Privacybeleid

Privacy Policy
Last updated: November 14, 2025

This Privacy Policy explains how Sal y Sol, operated by Zensa Media B.V. (“Sal y Sol”, “we”, “us”, or “our”), collects, uses and discloses your personal information when you visit or use our website and online store, make a purchase, or otherwise interact with us (together, the “Services”).

Sal y Sol operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience. Our store is powered by Shopify, which provides the underlying e-commerce platform that enables us to offer the Services to you.

If there is any conflict between this Privacy Policy and our Terms and Conditions, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are (Data Controller)

The controller responsible for your personal information in connection with the Services is:

Zensa Media B.V.
trading under the brand name “Sal y Sol”
Oostakkerstraat 59
1066 HR Amsterdam
The Netherlands

Chamber of Commerce (KvK): 34234911

Contact for privacy matters:
📧 info@sal-y-sol.eu

For the purposes of the EU/UK General Data Protection Regulation (“GDPR”), Zensa Media B.V. is the data controller of your personal information in relation to the Services.

2. Personal Information We Collect

“Personal information” means information that identifies, relates to, describes, or can reasonably be associated with you as an individual. It does not include data that has been irreversibly anonymised or aggregated.

Depending on how you use the Services and what the law in your country allows, we may collect the following categories of personal information:

2.1 Contact and Account Details

First and last name
Billing and shipping address
Email address
Phone number
Account login data (if you create an account), such as username and password
Communication and marketing preferences

2.2 Order and Transaction Information

Products viewed, added to cart, wishlisted or purchased
Order history, returns, exchanges and cancellations
Order numbers, transaction dates and order value
Delivery details (carrier, tracking, delivery status)

2.3 Payment Information

Payment is processed by Shopify and/or our payment providers. We may receive limited payment information, such as:

Payment method (e.g., credit card, iDEAL, PayPal)
Payment status and confirmation

We do not store your full card number or security code on our own servers.

2.4 Device and Usage Data

IP address
Device type and operating system
Browser type, language and version
Referring URL (the page that led you to our site)
Date, time and duration of your visits
Pages viewed, links clicked and navigation behaviour
Interactions with our emails (e.g., opens, link clicks)

2.5 Communications and Support

Content of messages you send us (email, contact forms, social media, etc.)
Information provided during customer support interactions, complaints, or surveys
Product reviews or feedback you choose to submit

2.6 Inferred Data

We may derive limited insights from other data we hold, such as:

Preferences for certain styles, categories or price ranges
Trends in your shopping behaviour (for example, likely interest in new collections)

3. How We Collect Personal Information

We collect personal information from the following sources:

Directly from you
- When you browse or use our website
- When you place an order or request a return
- When you create an account or subscribe to our newsletter
- When you contact us via email, social media or other channels
Automatically via the Services
- Through cookies, pixels, and similar tracking technologies
- Through your browser and device when you access our website
From Shopify and other service providers
- Shopify as our e-commerce platform
- Payment processors, shipping companies, marketing and analytics providers who process data on our behalf
From third parties and partners
- Advertising platforms and social networks, if you interact with our content or ads on those platforms

4. Legal Bases for Processing (EEA/UK)

Where GDPR or similar laws apply, we process your personal information based on one or more of the following legal bases:

Contract – to perform our contract with you or take steps at your request before entering into a contract (e.g., to process an order).
Legal obligation – to comply with laws and regulations (e.g., tax, bookkeeping).
Legitimate interests – to operate, protect and improve our Services and business (e.g., analytics, fraud prevention, customer service), where these interests are not overridden by your rights and interests.
Consent – for certain activities such as non-essential cookies, some forms of targeted marketing and, where required, sending electronic marketing communications. You may withdraw consent at any time.

5. How We Use Your Personal Information

We use personal information for the following purposes:

5.1 To Provide and Operate the Services

Processing and fulfilling your orders
Handling payments, refunds, returns and exchanges
Managing your customer account
Providing customer support and responding to your requests
Operating and maintaining our website and online store

Legal basis: Contract; legitimate interests.

5.2 To Improve and Personalise Your Experience

Understanding how visitors use our website
Improving site performance, layout and content
Recommending products, collections or content that may interest you
Maintaining a curated, brand-consistent experience

Legal basis: Legitimate interests; consent (where required for profiling/targeting).

