing is introduced, we will assess and provide the information and safeguards required by applicable law.

15. Children's Privacy

Our website is intended for furniture retail and is not described as a service specifically directed to children.

Where children's personal data is collected, we will assess and comply with applicable legal requirements, including relevant GDPR provisions where they apply. If you have concerns about a child's personal data, please contact us using the details above.

16. Updates to This Policy

We may update this Privacy Policy to reflect changes to our website, services, data processing activities, or legal requirements.

We will display the applicable updated or effective date. Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

17. Contact Us

For questions about this Privacy Policy or to submit a privacy-related request, contact:

Zaralivia
Website: https://zaralivia.com
Email: assist@zaralivia.com
Phone: +1 (414) 442-7891
Address: 4481 N 45th St, Milwaukee, WI 53218, United States
Customer Service Hours: Monday–Friday, 9:00 AM–6:00 PM
Shipping Coverage: United States, subject to applicable delivery restrictions.

We will review privacy inquiries in accordance with the legal requirements applicable to the relevant processing activities.