Privacy Policy

YamZa eenmanszaak (Zafia) respects your privacy and processes personal data in line with the GDPR. Controller: YamZa eenmanszaak, [Street, postcode, city], Netherlands. Contact: hello@zafia.eu.

Last updated: 2026-06-21

1. What we collect

For an order: name, email, delivery address, billing address and payment data (handled by Stripe — we never see your card details). For the newsletter: email and language preference.

2. Why

To fulfil your order, process payments, keep you informed of its status, meet legal accounting obligations and — with your consent — send you our newsletter.

3. Retention

Order and invoice data: 7 years (legal accounting requirement). Newsletter data: until you unsubscribe. Analytics: at most 14 months.

4. Sharing

Only what is needed: Stripe (payments), PostNL / DHL (shipping), Supabase / Lovable Cloud (EU hosting), Brevo (newsletter — if you subscribe). No sale to third parties.

5. Your rights

Access, rectification, erasure, restriction, portability and objection. Email hello@zafia.eu. You may also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

6. Cookies

See our cookie policy for the cookies we set and how to manage your consent.

7. Security

We use TLS encryption, strong authentication and minimise access to personal data.