Privacy policy
This policy describes the processing of personal data carried out on this website, its purposes, the legal bases that justify it and the rights you hold over your data, in accordance with articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.
Last updated: September 29, 2026
This website is not open for sale yet
Zenloria is in the process of being registered. The publisher's identifying details — legal form, share capital, registration number, registered office and VAT number — will be published here before the shop opens, and cannot change afterwards without this page being updated. No order can be placed or honoured at this stage.
The conditions below describe the future operation of the shop and are published for information. Only the documents accompanying your order will be binding once it opens.
Data controller
The data controller is Zenloria, which is in the process of being registered. The registered office address and the identification numbers will be published in the legal notice before the shop opens.
For any question about your personal data, contact our data protection officer at zenloria.contact@gmail.com.
Data we collect
We only collect data you give us voluntarily, or data strictly required for the service to work. Nothing is collected behind your back.
| Data | When | Source |
|---|---|---|
| Email address | At checkout or when subscribing to the newsletter | You |
| Name, postal address, phone number | At checkout | You |
| Order contents (items, quantities, sizes) | At checkout | You |
| Order number and payment status | At checkout | Generated by us |
| Chosen language (FR or EN) | During your visit | Your choice |
| Cart contents and browsing history | At checkout or when you open a product | Your browser (local storage) |
| The content of questions you ask the automated assistant | When you use the chat button | You |
| Server connection logs | On every visit | Generated by us |
Purposes and legal bases
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Process and ship your order | Identity, delivery address, order contents | Performance of a contract (GDPR art. 6(1)(b)) |
| Take and secure payment | Identity, billing details | Performance of a contract (GDPR art. 6(1)(b)) |
| Handle after-sales service, returns and warranties | Contact details, order history | Performance of a contract (GDPR art. 6(1)(b)) |
| Send the newsletter | Email address | Consent (GDPR art. 6(1)(a)) |
| Answer a request or complaint | Contact details, message content | Pre-contractual measures (GDPR art. 6(1)(b)) |
| Answer questions asked through the site's automated assistant | Content of the question | Legitimate interests (GDPR art. 6(1)(f)) |
| Prevent fraud and secure the service | Connection logs, order data | Legitimate interests (GDPR art. 6(1)(f)) |
| Meet our accounting and tax obligations | Billing data | Legal obligation (GDPR art. 6(1)(c)) |
No data collected on this website is used for targeted advertising, unsolicited marketing or behavioural analytics. We do not sell, rent or trade personal data.
The automated assistant is deliberately simple: the conversation is not stored, there is no history of your questions and no account is attached to it. Please do not include personal data (name, address, card number) in a question; use the contact form instead.
Who the data is shared with
Your data is available only to authorised staff of the publisher, strictly limited to what they need for the purposes above.
We also use processors, who act on our instructions and are bound by the same level of protection:
- Payment provider — to process the transaction only; no card data is stored on our servers.
- Hosting provider — to run the website and keep it available.
- Carrier — to deliver the parcel; it receives the bare minimum (name, delivery address, phone number).
- Fulfilment supplier — to prepare and dispatch the parcel on our behalf, the carrier not being the only party to handle it. Zenloria holds no stock: the order is passed to the supplier, which delivers straight to the customer. It receives the bare minimum (name, first name, delivery address, phone number).
- Transactional email provider — to send order confirmations, where that purpose is enabled.
- Google LLC (Gemini service) — only when you ask the automated assistant a question. The text of your question and this site's catalogue information are sent to this processor to generate the reply. This data may be processed outside the European Economic Area; we use the free tier, whose terms allow the content to be used to improve Google's products. Do not ask a question containing personal data.
How long we keep data
Data is kept only as long as each purpose requires, then deleted or anonymised:
| Data | Retention period |
|---|---|
| Order and accounting records | 10 years from the close of the financial year (French Commercial Code art. L123-22) |
| Proof of withdrawal and after-sales exchanges | 5 years from the last contact |
| Newsletter | Until you withdraw your consent, then 3 months to record the unsubscribe |
| Server connection logs | 1 year (legal obligation) |
| Your cart and browsing history | Stored in your browser; deleted on request or when you close the browser |
| Questions asked to the automated assistant | No retention on our side: the exchange exists only for as long as it takes to answer. The processor may keep a security log under its own terms. |
Your rights over your data
Under articles 15 to 22 of the GDPR, you have the following rights:
- Right of access: confirmation that your data is processed, and a copy of it.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure ('right to be forgotten'), subject to our legal retention duties.
- Right to restriction: to limit processing where accuracy is disputed or the processing is unlawful.
- Right to object on legitimate grounds to any processing based on legitimate interests.
- Right to object at any time, without grounds, to marketing and the newsletter.
- Right to portability: to receive the data you gave us in a structured, machine-readable format.
- Right to issue instructions on what happens to your data after your death (GDPR art. 85).
You may also set post-mortem instructions exercising these rights. Instructions given before your death are honoured by our service unless you object.
Cookies and local storage
This website uses no advertising cookies and no profiling trackers. Only with your agreement, given or refused in the banner shown on your first visit, it measures its audience with Cloudflare Web Analytics: a cookieless tool that counts page views, referring sites, countries and load times, without identifying visitors or following them from one visit to the next. You can change your mind at any time with the 'Manage cookies' link at the bottom of every page.
| Item | Type | Duration | Consent required? |
|---|---|---|---|
| 'locale' cookie | Stores your language choice (fr or en) so the site displays in the right language | 1 year | No — strictly necessary |
| 'zenloria.cart.v1' local storage | Contents of your cart | Until cleared | No — strictly necessary |
| 'zenloria.recently-viewed.v1' local storage | History of products you opened | Until cleared | No — strictly necessary |
| 'announce' cookie | Remembers that you dismissed the announcement bar | 1 year | No — interface personalisation |
| 'zl-consent' cookie | Remembers your answer to the audience-measurement banner | 6 months | No — keeps your choice |
| Cloudflare Web Analytics (cookieless) | Anonymous audience measurement: page views, referrers, countries, load times | Nothing stored on your device | Yes — loaded only after 'Accept' |
These items are stored in your browser only. You can delete them at any time from your browser settings; this does not stop you browsing, but it empties your cart and your history, and brings back the announcement bar.
No third-party tracker, web analytics tool or behavioural advertising system is loaded on this site. If that changes, this policy will be updated before anything is added.
Exercising your rights and filing a complaint
Send requests to zenloria.contact@gmail.com, stating the subject of your request and the email address linked to your account. We reply within one month.
If you are not satisfied with our answer, you can lodge a complaint with the French supervisory authority, the CNIL, whose headquarters are at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, and whose website is https://www.cnil.fr.