Privacy policy
Last updated: November 11, 2025
Zig & Co. operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the “Services”). Zig & Co. is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed.
1 Personal Information We Collect
We may collect or process the following types of personal information, depending on how you interact with our Services:
- Contact details: name, billing & shipping addresses, phone number, email.
- Financial information: credit/debit card details, payment confirmation, transaction details.
- Account information: username, password, preferences, settings.
- Transaction information: items viewed, cart/wishlist activity, purchases, returns, exchanges.
- Communications: messages sent to customer support.
- Device information: IP address, device type, browser, network connection, and other unique identifiers.
- Usage information: interactions with the website, including pages visited, clicks, and navigation.
2 How We Collect Your Information
We may collect information:
- Directly from you: when you create an account, place an order, contact us, or provide personal info.
- Automatically through the Services: via cookies, analytics, or apps that track website interactions.
- From service providers: including Shopify, payment processors, and fulfillment partners.
- From partners or other third parties where applicable.
3 How We Use Your Personal Information
We use your personal information to:
- Provide, tailor, and improve Services: process orders, remember preferences, recommend products, facilitate returns/exchanges, and maintain your account.
- Marketing and advertising: send promotions, updates, and online advertising based on your preferences and activity. Marketing communications are only sent if you have opted in, in compliance with UK law (PECR). You can opt out at any time via email or the unsubscribe link.
- Security and fraud prevention: verify accounts, detect fraudulent activity, and ensure safe transactions.
- Communicate with you: respond to inquiries, provide support, and maintain our customer relationship.
- Legal obligations: comply with applicable law, government requests, or legal proceedings.
Legal Basis (UK/EU GDPR): We process personal information where necessary to fulfill a contract with you, comply with legal obligations, protect legitimate interests, or based on your consent.
4 How We Share Your Personal Information
We may share your personal information with:
- Shopify and third-party service providers: for payment processing, data analytics, marketing, shipping, and support.
- Business partners: to provide marketing services or advertise products, in accordance with your consent.
- Affiliates or within our corporate group.
- During business transactions: mergers, sales, or bankruptcy, as legally required.
We ensure that third-party service providers comply with applicable data protection laws.
5 Cookies & Tracking
We use cookies and similar technologies to:
- Improve your browsing experience.
- Personalize content and product recommendations.
- Analyse site traffic.
- Display relevant advertisements.
You can manage your cookie preferences via the banner displayed when you first visit our site.
6 International Transfers
Your data may be processed or stored outside the UK or EEA. When this occurs, we rely on recognized transfer mechanisms, such as Standard Contractual Clauses, to ensure your data is protected.
7 Data Retention
We retain your personal information only as long as necessary to:
- Maintain your account and provide Services.
- Comply with legal obligations (e.g., accounting and tax retention periods — typically 6 years).
- Resolve disputes or enforce agreements.
8 Security
We use reasonable administrative, technical, and physical measures to protect your information. However, no method of transmission over the internet is 100% secure. Please avoid sending sensitive information via unsecure channels.
9 Your Rights
Depending on your location, you may have the following rights:
- Access / Know: request access to your data.
- Correct: request corrections to inaccurate data.
- Delete: request deletion of your data.
- Portability: receive a copy or transfer your data.
- Restrict / object to processing: in certain circumstances.
- Withdraw consent: for data processing where consent was the basis.
- Opt out of marketing communications.
We will not discriminate for exercising these rights. Shopify’s Privacy Portal may also be used to manage your information: https://privacy.shopify.com/en.
10 Children’s Data
Our Services are not intended for children under the age of majority. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we hold data for a child, contact us at hello@zigandco.co.uk to request deletion.
11 Breach Notification
In the unlikely event of a personal data breach, we will notify affected individuals and relevant authorities as required by law.
12 Third-Party Links
Our Services may link to external websites. We are not responsible for their privacy practices. Please review third-party policies independently.
13 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page, and the “Last Updated” date will be revised accordingly.
14 Contact Us
For questions, concerns, or to exercise your rights:
Email: hello@zigandco.co.uk
Postal Address: Zig & Co.,
4th Floor
14 Museum Place, City Centre
Cardiff
CF10 3BH GB
You are the data controller of your information for applicable data protection laws, and we are here to ensure your privacy is respected.