Privacy policy

1. Who This Statement Covers and Who Is Responsible

This Privacy Statement explains how EVERMONT GLOBAL S.R.L., operating zarellia.com, collects, uses, and protects your personal data when you browse the site, place an order, or otherwise contact us.

2. What We Collect

Directly from you: Account and login details, billing and shipping information, contact details, order history, and anything you send us through customer support, surveys, or reviews. Payment card data itself is handled by our payment processor and does not pass through our own systems in full.

Automatically: Your device type, browser, operating system, IP address, an approximate location derived from it, pages viewed, and similar technical or usage data collected as you browse.

3. Why We Use Your Data and Our Legal Bases

We use your personal data to accept and fulfil your order, handle payments and returns, manage your account, respond to questions and complaints, keep the site and checkout secure, meet our tax and accounting obligations, and—only with your consent—send marketing communications or use non-essential tracking.

Where the GDPR applies, each processing activity relies on one of the following legal bases:

4. Cookies

We currently use only strictly necessary cookies—the kind needed to keep your basket working, keep you logged in, and keep checkout secure. We do not currently run advertising or analytics cookies that require consent.

If this changes—for example, if we begin using advertising pixels or third-party analytics—we will update this Privacy Statement and put an appropriate cookie-consent banner in place before any such cookie is set, so that no non-essential tracking runs without your agreement.

5. Who We Share Data With

We do not sell personal data. We share only the information necessary with partners who help us operate the business, including payment processors, couriers and fulfilment partners, hosting and IT providers, and our accountants or legal advisers where relevant.

These partners receive data only for the purpose of providing or improving the relevant service, not for their own independent marketing. Where required by law, we may also disclose personal data to a public authority.

6. International Transfers

Where a service provider we use is based outside the EEA, we put a recognised safeguard in place before any personal data is transferred, such as an EU adequacy decision or Standard Contractual Clauses.

If you would like more information about a specific transfer, email ask@zarellia.com.

7. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes described above. This generally means:

• Order and tax records are kept for as long as Romanian or EU law requires;
• Account data is kept until you close your account, subject to any legal retention requirements;
• Customer support correspondence is kept for a reasonable period after the matter is resolved;
• Marketing data is kept until you opt out or it is no longer needed.

After the relevant retention period ends, we delete or anonymise the data.

8. Keeping Your Data Secure

We use reasonable technical and organisational measures—including encryption in transit, access controls, and restricted staff access—to protect your personal data. No online system is completely without risk, so please also keep your account credentials private.

9. Your Rights

Subject to applicable legal limits, you may ask us to:

• Give you access to your personal data;
• Correct inaccurate or incomplete data;
• Delete your data;
• Restrict how your data is used;
• Provide your data in a portable format;
• Stop processing based on legitimate interests;
• Stop processing for direct marketing purposes;
• Withdraw your consent at any time.

To exercise any of these rights, email ask@zarellia.com. We may need to verify your identity before completing your request. We will respond within 30 days, unless applicable law permits an extension.

10. Children

The site is intended for adults, consistent with the 18+ requirement in our Terms. Separately, we do not knowingly collect personal data from anyone under the age of 16. If you believe we have collected such data, please contact us and we will take appropriate steps to delete it.

11. Other Websites

Our site may contain links to other websites. Those websites operate under their own privacy policies, which we do not control and for which we are not responsible. We encourage you to review their privacy policies before sharing personal data with them.

12. Complaints About How We Handle Your Data

Please contact us first at ask@zarellia.com so that we can try to resolve your concern. You may also submit a complaint directly to Romania’s data protection authority:

13. Changes to This Statement

We may update this Privacy Statement as our practices, technology, or legal obligations evolve. The version published here, together with its “Last updated” date, is the current version. Where the law requires additional notice or renewed consent, we will provide it.