Your privacy matters to us. This Privacy Policy explains how Zeyolita (“ we”, “ our”, “ us”) collects, uses, shares and protects your personal data when you visit www.zeyolita.com (“ Site”), contact us at hi@zeyolita.com or submit information through our contact form. It also describes your rights under the EU / UK General Data Protection Regulation (“GDPR”) and other applicable laws.

1. Data Controller

The data controller is Zeyolita. For any questions or to exercise your privacy rights, please email hi@zeyolita.com.

2. Personal Data We Collect

  • Information you provide — When you use the contact form we collect your name, email address, subject and message.
  • Security & log data — Your IP address, browser type, device information and the date/time of your request are automatically stored in server logs to help protect our Site against abuse.
  • Analytics data — We use Google Analytics to gather anonymised usage statistics.
  • Marketing & advertising data — If you consent, Facebook Pixel (or similar tags) records interactions so we can measure advertising performance.

3. Legal Bases for Processing

We process your personal data only when a GDPR legal basis applies:

  • Consent — for optional cookies/marketing pixels.
  • Legitimate Interest — to protect Site security, understand audience reach and improve content.
  • Contract — to respond to your enquiries and provide requested information.
  • Legal Obligation — where we must keep records or disclose information to comply with law.

4. How We Use Your Data

  • Operate, maintain and secure the Site.
  • Respond to enquiries you send us.
  • Analyse traffic, diagnose problems and optimise content.
  • Deliver and measure the effectiveness of advertising when you have consented.

5. Retention Periods

  • Contact-form submissions: kept for up to 24 months after the last correspondence, then deleted.
  • Server logs (IP addresses): retained for 12 months for security/audit purposes.
  • Analytics & marketing cookies: see Cookie Policy for individual lifespans.

6. Sharing & International Transfers

We share data only with:

  • Service providers (website hosting, email service, analytics and advertising platforms) who act under our instructions and sign data-processing agreements.
  • Legal authorities when required to comply with law or protect our rights.

Where providers are located outside the EEA/UK, we rely on EU Standard Contractual Clauses or adequacy decisions to safeguard transfers.

7. Security Measures

We protect data with industry-standard safeguards, including HTTPS encryption, firewalls, access controls and regular security reviews.

8. Your GDPR Rights

You may:

  • Request access to, or a copy of, the personal data we hold about you.
  • Ask for correction of inaccurate data.
  • Request erasure, restriction or object to certain processing.
  • Withdraw consent at any time (without affecting prior lawful processing).
  • Receive your data in a portable format.
  • Lodge a complaint with your local supervisory authority.

Email hi@zeyolita.com to exercise any of these rights.

9. Children

Our Site is not directed to children under 13. We do not knowingly collect data from minors. If you believe a child has provided us personal information, please contact us for deletion.

10. Changes to This Policy

We may update this Privacy Policy occasionally. The “Last updated” date at the top indicates the latest revision. Significant changes will be announced on the Site.

11. Contact

For privacy questions, email hi@zeyolita.com.