Privacy Policy

Zodiverse Publishing OÜ (“we,” “us,” “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you visit thezodiverse.com or purchase products from us.

We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and UK Data Protection Act 2018.

1. What Data We Collect

When you make a purchase, we collect:

• Full name
• Email address
• Shipping address
• Billing address
• Order details and history

When you visit our website, we may collect:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring website

When you contact us:

• Name
• Email address
• Message content

2. How We Use Your Data

We use your data for the following purposes:

• To fulfil and deliver your orders
• To communicate with you about your orders
• To process refunds or exchanges
• To respond to your enquiries
• To improve our website and services
• To comply with legal obligations

We do not use your data for automated decision-making or profiling.

3. Legal Basis for Processing

Under GDPR, we process your data on the following legal bases:

• Contract: Processing necessary to fulfil your order
• Legitimate interest: Improving our website and services
• Consent: Where you have opted in to receive communications
• Legal obligation: Where required by law (e.g., tax records)

4. Who We Share Your Data With

We share your data only with the following third parties, solely for order fulfilment and website operation:

• Stripe — payment processing (see Stripe’s privacy policy at stripe.com/privacy)
• Royal Mail / postal services — order delivery
• Website hosting provider — website infrastructure

We do not sell, rent, or trade your personal data to any third party. We do not share your data with marketing companies or advertisers.

5. International Data Transfers

As an Estonian company, your data may be processed within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g., to payment processors), appropriate safeguards are in place in accordance with GDPR requirements.

6. Data Retention

We retain your personal data for the following periods:

• Order data: 7 years (for tax and accounting compliance)
• Contact enquiries: 2 years
• Website analytics: 26 months

After these periods, data is securely deleted.

7. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict processing of your data
• Object to processing of your data
• Data portability — receive your data in a structured format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at loridze@thezodiverse.com. We will respond within 30 days.

8. Cookies

Our website uses cookies to ensure proper functionality and to understand how visitors use the site.

Essential cookies: Required for the website to function (e.g., shopping cart, session management). These cannot be disabled.

Analytics cookies: Help us understand how visitors use the site. These are only placed with your consent.

You can manage your cookie preferences through your browser settings. For more details, see our Cookie Policy.

9. Children’s Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment data is handled by Stripe and is never stored on our servers.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

12. Contact and Complaints

For any privacy-related questions or to exercise your rights:

Zodiverse Publishing OÜ
Email: loridze@thezodiverse.com

If you are not satisfied with our response, you have the right to lodge a complaint with:

• Estonia: Andmekaitse Inspektsioon (Data Protection Inspectorate) — aki.ee
• UK: Information Commissioner’s Office (ICO) — ico.org.uk