PRIVACY POLICY
Last updated: 23 October 2026
This Privacy Policy explains how Zanaki Seeds (“we”, “us” or “our”) collects, uses, stores and protects personal data when you visit zanakiseeds.com, contact us or purchase products through our website.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
1. DATA CONTROLLER
The data controller responsible for processing your personal data is:
Business name: Zanaki Seeds
Email: zanakiseeds@protonmail.com
Website: https://zanakiseeds.com
For privacy-related questions or requests concerning your personal data, please contact us using the email address above.
2. PERSONAL DATA WE COLLECT
Depending on how you interact with our website, we may collect the following categories of personal data.
2.1. Identity and contact information
When you place an order or contact us, we may collect your name, surname, email address, telephone number and billing or delivery address.
2.2. Order and transaction information
When you purchase products, we may process order details, products purchased, quantities, order references, delivery information, payment status, refund records and related customer service communications.
Payment card details are generally processed by the relevant payment service provider. We do not intend to store full payment card details on our own systems unless expressly stated and appropriately secured.
2.3. Customer communications
If you contact us by email or through a website form, we may process the information you provide, including your contact details, message content and any information necessary to respond to your request.
2.4. Technical and usage information
When you visit our website, certain technical information may be collected, such as your IP address, browser type, device information, access timestamps, requested pages and security logs.
Cookies and similar technologies may also collect information about website usage, depending on the tools implemented and your consent choices where consent is required.
2.5. Marketing preferences
If we offer a newsletter or other marketing communications, we may process your email address, subscription status, consent records and preferences.
We will not use your personal data for direct marketing where a valid legal basis is absent.
3. HOW WE USE YOUR PERSONAL DATA
We process personal data for the following purposes:
3.1. Processing and fulfilling orders
To receive and manage orders, process payments, arrange shipping, provide order confirmations, handle returns and refunds, and communicate with customers about purchases.
Legal basis: Performance of a contract or steps taken at your request before entering into a contract.
3.2. Customer support
To answer enquiries, investigate complaints, respond to requests and provide assistance concerning products or orders.
Legal basis: Performance of a contract where relevant, or our legitimate interest in responding to enquiries and managing customer relationships.
3.3. Accounting and legal compliance
To maintain accounting records, issue invoices where required, comply with tax obligations, respond to lawful requests from public authorities and fulfil other legal obligations.
Legal basis: Compliance with a legal obligation.
3.4. Website security and fraud prevention
To protect the website, detect suspicious transactions, prevent abuse, maintain system security and investigate potential fraud.
Legal basis: Our legitimate interests in protecting our business, customers and digital infrastructure, where those interests are not overridden by your rights and freedoms.
3.5. Website operation and improvement
To maintain website functionality, understand website performance and improve the user experience through analytics or similar tools, where implemented.
Where applicable law requires consent for cookies or comparable technologies, these technologies will be used only in accordance with the relevant consent requirements.
3.6. Marketing communications
Where we offer newsletters or promotional communications, we may use your contact details to send them where we have a valid legal basis.
Where consent is required, we will obtain it before sending marketing communications. You may withdraw your consent or unsubscribe at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
4. WHETHER PROVIDING DATA IS REQUIRED
Some personal data is necessary to process an order, arrange delivery, issue required documentation or comply with legal obligations.
If you do not provide the information necessary for these purposes, we may be unable to fulfil your order or respond to your request.
Other information, such as optional marketing preferences, is voluntary. Refusing to provide optional information will not prevent you from purchasing products where that information is not necessary for the transaction.
5. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies and similar technologies to support essential website functions, remember preferences, analyse traffic or provide other features.
Strictly necessary technologies may be used where permitted by applicable law. Non-essential analytics, advertising or tracking technologies will be used only where the required consent has been obtained.
Where a consent mechanism is required, you can use it to accept or reject non-essential cookies and change your preferences as supported by the website.
For more information about the cookies actually used on our website, their purposes and how to manage them, please consult our separate Cookie Policy and the available cookie settings.
6. WHO MAY RECEIVE YOUR PERSONAL DATA
We may share personal data with third parties where necessary for the purposes described in this Privacy Policy.
Depending on the services actually used by Zanaki Seeds, these recipients may include:
Website and hosting providers, including IONOS where it provides services to our website.
Payment service providers, to process payments, refunds and transaction-related checks.
Shipping and logistics providers, to deliver orders and manage shipment tracking.
Accounting, tax and professional advisers, where necessary for business administration and legal compliance.
IT, security and technical service providers, where needed to maintain and protect our systems.
