Privacy & Cookie Policy

1. Introduction

This Privacy Policy explains how Sandine Zartaux (zartaux.com), owned and operated by Zartaux Holding Ltd (“we,” “us,” or “our”), handles your information. For the purposes of UK GDPR and, where applicable, EU GDPR, the data controller is Zartaux Holding Ltd, a company registered in England, contactable at info@zartaux.com.

​

2. Our Data-Minimisation Approach

We take a strict data-minimisation approach. We process your information only to the extent needed to complete, ship, and invoice your order, or to answer an enquiry you send us. With one exception — the invoice and order records we are legally required to keep (see Data Retention) — we do not store your personal data on our systems after your order has been fulfilled. Much of the information involved is handled directly by our payment and shipping partners rather than retained by us. In short: we do not hold personal data about you beyond the invoice records we are legally required to keep, and we do not build customer profiles, mailing lists, or marketing databases.

​

3. What We Process, and What We Keep

To place and fulfil an order, the following is processed. Unless stated, it is used only to complete your order and is not stored by us afterwards, except within the legally required invoice/order record described below:

• Identity & Contact Data: name, email, telephone, billing and shipping address — used to process, ship, and invoice your order.

• Payment Data: card and payment details are entered directly with our payment provider (for example, PayPal or the card gateway). We do not see or store your full card details at any time.

• Technical Data: limited technical data (such as IP address or browser type) may be processed transiently by our hosting, security, and analytics providers. We do not maintain our own store of this data. See the Cookie Policy below.

​

4. Data Retention

The only records we retain are invoices and their associated order records, which we keep because tax, accounting, and customs law requires it — for the statutory period in the relevant jurisdiction (in the UK, generally 6 years). We only create and retain an invoice when you actually make a purchase. If you browse the Site or contact us without buying, no invoice is created and we do not retain any personal data about you. We do not keep any other personal data on record once your order is complete, and we do not maintain marketing databases or profiles beyond these statutory invoice records.

​

5. How We Use Your Data

We process your information on the bases of contract performance, compliance with our legal obligations, and — where you contact us directly — your consent. Specifically, to:

• Process, ship, and invoice your order, via our payment and shipping partners.

• Issue and retain the invoice/order records required by tax, accounting, and customs law.

• Respond to an enquiry you send us.

• Respond to lawful requests from competent authorities, limited to the invoice records we hold. Where you breach these terms, your submitted information and IP address may form part of an investigation by the competent authorities in accordance with law.

​

6. Contacting Us and Consent

If you contact us by email or through a form on zartaux.com, you do so voluntarily and on the basis of your own consent. We use your message and the details you provide solely to respond to your enquiry. We do not add your contact details to any stored contact list, mailing list, or marketing database, and we do not retain them beyond what is necessary to handle your enquiry — or, where it results in a purchase, within the invoice we are then legally required to keep. If you do not purchase, we keep nothing about you.

​

7. Third-Party Service Providers

We use trusted third-party providers to operate our storefront, process secure payments, and ship products. They only access your information to the extent necessary to perform their services.

We hold no responsibility for third-party websites, their content, their security, or how they handle data. Any interaction you have with a third-party site or service is governed by that party’s own terms and privacy policy, not ours.

Third-party responsibility: Each provider (including payment gateways and couriers) operates under its own privacy policy and terms. We are not responsible for the independent data-handling practices, content, or policies of these third parties. Once your information is processed by, or you are directed to, a third-party service, that processing is governed by their privacy policy, not ours — we recommend you review it. Some providers may be located in a different jurisdiction than you or us; if you proceed with such a transaction, your data may become subject to the laws of that jurisdiction.

Search engines & directories: We are not responsible for personal data that may appear on third-party web pages via directory services or search engines.

​

8. Your Rights

Under UK GDPR / EU GDPR you have the right to access, rectify, erase (subject to our legal obligation to keep invoices), restrict, object to, and port your personal data, and to withdraw consent. To exercise these rights, or to ask us to confirm that your details have not been retained, contact us at info@zartaux.com. You may also complain to your supervisory authority — in the UK, the Information Commissioner’s Office (ICO).

​

9. Data Breach Notification

In the event of a personal-data breach likely to result in a risk to your rights, Zartaux Holding Ltd will notify the relevant supervisory authority and affected users without undue delay, in accordance with applicable data-protection law, and take reasonable steps to mitigate harm.

​

10. Cookie Policy

Cookies are small text files placed on your device to help the site work, remember your preferences, and provide anonymous statistics.

• Strictly Necessary Cookies: enable core functions such as navigation, secure areas, and the shopping basket. These do not require consent.

• Performance Cookies: collect anonymous statistics on how visitors use the site so we can improve it.

• Functionality Cookies: remember preferences such as username, language, or region.

• Targeting/Advertising Cookies: deliver content more relevant to your interests. These, and any other non-essential cookies, may be provided by third parties.

Non-essential cookies are set only after you give consent through our cookie banner. You can change or withdraw your choices at any time via the banner or your browser settings; disabling essential cookies may prevent parts of the site from working. For more information, see www.allaboutcookies.org.

​

11. Deleting Your Data

If you wish to confirm deletion of any data associated with you, contact us at info@zartaux.com. Note that we are legally required to retain invoice/order records for the statutory period described in Data Retention.

​