Privacy policy

1. Who is responsible

The controller for the processing of personal data on www.ziryab.it is NOYAN LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, email: noyanltd@altuon.com.

Our representative in the European Union under Article 27 GDPR: [to be appointed and completed].

2. What we process and why

• Orders: name, delivery and billing address, email, phone (optional), ordered items and payment status — to perform the contract (Art. 6(1)(b) GDPR) and to meet tax and accounting obligations (Art. 6(1)(c) GDPR).
• Customer account (optional): email address and your order history, if you sign in with a link sent to your email.
• "Notify me" requests: your email and the product you are waiting for, to tell you once it is available (consent, Art. 6(1)(a) GDPR). You can withdraw at any time.
• Newsletter: only after you confirm your subscription through the link in our email (double opt-in, consent). Each newsletter contains an unsubscribe link.
• Reviews: the name you choose and your review text, published after moderation.
• Contact: the content of your messages, to answer them.

3. Analytics without cookies

We measure visits without cookies and without identifying you. From your IP address and browser identifier we calculate a one-way hash with a key that changes every day; the IP address itself is not stored. This lets us count daily visitors and see which products are of interest in which country, but not recognise you on another day or across websites (legitimate interest, Art. 6(1)(f) GDPR).

4. Cookies and local storage

We only use technically necessary cookies: your shopping bag, your chosen language, and — if you sign in — your session. Our payment provider sets cookies needed for secure payment and fraud prevention during checkout. We do not use advertising or tracking cookies.

5. Recipients

We share data only with service providers who process it on our behalf:

• Vercel Inc. (website hosting),
• Neon Inc. (database, servers in Frankfurt, Germany),
• Stripe Payments Europe Ltd. (payment processing),
• Resend (transactional email),
• our logistics partner for warehousing and shipping [name to be completed],
• the shipping carrier delivering your parcel,
• Xero Ltd. (accounting).

Where data is transferred outside the UK/EEA, this is based on adequacy decisions or standard contractual clauses.

6. How long we keep data

Order data is kept for as long as tax and commercial law requires (up to 10 years). Account, "notify me" and newsletter data is deleted when you delete your account, withdraw your consent or unsubscribe.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time with effect for the future. Write to noyanltd@altuon.com. You may also lodge a complaint with a data protection supervisory authority, in particular in the country where you live.