Public authorities, courts and law enforcement bodies, where disclosure is required by law or is otherwise lawful.
Third parties may process personal data on our behalf as data processors or act as independent controllers, depending on their role and the applicable arrangements.
We do not sell personal data to third parties.
7. INTERNATIONAL DATA TRANSFERS
Where personal data is transferred outside the European Economic Area (“EEA”), we will ensure that the transfer complies with applicable data protection law.
Depending on the circumstances, this may involve a European Commission adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.
Information about specific international transfers and applicable safeguards may be requested using the privacy contact details provided above.
The actual transfer arrangements depend on the website services and third-party providers used by Zanaki Seeds.
8. HOW LONG WE RETAIN PERSONAL DATA
We retain personal data only for as long as necessary for the purposes for which it was collected, subject to applicable legal retention obligations.
Retention periods depend on the type of data and the purpose of processing.
Order and customer records: For the duration necessary to manage the transaction, customer service, disputes and applicable legal obligations.
Accounting and tax records: For the retention period required by applicable accounting and tax legislation.
Customer service communications: For the time necessary to respond to enquiries and manage any related dispute or legal claim.
Marketing information: Until consent is withdrawn or the relevant marketing purpose no longer applies, subject to any limited records needed to document consent or an unsubscribe request.
Technical and security logs: For the period reasonably necessary for security, troubleshooting and incident investigation.
Cookie-related records: According to the purposes, retention periods and settings of the relevant technologies.
When personal data is no longer required, it will be deleted or anonymised where appropriate, unless continued retention is legally required or justified by another lawful basis.
9. YOUR DATA PROTECTION RIGHTS
Subject to the conditions and limitations established by applicable law, you may have the right to:
Access your personal data and obtain information about how it is processed.
Rectify inaccurate or incomplete personal data.
Request erasure of your personal data where the legal conditions are met.
Restrict processing in certain circumstances.
Object to processing based on legitimate interests, on grounds relating to your particular situation.
Receive or transfer data in a structured, commonly used and machine-readable format where the right to data portability applies.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with the competent data protection supervisory authority.
These rights are not absolute and may be subject to legal exceptions. For example, we may need to retain certain transaction records to comply with tax or accounting obligations even if you request their deletion.
To exercise your rights, contact [PRIVACY CONTACT EMAIL] and explain your request.
We may request information reasonably necessary to verify your identity before responding.
We will respond within the period required by applicable law.
10. RIGHT TO LODGE A COMPLAINT
If you believe that your personal data has been processed in violation of applicable data protection law, you may lodge a complaint with the competent supervisory authority.
Where the GDPR applies in Italy, the supervisory authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Official website: https://www.garanteprivacy.it/
You may also have the right to lodge a complaint with the supervisory authority in your habitual residence, place of work or the place of the alleged infringement, as provided by applicable law.
11. DATA SECURITY
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
These measures may include access controls, secure connections, appropriate account permissions and the use of service providers with suitable security measures.
No website, electronic transmission or storage system can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we will handle personal data in accordance with our legal obligations.
12. THIRD-PARTY WEBSITES
Our website may contain links to third-party websites or services.
Those websites operate under their own privacy policies and practices. Zanaki Seeds is not responsible for the privacy practices of external websites that it does not control.
We recommend reviewing the relevant privacy policy before submitting personal information to a third party.
13. CHILDREN'S PRIVACY
Our website and products are not intended to encourage unlawful activity or to circumvent age restrictions.
We do not knowingly seek to collect personal data from children where doing so would violate applicable law.
If you believe that a child has provided personal data to us unlawfully, please contact us so that we can review the matter and take appropriate action where necessary.
14. AUTOMATED DECISION-MAKING
We do not intend to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, unless this is disclosed separately and carried out in accordance with applicable law.
Where such processing applies, we will provide the information required by law concerning the process, its significance and its expected consequences.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in legislation, website functionality, business operations or the services we use.
The latest version will be published on this page with its updated date.
Where required by law, we will provide additional notice of material changes or obtain consent for new processing activities.
16. CONTACT
For questions about this Privacy Policy or to exercise your data protection rights, contact:
Zanaki Seeds
Privacy contact:zanakiseeds@protonmail.com
Website: https://zanakiseeds.com
We will review privacy-related requests and respond in accordance with applicable data protection law.
Important publication note: This Privacy Policy must be adapted to the actual data processing activities of Zanaki Seeds before publication. In particular, confirm the website operator's legal identity, hosting configuration, payment providers, shipping services, cookie and analytics tools, marketing systems, retention periods and any international data transfers.