Last updated: 13 October 2026

1. Who Is Responsible for Your Data?

Zali Store is operated by LAN PRO, UNIPESSOAL LDA, the controller of personal data processed for the operation of this store.

For privacy questions and requests, contact support@zali-store.com.

Full legal identification and contact details are available on our Company Information page.

2. Information We Collect

Depending on your interactions with our store, we process:

• Name, email address, billing details, country and tax identification information where required.
• Orders, products purchased, payments, transaction references and download access records.
• Customer support messages and correspondence.
• Information submitted for personalized products, including names, text and photographs.
• Technical and security information, such as IP addresses, browser information and access logs.
• Cookie preferences and, where enabled with the required consent, analytics and advertising information.

Providing the information necessary to process an order is required to complete the purchase. Optional marketing and analytics choices are not required.

3. Purposes and Legal Bases

We use personal data to process orders, deliver digital products, create personalized products and provide contractual customer support, based on performance of a contract under Article 6(1)(b) GDPR.

We process invoices and legally required records to comply with legal obligations under Article 6(1)(c).

We may process technical and security information to prevent fraud, protect the website and establish or defend claims, based on legitimate interests under Article 6(1)(f), where appropriate and subject to the required assessment.

Optional marketing communications and non-essential tracking technologies are based on consent where required by applicable law.

4. Personalized Orders and Children’s Information

Personalized orders may require names, photographs and other details relating to adults or children.

Customers must have the necessary legal authority to submit these materials. We request only information relevant to the product ordered.

Materials are used to prepare and deliver the requested product. We do not use customer photographs in public portfolios, advertising or AI model training without an appropriate separate legal basis and authorization.

Where a third-party AI service is used to process customer materials, the service and its relevant data processing conditions must be assessed and disclosed before such processing takes place.

5. Private File Storage

Customer-uploaded personalization materials are intended to be stored in private MinIO/S3-compatible storage, with access restricted to authorized systems and personnel.

Public product previews are stored separately from private customer materials.

Source materials are generally scheduled for deletion 30 days after completion of the order, unless further retention is legally necessary or justified by an unresolved claim.

Backups, temporary copies and generated files are handled according to the company’s implemented retention procedures.

6. Payments and Service Providers

We use WordPress and WooCommerce to manage the store and orders.

Payments may be processed by Stripe or PayPal. These providers receive information necessary to process transactions and prevent fraud and may also act as independent controllers for certain activities.

Other providers may include website hosting, infrastructure, storage, email delivery and security services.

Where a provider acts as a processor on our behalf, we use the contractual safeguards required by applicable data protection law.

7. International Transfers

Some providers may process personal data outside the European Economic Area.

Where international transfers occur, we apply the relevant legal transfer mechanisms and safeguards, such as adequacy decisions or Standard Contractual Clauses, where applicable.

Information about relevant safeguards can be requested at support@zali-store.com.

8. How Long We Keep Data

Personalization source materials are generally retained for up to 30 days after order completion, subject to justified exceptions.

Order, invoice and accounting information is retained for the periods required by applicable law.

Security logs, customer support communications, consent records and other operational data are retained according to their purpose and the retention periods established for the relevant systems.

We do not keep personal data indefinitely without a lawful purpose.

9. Cookies

Essential cookies support shopping cart, checkout and security functions.

Optional analytics and marketing technologies are used only in accordance with applicable consent requirements.

You can manage your choices through Cookie Settings. Further details are provided in our Cookie Policy.

10. Your Rights

Under applicable data protection law, you may have rights to access, correct, erase, restrict or receive your personal data, object to certain processing and withdraw consent where applicable.

You can submit requests to support@zali-store.com. We may request reasonable verification of your identity.

You may lodge a complaint with the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), at https://www.cnpd.pt/.

11. Security

We use appropriate technical and organizational measures to protect personal data, including access controls and secure communications.

The precise measures are reviewed in accordance with the risks of the processing.

12. Updates and Contact

We may update this policy when our services or data processing activities change.

For questions or requests, email support@zali-store.com.