Privacy

Data collected

• Name, email, address, phone (order processing)
• Payment information (processed by our payment processor, we do not store card data)
• Browsing data (cookies, see the cookies section below)

How we use it

Process and fulfill orders · order updates and tracking · email marketing (with
consent, opt out anytime) · site improvement.

Regional rights

EU (GDPR): lawful basis: contract performance + legitimate interest. Right to
access, rectify, erase, restrict, port. We do not sell personal data.
UK (UK GDPR/PECR): same rights as EU; marketing requires opt-in.
US (CAN-SPAM/CCPA): opt-out honored within 10 business days; we do not sell
personal data.
Canada (CASL): marketing email requires express or implied consent; no cold lists.
Australia (Spam Act): marketing requires consent; unsubscribe honored.
UAE (PDPL): consent-based processing for marketing; no cold lists.
Data requests: hello@zarbish.com

Retention

Order data: 7 years (tax compliance). Marketing data: until opt-out. Support
correspondence and dispute records: retained as long as necessary to resolve
claims (legitimate interest, chargeback and dispute defense).

Cookies

Essential cookies (checkout, cart, session) · analytics (GA4, can be declined) ·
marketing pixels (Meta, EU/UK require consent).
EU/UK visitors: consent banner on first visit; non-essential cookies off by default.
US visitors: analytics/marketing active unless opted out.