5.3 Marketing and Advertising

We may use your personal information to:

Send you newsletters, updates and promotional emails if you have subscribed or if we are permitted to do so under applicable law (for example, to existing customers).
Show you advertising for our products on our site and on third-party platforms (such as Meta / Facebook / Instagram, Google and other networks).
Measure and improve the effectiveness of our marketing campaigns.
Build audiences and segments (e.g., lookalike audiences) to target our ads more effectively.

We use cookies, pixels and similar technologies to support these activities, including:

Shopify’s marketing and analytics tools
Meta Pixel (Facebook/Instagram)
Google Analytics and similar analytics tools
Other advertising and analytics partners

Where available in these tools, we may activate enhanced or “maximum” data-sharing features, such as advanced matching, in order to:

Better understand how customers move between our ads and our store
Optimise campaigns and measure conversions
Improve the relevancy of ads and offers
Improve our store and the shopping experience

We only do this in accordance with applicable law and based on an appropriate legal basis (typically your consent for non-essential cookies and targeted advertising in the EU/UK).

You can manage your marketing preferences and cookie choices (see Sections 6 and 12).

Legal basis: Consent; legitimate interests (where permitted).

5.4 Security and Fraud Prevention

Authenticating users and protecting accounts
Detecting and preventing fraud, abuse or security incidents
Protecting our rights, property and safety, and that of our customers and the public

Legal basis: Legitimate interests; legal obligation.

5.5 Compliance and Legal Obligations

Complying with tax, accounting and other regulatory requirements
Responding to lawful requests from authorities
Enforcing our Terms and other agreements

Legal basis: Legal obligation; legitimate interests.

6. Cookies and Similar Technologies

We use cookies, pixels and similar technologies on our website to:

Ensure the website functions properly (strictly necessary cookies)
Remember your preferences and improve usability (functional cookies)
Understand how visitors use our site (analytics cookies)
Provide and measure personalised advertising (marketing cookies)

Some cookies are essential for the operation of the site and are set without your consent. For other cookies (especially analytics and marketing), we may ask for your consent via a cookie banner or preference centre, depending on legal requirements.

You can:

Manage your cookie preferences via our cookie banner, if available;
Adjust your browser settings to refuse or delete cookies;
Note that disabling some cookies may affect the functionality or performance of the website.

Details of the cookies we use, their purposes and lifetimes may be provided in a separate Cookie Policy or cookie list available on our website.

7. How We Share Personal Information

We may share your personal information with third parties in the following circumstances:

7.1 Service Providers

We share personal information with trusted service providers that perform services on our behalf, such as:

Shopify (e-commerce platform and hosting)
Payment processors and financial institutions
Shipping and logistics partners
IT and cloud infrastructure providers
Analytics and performance tools
Email and marketing platforms
Customer support and communication tools

These parties are only allowed to process your personal information in accordance with our instructions and for the purposes described in this Privacy Policy.

7.2 Marketing and Advertising Partners

We may share limited information (for example, hashed email addresses, device data, or purchase information) with marketing and advertising partners so that they can:

Show our ads to you or to similar audiences
Measure and improve the effectiveness of campaigns
Provide aggregated reporting and insights

These partners will process your personal information in accordance with their own privacy policies. In some countries you may have the right to opt out of targeted advertising or certain types of data sharing.

7.3 Shopify as Platform Provider

Our store is hosted by Shopify. Shopify collects and processes personal information about your interactions with our store and other stores on the Shopify platform in order to provide, maintain and improve the platform.

In some cases, Shopify acts as our processor (for example, when processing orders and payments on our behalf). In other cases, Shopify may act as an independent controller when it uses information for its own legitimate purposes (e.g., fraud prevention across merchants, platform analytics, product improvement).

To understand how Shopify uses personal information and how you can exercise your rights directly with Shopify, please refer to the Shopify Consumer Privacy Policy and Shopify’s privacy portal, as referenced on Shopify’s own website.

7.4 Corporate Group and Business Transfers

We may share personal information within our corporate group, where applicable, for internal administrative purposes.

In the event of a merger, acquisition, reorganisation, sale of assets or bankruptcy, personal information may be transferred as part of the business assets, subject to applicable law and appropriate safeguards.

7.5 Legal Obligations and Protection

We may disclose personal information if we believe in good faith that this is reasonably necessary to:

Comply with applicable laws, regulations or legal processes
Respond to requests from public authorities or regulators
Enforce our Terms and other agreements
Protect our rights, property and safety, or that of our customers or the public

8. Third-Party Websites and Social Media

The Services may contain links to third-party websites or services that are not operated or controlled by us. We are not responsible for the privacy, security or content of these external sites.

