Privacy Policy

Privacy Policy

Last updated: 7 July 2026

1. Who We Are

This Privacy Policy explains how ZTR ECOM LLC ("we", "us", "our"), trading as Verdalyae, collects, uses and protects your personal data when you visit www.verdalyae.co.uk, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

• Contact details: name, email, phone number, delivery and billing address
• Order information: products purchased, order history, payment confirmation (we do not store full card details)
• Technical data: IP address, browser type, device information, cookies
• Marketing preferences: whether you have opted in to receive emails or SMS

3. How We Use Your Data

• To process and fulfil your orders
• To communicate with you about your order (confirmation, shipping updates, customer service)
• To send marketing communications, where you have given consent (you can unsubscribe at any time)
• To improve our website and services
• To comply with legal obligations

4. Legal Basis for Processing

We process your data based on: performance of a contract (order fulfilment), your consent (marketing), and our legitimate interests (fraud prevention, site improvement).

5. Sharing Your Data

We share data with trusted third parties strictly for the purposes of running our business, including:

• Shopify (e-commerce platform and payment processing)
• Delivery couriers (to fulfil your order)
• Email marketing providers (e.g. Klaviyo), where you have opted in
• Advertising platforms (Meta, Google), for marketing purposes, in accordance with your cookie preferences

We do not sell your personal data to third parties.

6. International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

7. Data Retention

We retain your data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law (e.g. tax and accounting obligations, typically 6 years).

8. Your Rights Under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at contact@verdalyae.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website uses cookies to improve your browsing experience, analyse traffic, and deliver personalised advertising. You can manage your cookie preferences via our cookie banner or your browser settings.

10. Contact

Email: contact@verdalyae.co.uk