At Ziitop, we recognize that the protection of your personal data is a fundamental responsibility. This Privacy & Security Statement (“Statement”) outlines our rigorous practices regarding the collection, use, and safeguarding of information for our global customers. Ziitop operates in compliance with international data protection standards, including the GDPR and CCPA.
1. DATA COLLECTION SCOPE
Ziitop limits the collection of personal information to what is strictly necessary for our business operations. We categorize the data collected as follows:
- Direct Identifiers: Full name, shipping and billing addresses, email addresses, and telephone numbers provided during the checkout process or account registration.
- Technical Metadata: IP addresses, browser specifications, operating system details, and unique device identifiers collected automatically via system logs.
- Transaction Records: Detailed logs of products purchased, purchase dates, payment status, and interaction history with our support teams.
- Behavioral Data: Interaction metrics including clickstream data and navigation paths within the Ziitop platform, collected via essential and analytical cookies.
2. LEGAL BASIS FOR DATA PROCESSING
We process your personal information under the following legal frameworks:
- Contractual Necessity: To execute the sale and delivery of footwear and related products.
- Legal Obligation: To comply with statutory requirements, including tax reporting, customs declarations, and anti-fraud mandates.
- Legitimate Interests: To perform internal research, enhance website security, and optimize our supply chain efficiency.
- Explicit Consent: For secondary purposes such as direct marketing or the deployment of non-essential tracking technologies.
3. THIRD-PARTY DISCLOSURE & INTEGRATIONS
Ziitop does not engage in the sale of consumer data. We disclose specific data subsets only to the following categories of verified partners:
- Logistics Partners: Global carriers (e.g., UPS, DHL) for order fulfillment and tracking.
- Payment Gateways: PCI-DSS compliant processors to manage financial transactions securely.
- Security & IT Infrastructure: Cloud service providers and cybersecurity firms that maintain the integrity of our digital environment.
- Regulatory Authorities: When required by law to prevent financial crime or satisfy judicial requests.
4. INTERNATIONAL DATA TRANSFERS
As a global footwear brand, Ziitop utilizes centralized data centers. Consequently, your personal information may be transferred to and processed in jurisdictions outside your country of residence. We ensure all such transfers are protected by standard contractual clauses or equivalent legal safeguards to maintain a consistent level of data protection.
5. DATA RETENTION & PURGE POLICY
Ziitop adheres to a strict data minimization principle. Your information is retained only as long as:
- The customer relationship remains active.
- It is necessary to resolve disputes or provide warranty services.
- Retention is mandated by fiscal or accounting laws (typically 5–10 years depending on jurisdiction).
Once these conditions are no longer met, data is either permanently deleted or irreversibly anonymized.
6. SECURITY PROTOCOLS
We implement multi-layered security measures, including:
- Encryption: All sensitive data is encrypted at rest and in transit using TLS 1.2 or higher.
- Access Controls: Restricted internal access to user data based on the “principle of least privilege.”
- Vulnerability Scanning: Regular security audits to identify and mitigate potential technical threats.
7. YOUR STATUTORY RIGHTS
Under applicable data protection laws, you possess the following rights:
- Right to Rectification: To correct inaccurate or incomplete data.
- Right to Erasure: To request the deletion of your personal data under specific conditions.
- Right to Data Portability: To receive your data in a structured, machine-readable format.
- Right to Object: To oppose processing based on legitimate interests or for direct marketing.
8. CONSENT AND ACKNOWLEDGMENT
By accessing the Ziitop website and utilizing our services, you acknowledge that you have read and understood this Privacy & Security Statement. Continued use constitutes agreement to the data processing practices described herein.
9. CONTACT INFORMATION
For formal inquiries regarding data privacy or to exercise your legal rights, please contact our Compliance Department:
Email: [email protected]
