Privacy Policy
Last updated: September 3, 2026
This Policy describes how we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable United Kingdom data protection laws.
ZOREA DISTRIBUTION is the controller of personal data processed through zoreadistr.com. For privacy requests, contact [email protected].
Data we collect and why
We may process identity and contact details, delivery and billing details, order and customer-service history, payment status, technical and device data, and cookie preferences.
We use this data to create and perform the sales contract, deliver orders, provide customer support, prevent fraud, secure the website, comply with legal obligations, and, where you have consented or where otherwise permitted by law, send marketing communications and measure website performance.
Our legal bases include performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting our business, and consent where required.
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Who receives your data
Access to personal data is limited to authorised staff and service providers who need the information to operate the store, including payment providers, delivery companies, customer-support providers, hosting providers, and other website-service providers.
Where required, these providers process personal data under appropriate contractual and data-protection safeguards.
Retention
We retain order, account, and transaction data only for as long as necessary for the purposes described above and to comply with applicable legal, accounting, tax, and limitation requirements.
Customer-service records are retained for as long as reasonably necessary to resolve requests and manage or defend related legal claims.
Marketing information is retained until you unsubscribe, withdraw consent, or object to the processing, subject to any applicable legal retention requirements.
International transfers
If personal data is transferred outside the United Kingdom, we will use an appropriate lawful transfer mechanism as required by UK data protection law.
This may include a UK adequacy regulation, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the European Commission’s Standard Contractual Clauses, or another legally recognised safeguard, together with supplementary measures where appropriate.
Your rights
Subject to applicable UK data protection law, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete personal data
- Request deletion of your personal data
- Request restriction of processing
- Request data portability
- Object to certain types of processing
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at [email protected] and provide enough information for us to identify and respond to your request.
You also have the right to lodge a complaint with the UK data protection regulator, the Information Commissioner’s Office (ICO).
Cookies
We use essential cookies where necessary to operate the website.
Non-essential cookies, including analytics, advertising, or similar technologies, are used only where required consent has been obtained.
You can manage your cookie preferences through the cookie controls available on the website and through your browser settings.
Sanctions Compliance
Our Terms of Service and Shipping Policy contain the sanctions-compliance conditions that apply to use of the Services.
Any personal data processed for sanctions screening, fraud prevention, or regulatory compliance will be limited to what is reasonably necessary to comply with applicable legal obligations and protect our business.