If you interact with us on social media platforms (such as Instagram, Facebook, TikTok or Pinterest) or use social login or social sharing features, the relevant platform will process your personal information in accordance with its own privacy policy.

We encourage you to review the privacy policies of any third-party sites or platforms you visit.

9. Children’s Data

Our Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of majority in their country of residence.

If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at info@sal-y-sol.eu so that we can take appropriate steps to delete the information where required.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share” personal information of individuals under 16 years of age, as those terms may be defined in certain privacy laws.

10. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration. These measures include:

Secure hosting environments
Access controls and authentication
Encryption where appropriate
Regular monitoring and maintenance

However, no system is completely secure, and we cannot guarantee absolute security. Any information you transmit to us is at your own risk. We recommend that you:

Use strong, unique passwords for your account
Keep your login details confidential
Notify us immediately if you suspect unauthorised access to your account

11. Retention of Personal Information

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, including:

Providing the Services and fulfilling contracts
Managing your account and customer relationship
Complying with legal, tax and accounting obligations
Resolving disputes and enforcing our rights

Retention periods may vary depending on the type of data and the legal requirements. For example:

Order and transaction records are typically retained for a number of years to comply with tax and bookkeeping laws.
Marketing data may be kept until you unsubscribe or object, or until it is no longer needed for our legitimate interests.
Account data is stored as long as your account is active and for a reasonable period thereafter, unless deletion is requested and legally permitted.

When personal information is no longer required and no legal obligation to retain it applies, we will delete or anonymise it.

12. Your Rights and Choices

Depending on where you live and subject to legal conditions and limitations, you may have the following rights with respect to your personal information:

Right of access – to request confirmation whether we process your personal information and to receive a copy of that information.
Right to rectification – to request correction of inaccurate or incomplete personal information.
Right to erasure – to request deletion of your personal information in certain circumstances.
Right to restriction of processing – to request that we restrict the processing of your personal information in certain situations.
Right to data portability – to receive personal information you have provided to us in a structured, commonly used and machine-readable format and to request that we transfer it to another controller where technically feasible.
Right to object – to object, on grounds relating to your particular situation, to certain processing activities, including direct marketing and profiling for marketing purposes.
Right to withdraw consent – where we rely on consent, you may withdraw your consent at any time. This does not affect the lawfulness of processing before the withdrawal.

12.1 Marketing Communications

You can manage your marketing preferences by:

Clicking the “unsubscribe” link in any marketing email we send; or
Contacting us at info@sal-y-sol.eu.

Even if you opt out of marketing, we may still send you non-promotional messages related to your orders or your account.

12.2 Exercising Your Rights

To exercise any of the rights above, please contact us at:

📧 info@sal-y-sol.eu

We may ask you to provide certain information to verify your identity before we act on your request. In some cases, we may be unable to fully comply with your request if we have a legal obligation or overriding legitimate interest to retain certain data; if so, we will explain this to you.

If your request relates to data that Shopify processes as an independent controller (for example, cross-merchant analytics), you may need to exercise your rights directly with Shopify, as described in Shopify’s privacy documentation.

13. Complaints and Contacting the Supervisory Authority

If you have concerns about how we handle your personal information, we encourage you to contact us first at:

📧 info@sal-y-sol.eu

We will do our best to investigate and resolve your complaint.

You also have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). A list of European data protection authorities is available on the website of the European Data Protection Board.

14. International Data Transfers

We are based in the Netherlands, but some of our service providers (including Shopify, payment processors and advertising partners) may be located in or process personal information from countries outside the European Economic Area (EEA) and the United Kingdom.

Where such transfers occur, and the destination country does not provide an adequate level of data protection according to the European Commission, we implement appropriate safeguards, such as:

Standard Contractual Clauses approved by the European Commission, and/or
Other lawful transfer mechanisms provided by data protection laws.

You may contact us for more information about the specific safeguards used for international transfers.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to:

Reflect changes in our Services, practices or business
Comply with new legal or regulatory requirements
Integrate new technologies or service providers

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy. If we make material changes, we will provide additional notice where required (for example, on the website or by email).

Your continued use of the Services after changes have been published means that you accept the updated Privacy Policy.

16. How to Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or if you would like to exercise your rights, you can contact us at:

📧 info@sal-y-sol.eu
📍 Zensa Media B.V. – Sal y Sol