Legal

Privacy policy

Last updated 26 September 2026

This policy explains how CLUES CLOTHING LIMITED, trading as ZENVOORI (“we”), collects and uses personal data when you visit zenvoori.shop, place an order, create an account or contact us. We are the data controller. Our company details are on the Legal information page and you can reach us about privacy at support@zenvoori.shop.

Data we collect

  • Order data: name, billing and delivery address, email address, phone number (optional), items ordered, prices, currency and order history.
  • Payment data: payments are handled by our payment providers. We receive confirmation of payment and limited details (such as card type and last four digits) but never your full card number.
  • Account data: if you create an account, your login email, password (stored encrypted) and saved addresses.
  • Messages: what you send us by email, phone or the contact form.
  • Technical data: IP address, browser type and the cookies described in our Cookie policy, used to run the shop and keep it secure.

How we use it and our legal bases

PurposeLegal basis
Processing and delivering your order, refunds and returnsPerformance of a contract
Answering your messages and providing customer careContract, or our legitimate interest in helping you
Keeping accounting and tax recordsLegal obligation
Preventing fraud and keeping the website secureLegitimate interests
Running your customer accountContract

We do not use your data for advertising profiles, we do not sell it, and we do not send marketing emails unless you have asked to receive them.

Who we share it with

We share personal data only with service providers that help us run the shop, under contracts that require them to protect it:

  • our website hosting provider, which stores the website and its database;
  • payment providers, which process payments and screen for fraud;
  • delivery carriers, which receive your name, address and, where needed for delivery updates, your email or phone number;
  • our email provider, used to send order and customer care emails.

We may also disclose data where required by law or to protect our legal rights.

International transfers

Some providers may process data outside the UK or the European Economic Area, for example in the United States. Where this happens we rely on adequacy decisions or on standard contractual clauses approved by the UK and EU authorities, together with appropriate safeguards.

How long we keep it

  • Order and invoice records: 6 years after the end of the financial year of the order, as required by UK tax law.
  • Customer care messages: 2 years after the conversation ends.
  • Customer accounts: until you ask us to delete the account, or after 3 years without activity.

Your rights

Under the UK GDPR and the EU GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its use, to data portability and to withdraw consent at any time where we rely on consent. To exercise any right, email support@zenvoori.shop. We reply within one month. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority in your EU country.

Customers in the United States

We do not sell personal information and we do not share it for cross-context behavioural advertising. Residents of California and other US states with privacy laws can ask us to disclose, correct or delete the personal information we hold about them by emailing support@zenvoori.shop; we will not treat you differently for doing so.

Children

Our shop is not directed at children under 16 and we do not knowingly collect their personal data.

Security

The whole website is served over an encrypted HTTPS connection. Access to personal data is limited to people who need it to run the shop.

Changes

We will update this policy if the way we handle personal data changes. The date at the top of the page shows when it was last updated.