Privacy Policy
This Privacy Policy explains how ZAHI LTD. collects, processes, uses, and protects your personal data when you visit our website, place an order, or contact us.
1. Controller
ZAHI LTD.
Lordou Vyronos 61–63, 6th floor, Office 602
6023 Larnaca
Cyprus
Email: customerservice@zahi.paris
WhatsApp: +359 89 470 0934
Company Registration No.: MCIT HE 486415
VAT ID No.: CY60320335O
2. General Information on Data Processing
We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws of Cyprus.
“Personal data” means any information relating to an identified or identifiable natural person, such as your name, address, email address, telephone number, or IP address.
3. Data Collection and Use for Contract Fulfillment
a) Orders via eBay
When you place an order through our eBay store, eBay processes your data, including your name, address, email address, and payment information, and provides the necessary information to us for the purpose of fulfilling the contract.
We process this data to process your order, ship your goods, and respond to inquiries.
Legal basis: Art. 6(1)(b) GDPR.
b) Our Website
When you visit our website, the following data may be automatically collected:
- IP address
- Date and time of access
- Browser and operating system
- Referrer URL
This data is used for system security and stability.
Legal basis: Art. 6(1)(f) GDPR.
This data is deleted after 7 days.
4. Disclosure of Data to Third Parties
We only share personal data where necessary:
- For contract fulfillment (Art. 6(1)(b) GDPR)
- To comply with legal obligations (Art. 6(1)(c) GDPR)
Recipients may include:
- Shipping and logistics providers
- Payment providers, including PayPal, Klarna, Stripe, and eBay Payments
- Accounting service providers and tax advisors
- Competent authorities where legally required
Transfers of personal data to third countries, such as the United States, may occur where required. In such cases, appropriate safeguards such as Standard Contractual Clauses may be used in accordance with Art. 46 GDPR.
5. Payment Service Providers
PayPal
If you choose PayPal as your payment method, your payment data is transmitted to:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
Luxembourg
Legal basis: Art. 6(1)(b) GDPR.
Klarna / Credit Card / Apple Pay
Payments may be processed through the respective payment providers, such as Klarna Bank AB or Stripe.
Legal basis: Art. 6(1)(b) GDPR.
6. Shipping and Logistics
For delivery purposes, your personal data, including your name, delivery address, and, where necessary, telephone number, is shared with the assigned shipping or logistics provider.
Legal basis: Art. 6(1)(b) GDPR.
EU Warehouse / Logistics Partner
ZAHI LTD. uses a logistics partner within the European Union:
Courier Today Ltd.
Podporuchik Yordan Todorov 6
1528 Sofia
Bulgaria
Personal data is shared with our logistics partner strictly for the purpose of order fulfillment and delivery.
7. Returns Processing
Returns are processed through a ticket system.
Customers must contact our customer support team before returning any goods. Return addresses may vary depending on the customer's country.
Email: support@zahi.group
Data related to your return request is processed for the purpose of contract fulfillment.
Legal basis: Art. 6(1)(b) GDPR.
8. Contact
When you contact us by email, WhatsApp, or another available communication channel, we process the personal data you provide in order to handle and respond to your request.
Legal basis:
- Art. 6(1)(b) GDPR – contract or pre-contractual communication
- Art. 6(1)(f) GDPR – customer service and legitimate business interests
Your data will be deleted once your request has been completed, unless applicable legal retention obligations require us to retain the information for a longer period.
9. Cookies
Our website uses cookies that are necessary for functionality and security.
Legal basis: Art. 6(1)(f) GDPR and applicable national laws.
You can disable cookies through your browser settings. Please note that disabling certain cookies may limit the functionality of our website.
10. Analytics Tools
If analytics tools such as Google Analytics are used, data processing takes place only with your consent where consent is legally required.
Legal basis: Art. 6(1)(a) GDPR.
You may withdraw your consent at any time.
11. Storage and Deletion of Data
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
- Contract fulfillment
- Processing customer service requests
- Compliance with legal retention obligations
Where statutory retention requirements apply, certain data may be retained for up to 10 years.
After the applicable retention period has expired, personal data is deleted or anonymized where appropriate.
12. Your Rights
Under the GDPR, you may have the following rights regarding your personal data:
- Right of access – Art. 15 GDPR
- Right to rectification – Art. 16 GDPR
- Right to erasure – Art. 17 GDPR
- Right to restriction of processing – Art. 18 GDPR
- Right to data portability – Art. 20 GDPR
- Right to object – Art. 21 GDPR
To exercise your rights or ask questions regarding the processing of your personal data, please contact:
Email: customerservice@zahi.paris
13. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
The supervisory authority in Cyprus is:
Office of the Commissioner for Personal Data Protection
1 Lasonos Street
1082 Nicosia
Cyprus
Email: commissioner@dataprotection.gov.cy
14. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or misuse.
15. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy when necessary, for example due to changes in our services, legal requirements, or data processing activities.
Last updated: 08/05/2026





