ZA•BI•WA

PRIVACY POLICY (ZABIWA) Last updated: 26 Jan 2026

1. DATA CONTROLLER

“Zabiwa” (French entrepreneur individuel / micro-entreprise) is the data controller for the website zabiwa.com.

Contact (email only): support@zabiwa.com
Full legal identification details are available in the website Legal Notice / Imprint.

2. DATA WE COLLECT

A) Order and customer data
When you place an order, we collect information necessary to process and deliver it, including:

• name,
• billing and shipping address,
• email address,
• purchased items,
• order notes (if any),
• delivery and order status.

B) Payment data
Payments are processed securely by Stripe. We do not store full payment card details. We may receive limited technical identifiers and payment status information from Stripe.

C) Customer support data
If you contact us, we collect the information you provide (email content, attachments, and metadata) to handle your request.

D) Technical and usage data (analytics)
We collect limited technical data such as IP address, device/browser type, pages viewed, and approximate location through Google Analytics (GA4), strictly for audience measurement and website performance analysis.

3. PURPOSES AND LEGAL BASES OF PROCESSING

A) Order processing and delivery (production, shipping, customer service)
Legal basis: performance of a contract.

B) Accounting, invoicing, and legal compliance
Legal basis: legal obligation.

C) Fraud prevention and security (payment risk checks)
Legal basis: legitimate interests and/or legal obligation, depending on the context.

D) Website audience measurement and performance analysis
Legal basis: legitimate interests, where analytics are configured in accordance with applicable exemptions for audience measurement; consent where required by applicable law.

4. DATA RECIPIENTS (PROCESSORS)

We share data only with service providers strictly necessary to operate the business:

• Stripe (payment processing and fraud prevention),
• The Print Space (production, packaging, shipping, and delivery support),
• OVHcloud (website hosting),
• Google Analytics (GA4) for website audience measurement.

We do not sell personal data and do not use it for third-party advertising or marketing purposes.

5. INTERNATIONAL DATA TRANSFERS

Some service providers may process data outside the EU/EEA (notably Stripe and Google).

Where required, such transfers rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) and supplementary measures.

The United Kingdom (where The Print Space may operate) currently benefits from an EU adequacy decision. If this status changes, appropriate safeguards will be implemented.

6. DATA RETENTION

• Orders, invoices, and accounting records are retained for the legally required period (generally up to 10 years under French law).
• Customer support communications are retained as long as necessary to handle requests and maintain a reasonable history for dispute management.
• Analytics data is retained according to the retention settings configured in Google Analytics (GA4).

7. YOUR RIGHTS (GDPR)

In accordance with the GDPR, you may exercise the following rights, depending on your situation:

• access,
• rectification,
• erasure,
• restriction,
• objection,
• data portability,
• withdrawal of consent (where processing is based on consent).

To exercise your rights, contact support@zabiwa.com from the email address associated with your order.

You also have the right to lodge a complaint with the French supervisory authority (CNIL).

8. COOKIES AND ANALYTICS

We use:

• strictly necessary technical storage required for the operation of the website and checkout process;
• Google Analytics (GA4) for limited audience measurement and site performance analysis.

We do not use:

• advertising cookies,
• tracking or retargeting pixels,
• social media tracking tools,
• profiling technologies.

Analytics tools are used solely to understand general site usage and improve performance.
You can restrict or disable cookies through your browser settings. If a consent management mechanism is implemented on the site in the future, analytics preferences will be manageable there.

9. DATA SECURITY

We implement reasonable technical and organizational measures to protect personal data. However, no system is completely secure, and absolute security cannot be guaranteed.

10. CHILDREN

This website is not intended for children under the age of 16.
If you believe that a child has provided us with personal data, please contact support@zabiwa.com.

11. POLICY UPDATES

We may update this Privacy Policy from time to time.
The version published on the website at the time of your visit is the applicable version.