Skip to content
Privacy Policy
At Zappy, our priority is to ensure that your personal information is handled with the utmost care, so that your experience on our website is safe and trustworthy. The confidentiality of our users’ personal data is fundamental to us, and all processing of personal information is carried out in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).
Acceptance of this Privacy Policy
By accessing and using the Zappy website, you acknowledge the terms of this Privacy Policy. We may update this policy from time to time. We recommend that users review this page periodically to stay informed about how we process personal data.
Definitions
Users: Any person who accesses or browses our website.
Cookies: Files stored on your device that save information to help personalise and improve your browsing experience.
Personal data or data: Any information relating to an identified or identifiable individual.
Controller: Zappy, responsible for managing the processing of personal data and communication with users.
Platforms: The Zappy website and any other online channels operated by Zappy.
Processing: Any operation carried out with personal data, such as collection, use, storage, modification, sharing, transfer or deletion.
Collection of personal data
The types of data we collect and how we collect them may vary depending on how the user interacts with our website. It is the user’s responsibility to provide accurate and up-to-date information.
We may automatically collect certain technical data, such as:
IP address, internet service provider, browser used, visit duration, pages visited, device information and browsing behaviour on our website.
We may also request personal data such as:
Name, email address, phone number, delivery address, billing address, date of birth, order details, payment-related information and any other information necessary to process orders, payments, deliveries, returns, refunds or customer support requests.
Purposes and lawful bases for processing personal data
We collect and process personal data for the following purposes:
To perform a contract with you, including processing orders, payments and deliveries;
To manage exchanges, returns and refunds;
To register users on our platforms, where applicable;
To provide customer support and communicate with you about your order;
To send promotions, marketing campaigns and commercial communications, where permitted by law or where you have given consent;
To protect against fraud, misuse of the website and unauthorised activities;
To comply with legal, regulatory, tax or accounting obligations;
To improve our website, services, products and user experience.
Depending on the purpose, we may rely on different lawful bases under UK data protection law, including performance of a contract, legal obligation, consent and legitimate interests.
Sharing of personal data
Your personal data may be shared with:
Suppliers and service providers essential for the operation of our platform;
Payment processors, logistics providers, technology providers, customer support services, fraud prevention services, analytics tools and marketing platforms;
Competent authorities, regulators or public bodies, where there is a legal obligation or valid request.
Our Privacy Policy does not apply to third-party websites. If you access links to other platforms, we recommend that you review the privacy policies of those websites.
Use of cookies
We use cookies and similar technologies to improve your browsing experience, store preferences and support future interactions with our website.
We may also use third-party cookies and similar technologies, such as analytics, advertising and marketing tools, for measurement, performance analysis and personalised advertising, where permitted by law.
You can disable cookies through your browser settings. However, doing so may affect some features of the website.
Where required by law, we will request your consent before placing non-essential cookies on your device. Cookie rules in the UK are covered by PECR and sit alongside the UK GDPR and the Data Protection Act 2018. :contentReference[oaicite:1]{index=1}
Marketing communications
We may send marketing communications about our products, offers and promotions where permitted by law or where you have provided consent.
You may opt out of receiving marketing communications at any time by using the unsubscribe or opt-out mechanism available in our messages, or by contacting us directly.
For marketing emails or messages, UK guidance requires customers to be given a clear opportunity to opt out when their details are collected and in each marketing communication sent afterwards. :contentReference[oaicite:2]{index=2}
International transfers of data
Your personal data may be stored or processed outside the United Kingdom in order to support the technological infrastructure of our platform and the operation of our services.
Where we transfer personal data internationally, we will take appropriate measures to protect your information in accordance with applicable UK data protection laws.
Data retention and user rights
Personal data will only be stored for as long as necessary to fulfil the purposes for which it was collected, or for the period required by legal, contractual, tax, accounting or regulatory obligations.
Users may, where applicable, exercise the following rights:
Request access to their personal data;
Request correction of inaccurate or incomplete data;
Request deletion of their personal data, where applicable;
Object to certain types of processing;
Request restriction of processing;
Request data portability, where applicable;
Withdraw consent at any time, where processing is based on consent;
Request information about how their data is used and processed;
Opt out of receiving marketing communications through the unsubscribe mechanisms available in each communication.
To exercise your rights under UK data protection law, you can contact us by email at contact.zappyuk@gmail.com.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your personal data has not been handled properly.
Data security
We adopt appropriate technical and organisational measures to protect your personal data, including secure servers, encryption and access controls.
It is also important that users protect their own login credentials and avoid sharing usernames, passwords or sensitive information with third parties.
Contact
If you have any questions, requests or concerns about the processing of your personal data, you can contact us by email:
Changes to this policy
Zappy may update this Privacy Policy from time to time. When changes are made, the updated version will be published on this page.
If a new consent is required by law, we will request it through the appropriate communication channels.
Law and jurisdiction
This Privacy Policy is governed by the laws of England and Wales, unless mandatory consumer or data protection laws require otherwise.
Any dispute relating to this Privacy Policy will be handled in accordance with the applicable laws and competent courts of the United Kingdom, without affecting any mandatory rights available to consumers.