1. Controller
ZAHI LTD.
Lordou Vyronos 61–63, 6th floor, Office 602
6023 Larnaca
Cyprus
Email: customerservice@zahi.paris
WhatsApp: +359 89 470 0934
Company Registration No.: MCIT HE 486415
VAT ID No.: CY60320335O
2. General Information on Data Processing
We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws of Cyprus.
“Personal data” means any information relating to an identified or identifiable natural person (e.g., name, address, email address, telephone number, IP address).
3. Data Collection and Use for Contract Fulfillment
a) Orders via eBay
When you place an order through our eBay store, eBay processes your data (name, address, email, payment information) and provides it to us for the purpose of fulfilling the contract.
We process this data to process your order, ship your goods, and respond to inquiries (Art. 6(1)(b) GDPR).
b) Our Website
When you visit our website, the following data is automatically collected:
- IP address
- Date and time of access
- Browser and operating system
- Referrer URL
This data is used for system security and stability (Art. 6(1)(f) GDPR) and is deleted after 7 days.
4. Disclosure of Data to Third Parties
We only share personal data where necessary:
- for contract fulfillment (Art. 6(1)(b) GDPR)
- to comply with legal obligations (Art. 6(1)(c) GDPR)
Recipients may include:
- Shipping providers
- Payment providers (PayPal, Klarna, Stripe, eBay Payments)
- Accounting, tax advisors, authorities
Transfers to third countries (e.g., USA) may occur where required. In such cases, appropriate safeguards such as Standard Contractual Clauses are used (Art. 46 GDPR).
5. Payment Service Providers
PayPal
If you choose PayPal, your payment data is transmitted to:
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
Legal basis: Art. 6(1)(b) GDPR.
Klarna / Credit Card / Apple Pay
Payments are processed via respective providers (e.g., Klarna Bank AB or Stripe).
Legal basis: Art. 6(1)(b) GDPR.
6. Shipping and Logistics
For delivery purposes, your data (name, address, and where necessary phone number) is shared with the assigned shipping provider.
Legal basis: Art. 6(1)(b) GDPR.
EU Warehouse / Logistics Partner
ZAHI LTD. uses a logistics partner within the EU:
Courier Today Ltd.
Podporuchik Yordan Todorov 6
1528 Sofia
Bulgaria
Data is shared strictly for order fulfillment.
7. Returns Processing
Returns are processed via a ticket system.
Customers must contact: support@zahi.group before returning goods.
Return addresses may vary depending on the country.
Data processing is carried out for contract fulfillment (Art. 6(1)(b) GDPR).
8. Contact
When contacting us (email, WhatsApp), your data is processed to handle your request.
Legal basis:
- Art. 6(1)(b) GDPR (contract / pre-contract)
- Art. 6(1)(f) GDPR (customer service)
Your data will be deleted once your request is completed.
9. Cookies
Our website uses cookies necessary for functionality and security.
Legal basis: Art. 6(1)(f) GDPR and applicable national laws.
You can disable cookies in your browser, which may limit functionality.
10. Analytics Tools (if applicable)
If analytics tools (e.g., Google Analytics) are used:
Processing only takes place with your consent (Art. 6(1)(a) GDPR).
Consent can be withdrawn at any time.
(Remove this section if not used.)
11. Storage and Deletion of Data
We retain personal data only as long as necessary:
- Contract fulfillment
- Legal retention obligations (up to 10 years)
Afterwards, data is deleted or anonymized.
12. Your Rights
You have the following rights:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
Contact: customerservice@zahi.paris
13. Right to Lodge a Complaint
Supervisory authority in Cyprus:
Office of the Commissioner for Personal Data Protection
1 Lasonos Street
1082 Nicosia
Cyprus
Email: commissioner@dataprotection.gov.cy
14. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.
15. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time.
Last updated: 08/05/2026
