LEGAL
Privacy Policy
How ZORULAB uses and protects personal information.
Last updated: 19 August 2026Controller
The seller identified below is the controller of personal data collected through this store. Contact us using the business email for privacy requests.
Order data
We process the customer’s name, email, phone number, delivery address or pickup point, order contents, payment status, carrier information and support messages to perform the contract, deliver the order, prevent misuse and comply with accounting, tax and consumer-law obligations. ZORULAB does not receive or store full card details.
Service providers
Stripe processes payments and Packeta processes delivery. They receive only the information needed to provide their services and also apply their own privacy terms. Technical hosting providers process data only as needed to operate and secure the store.
Support and B2B enquiries
Information submitted through support or a B2B form is used to answer the request and prepare or perform a contract. Uploaded logos and project files are used only for that enquiry or order.
Analytics and cookies
Essential storage is used to operate the cart, checkout and security features. Optional analytics is activated only after consent and records a random visitor identifier, campaign source, page views and shopping actions. Consent can be refused without losing access to the store.
Retention
Order and invoice records are retained for the period required by applicable accounting and tax law. Support, analytics and abandoned-order data is retained only for as long as reasonably necessary for its stated purpose.
Your rights
Depending on the legal basis, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw analytics consent and may complain to the Office for Personal Data Protection of the Slovak Republic.
Marketing
Order data is not automatically enrolled in marketing. Promotional email requires separate consent and includes an unsubscribe method.
Questions about an order, return or privacy request should include the order number but never card details, passwords or API keys.