Privacy policy

Last updated: September 15, 2026

This online store and its related websites, products, features, content, and services (collectively, the "Services") are operated by Zept Labs ("we", "us", or "our").

This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit or use the Services, make a purchase, contact us, or otherwise interact with us.

Please read this Privacy Policy carefully.

Personal Information We Collect

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

• Contact information, such as your name, email address, telephone number, billing address, and shipping address.
• Order and transaction information, such as products purchased, order history, returns, refunds, exchanges, cancellations, payment status, and shipping information.
• Payment information, such as payment method, payment confirmation, and transaction information. Payment details may be processed directly by our payment service providers.
• Account information, where applicable, such as login credentials, preferences, and account settings.
• Communications, including information you provide when contacting us, submitting a contact form, requesting support, or communicating about an order.
• Device and technical information, such as IP address, browser type, device information, network information, and similar technical identifiers.
• Usage information, such as how you access, browse, and interact with the Services.
• Marketing and preference information, such as your communication preferences and interactions with marketing content.

How We Collect Personal Information

We may collect personal information:

• directly from you when you place an order, create an account, submit a form, contact us, or otherwise use the Services;
• automatically when you access or interact with the Services, including through cookies and similar technologies;
• from service providers that assist us with operating the Services, processing transactions, fulfilling and delivering orders, preventing fraud, providing analytics, marketing, or supporting our business; and
• from business partners and other third parties where permitted by applicable law.

How We Use Personal Information

We may use personal information to:

• provide and operate the Services;
• process and fulfill purchases and other transactions;
• process payments;
• arrange shipping and delivery;
• process returns, refunds, exchanges, and cancellations;
• provide customer support and respond to inquiries;
• maintain and manage customer accounts;
• communicate with you about orders, transactions, security, and service-related matters;
• personalize and improve the Services;
• analyze how the Services are used;
• detect, investigate, and prevent fraud, abuse, security incidents, and other unlawful activity;
• protect our customers, business, Services, and legal rights;
• comply with legal, regulatory, tax, accounting, and other obligations;
• establish, exercise, or defend legal claims; and
• send marketing or promotional communications where permitted by applicable law.

Legal Bases for Processing

We process personal information only where permitted by applicable law.

Depending on your location, the applicable law, and the circumstances of the processing, our legal basis or justification for processing may include:

• Performance of a contract, where processing is necessary to provide products or Services you requested or to take steps relating to a transaction or contract with you.
• Compliance with legal obligations, where processing is necessary to comply with applicable laws, regulations, court orders, or other legal requirements.
• Legitimate business interests, where permitted by applicable law and where our interests are not overridden by your applicable rights and interests.
• Consent, where applicable law requires or permits us to process information based on your consent.
• Other lawful grounds, where another legal basis or justification is available under the laws applicable to the processing.

The legal basis applicable to a particular activity may vary depending on your jurisdiction.

How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate our business, provide the Services, fulfill transactions, protect our legitimate interests, or comply with applicable law.

Recipients may include categories of service providers such as:

• ecommerce and website infrastructure providers;
• payment processors and financial service providers;
• fulfillment, logistics, shipping, and delivery providers;
• hosting, cloud, and technology providers;
• analytics and performance providers;
• customer-support providers;
• marketing and advertising providers;
• fraud prevention and security providers;
• professional advisers, including legal, accounting, and compliance advisers; and
• governmental, regulatory, judicial, or law-enforcement authorities where required or permitted by law.

We may also disclose information in connection with an actual or proposed merger, acquisition, financing, restructuring, sale of assets, insolvency, or similar business transaction.

We do not disclose personal information except where there is an appropriate business or legal reason to do so.

Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to operate the Services, remember preferences, maintain security, understand how the Services are used, improve performance, and, where permitted, provide advertising or marketing.

Your choices and rights regarding cookies and similar technologies depend on the laws applicable in your jurisdiction.

Where required by applicable law, appropriate consent mechanisms, opt-out mechanisms, or other privacy controls will be made available through the Services.

You may also be able to manage certain cookies through your browser or device settings.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to send promotional communications, measure marketing effectiveness, or provide advertising.

