Privacy Policy
Zallya Privacy Policy
Last updated: July 24, 2025
This Privacy Policy describes how Zallya ("we", "us", "our", or the "Site") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.zallya.com (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
Please read this Privacy Policy carefully.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The updated version will be posted on the Site with a revised "Last updated" date.
How We Collect and Use Your Personal Information
We collect personal information over the past 12 months through various sources depending on your interaction with us. This includes:
Information You Provide
- Contact details: name, address, phone number, and email
- Order details: billing/shipping address, payment info, confirmation
- Account info: username, password, security questions
- Customer support messages
You can choose not to provide certain info, but this may impact the use of some Services.
Information from Your Usage
- Usage data: device type, browser info, IP address, page views, referring site, actions on site
- Collected via: cookies, pixels, web beacons, SDKs, log files
Information from Third Parties
- Shopify (store platform): Shopify Privacy Policy
- Payment processors (Shopify Payments, Stripe, PayPal, etc.)
- Advertising/Analytics: Google, Meta, Bing
- Shopify Audiences: your purchase and email data may be used to reach lookalike customers across platforms
How We Use Your Personal Information
- To provide services: process orders, ship products, issue confirmations, manage returns, etc.
- Marketing: email/text campaigns, personalized ads
- Security: fraud detection, abuse monitoring
- Support and improvement: troubleshoot, analyze, optimize
If you're in the EEA, data is processed based on:
- Consent
- Contractual necessity
- Legal obligation
- Legitimate interest (e.g., marketing, analytics, fraud prevention)
Cookies
We use cookies to operate and improve our site, including remembering preferences, running analytics, and customizing ads.
Examples:
| Cookie Name | Purpose | Duration |
|---|---|---|
| _shopify_y | Shopify analytics | 1y |
| secure_customer_sig | Customer login | 20y |
| cart | Shopping cart memory | 2w |
| _session_id | Session tracking | Session |
Full cookie list: Shopify Cookies
Most browsers accept cookies by default. You can change settings to block/remove them, but this may affect your experience.
Behavioral Advertising & Opt-Outs
We may show you targeted ads on Google, Facebook, Bing, etc., based on your interactions with our Site.
You can opt out:
- Facebook: Ad Preferences
- Google: Ad Settings
- Bing: Bing Ads Opt-Out
- General: DAA Opt-Out
Global Privacy Control (GPC) and Do Not Track
Our website honors GPC signals where supported, automatically opting users out of “sharing” as defined under applicable laws. We do not respond to other Do Not Track signals at this time.
Automated Decision-Making
We use limited automated decision-making, via Shopify, to help prevent fraud:
- Blacklisting IPs after failed attempts
- Flagging suspicious credit cards
This automation has no legal or significant effect on you beyond fraud prevention.
How We Share Your Personal Information
We may disclose your data to:
- Service providers (IT, hosting, fulfillment, email, analytics)
- Marketing partners (for remarketing, retargeting)
- Business transfers (mergers, acquisitions)
- Legal authorities (if required)
- Affiliates within our corporate group
We do not share sensitive personal data without your consent or use it to infer characteristics.
Data “Sale” or “Sharing” (under CCPA and similar laws)
In the last 12 months, we have "sold" or "shared" the following categories of information to marketing partners:
- Identifiers: name, email, phone number
- Commercial info: purchase history
- Usage data: on-site behavior, ad interaction
You may opt out of such sharing anytime (see above).
Third Party Links
Our Site may contain links to external websites. These are not covered by this policy. We recommend reviewing their privacy policies separately.
Children’s Data
Our Services are not directed to children under 16. We do not knowingly collect data from minors. If you believe your child provided us data, please contact us for deletion.
Security and Data Retention
We take reasonable technical and organizational measures to protect your information. No system is fully secure, so avoid transmitting sensitive info through unencrypted methods.
We retain your data as long as needed for:
- Service delivery
- Compliance
- Dispute resolution
- Internal records
You may request the deletion of your personal data at any time by contacting us (see "Your Rights" section below).
Your Rights
Depending on your region (e.g., EU, California), your rights may include:
- Access / Know
- Delete
- Correct
- Portability
- Opt-Out of Sale/Sharing
- Restrict Processing
- Withdraw Consent
- Appeal Denials
- Manage Email Preferences
To exercise your rights, contact us at the email below. We may need to verify your identity before proceeding.
We do not discriminate against individuals who exercise their privacy rights.
Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority. For the EEA, you can find a list of the responsible data protection supervisory authorities here.
International Users
Your data may be transferred outside your country (e.g., US, Canada). We use recognized mechanisms (e.g., Standard Contractual Clauses) when applicable to safeguard data from the EU/UK.
Contact Us
If you have questions, want to exercise your rights, or submit a complaint, please reach out:
📧 Email: contact@zallya.com
🏢 Address: 9669 Avellino Avenue, Unit 6417, Orlando, FL, 32819, USA
We act as the data controller for your personal information.