Privacy Policy

At The Zestful Space (thezestfulspace.com), we are committed to protecting and respecting your privacy. This Privacy Policy outlines how your personal data is collected, used, disclosed, and safeguarded when you interact with our website. We uphold the highest standards of data protection and are fully compliant with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

1. Commitment to Privacy and Data Protection

Your privacy and trust are imperative to us. We handle your personal information with care and transparency, ensuring lawful and secure processing at every stage. We are committed to only collecting the data that is necessary for delivering our services, maintaining service integrity, and enhancing user experience while protecting your individual rights as a data subject.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected and processed via thezestfulspace.com. For the purposes of applicable data protection laws, The Zestful Space operates as the data controller, determining the purposes and means of processing your personal information. If you have any questions, you may contact our privacy team at [email protected].

3. Categories of Personal Data We Process

We may collect and process the following categories of information:

a) Usage Data
Includes information such as your IP address, browser type and version, referring URL, pages visited, time and date of your visit, time spent on pages, and other diagnostic data related to your usage patterns.

b) Account Data
If you create an account or make a purchase, we collect data including your full name, mailing and billing address, email address, and phone number.

c) Profile Data
Including your saved preferences, items in your cart, purchase history, wishlists, browsing behavior, and product interests.

d) Communication Data
Includes data from email correspondences, customer support inquiries, and your interaction history with our team via various communication channels.

e) Technical Data
Details about the device(s) you use to access our website, which may include your device type, operating system, browser type, and system/network configurations.

f) Transaction Data
Information related to purchases, such as the transaction amount, delivery address, and payment details (processed via secure third-party gateways).

g) Preference Data
Data you provide relating to your marketing preferences, newsletter subscriptions, and specific content or product interests.

4. Legal Bases for Processing Personal Data

We will only process your personal data when there is a lawful basis for doing so under applicable data protection laws. These legal bases include:

– Consent: Where you have explicitly given consent for specific processing purposes.
– Contractual Necessity: Where the data is required to fulfill a contract with you or to perform pre-contractual steps.
– Legal Obligation: Where processing is necessary to comply with legal obligations.
– Legitimate Interests: Where processing is necessary for our legitimate business interests and your interests or fundamental rights do not override those interests.

5. Your Rights

You have the following rights with respect to your personal data:

– Right of Access: Request confirmation of whether personal data concerning you is being processed, and access such data.
– Right to Rectification: Request correction of any inaccurate or incomplete information.
– Right to Erasure: Request deletion of your personal data, subject to certain lawful exceptions.
– Right to Restriction: Request limitation on how your data is processed under specific circumstances.
– Right to Portability: Obtain and reuse your personal data across different services in a structured, commonly used, and machine-readable format.
– Right to Object: Object to processing where we rely on legitimate interests or direct marketing.
– Right to Withdraw Consent: Where processing is based on your consent, you may withdraw such consent at any time.

You may exercise any of these rights by contacting us at [email protected].

6. Security Measures

We have implemented technical and organizational measures designed to protect the integrity, confidentiality, and availability of your personal data. These include, but are not limited to:

– Secure encryption of data in transit and at rest
– Role-based access controls limiting who can access personal data
– Regular internal and third-party security audits
– Frequent system backups and disaster recovery planning
– Staff training on privacy best practices and data protection policies

7. International Transfers

Some of the third-party service providers we collaborate with may be located outside your country or the European Economic Area (EEA). Where such international data transfers occur, we ensure that appropriate contractual safeguards are in place, including the use of Standard Contractual Clauses (SCCs) and compliance with regional adequacy decisions.

8. Data Retention

We retain personal data only for as long as needed for the purposes outlined in this Policy or as required by law. Retention periods vary depending on the data type and processing purpose, including:

– Usage Data: Retained for up to 12 months for analytics and performance monitoring.
– Account and Transaction Data: Retained for up to 6 years for tax, dispute, and legal compliance.
– Communication and Support Data: Retained for up to 24 months after final correspondence.
– Preference and Marketing Data: Retained for up to 36 months after last interaction unless revoked earlier.

Once data is no longer required, it is securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar tracking technologies to optimize our website and improve your browsing experience. Cookies we use include:

– Essential Cookies: Required for website functionality (e.g., login, cart management)
– Functional Cookies: To remember preferences and personalize content
– Analytics Cookies: To help us understand user interaction through anonymized statistics
– Performance Cookies: To monitor site performance and enhance user experience

Cookies may collect Usage and Technical Data automatically upon your visit.

10. Cookie Management and Compliance with GDPR & CCPA

We provide cookie consent banners in compliance with GDPR and CCPA requirements. You can manage your preferences at any time by clicking the “Cookie Preferences” link on the website. For California residents, you may also exercise your “Do Not Sell or Share My Personal Information” rights through designated mechanisms provided on our site.

Your consent can be withdrawn or modified at any time by adjusting your browser settings or cookie preferences.

11. Children’s Privacy

The Zestful Space does not knowingly collect or solicit personal information from children under the age of 13. If we become aware that personal data from a child under 13 has been collected without verified parental consent, we will delete that data promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

12. Policy Updates and User Notifications

We may update this Privacy Policy from time to time to reflect legal changes or operational updates. Any material changes will be communicated through the website or, where appropriate, via direct communication. Continued use of thezestfulspace.com indicates your acceptance of the updated Privacy Policy.

13. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us:

Email: [email protected]

We take all privacy-related inquiries seriously and will respond in a timely manner to ensure your rights are respected.

The Zestful Space upholds complete compliance with GDPR, CCPA, and all relevant privacy directives. If you have questions about your information or wish to lodge a complaint, please reach out to [email protected].