Where required, we will obtain appropriate consent before sending marketing communications or using information for particular advertising purposes.

You can unsubscribe from promotional emails using the unsubscribe mechanism provided in those communications.

If you unsubscribe from marketing, we may still send non-promotional communications necessary to provide the Services, such as order confirmations, shipping information, security notices, and customer-support communications.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Please avoid sending unnecessary sensitive or confidential information through customer-support communications.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide the Services;
• complete and maintain transaction records;
• provide customer support;
• comply with legal, tax, accounting, and regulatory requirements;
• prevent fraud and abuse;
• resolve disputes; and
• establish, exercise, or defend legal claims.

The applicable retention period depends on factors including the nature of the information, why it was collected, applicable legal requirements, and whether it is reasonably necessary to protect our business or legal interests.

When personal information is no longer reasonably required, we may delete, anonymize, or otherwise handle it in accordance with applicable law.

International Processing and Transfers

Because we operate an online business and use service providers that may operate internationally, personal information may be processed, transferred, or stored in countries or regions other than the place where you live.

Privacy and data protection laws may differ between jurisdictions.

Where applicable law requires specific protections for international transfers of personal information, we will use appropriate safeguards or recognized legal mechanisms as required.

Where applicable, you may request additional information regarding relevant safeguards through the Contact page available on this website.

Your Privacy Rights

Depending on where you live and the laws applicable to you, you may have some or all of the following rights concerning your personal information:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request deletion of personal information;
• request restriction of certain processing;
• object to certain processing;
• request portability of certain personal information;
• withdraw consent where processing is based on consent;
• opt out of certain marketing communications;
• opt out of or limit certain forms of targeted advertising, profiling, sale, sharing, or similar processing where applicable law provides such rights; and
• lodge a complaint with an applicable privacy or data protection authority.

Privacy rights vary between jurisdictions and may be subject to legal exceptions and limitations.

To exercise an applicable privacy right, please submit a request through the Contact page available on this website.

We may request information reasonably necessary to verify your identity and protect your personal information before completing a request.

Where permitted by applicable law, an authorized agent may submit a request on your behalf. We may request evidence of the agent's authority and additional verification where reasonably necessary.

We will respond to valid requests within the timeframe required by applicable law.

Right to Object and Opt Out

Depending on applicable law, you may have the right to object to or opt out of certain processing of your personal information, including certain processing based on legitimate interests, direct marketing, targeted advertising, profiling, sale, or sharing.

Where applicable law provides such a right, you may exercise it through the privacy controls made available through the Services or by submitting a request through the Contact page available on this website.

You may opt out of promotional email communications at any time using the unsubscribe mechanism provided in those communications.

Children's Privacy

The Services are not directed toward children below the age at which they may lawfully use the Services or provide personal information in their jurisdiction.

We do not knowingly collect personal information from children in violation of applicable law.

If you are a parent, guardian, or other authorized person and believe that a child has provided personal information to us improperly, please contact us through the Contact page so that we can review the matter and take appropriate action.

Third-Party Websites and Services

The Services may contain links to websites, applications, or services operated by third parties.

We are not responsible for the privacy, security, content, or other practices of third-party websites or services.

We encourage you to review the privacy information of any third-party service before providing personal information to it.

Complaints

If you have concerns about how we collect, use, or otherwise process your personal information, please contact us through the Contact page available on this website.

Depending on where you live, you may also have the right to submit a complaint to the privacy, consumer protection, or data protection authority responsible for your jurisdiction.

Nothing in this Privacy Policy limits any right to complain to a competent authority where such a right is provided by applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, legal obligations, or other operational requirements.

When appropriate, we will update the "Last updated" date and provide additional notice where required by applicable law.

Contact Us

Zept Labs is responsible for the processing of personal information described in this Privacy Policy to the extent it acts as the relevant business, controller, or equivalent responsible entity under applicable law.

For privacy questions, privacy-rights requests, complaints, or other privacy-related matters, please use the Contact page available on this website.

Postal correspondence may be sent to:

Zept Labs
128 City Road
London EC1V 2NX
United Kingdom