Zorana Toronto | Draft for legal/compliance review

Proposed website version | Last updated: August 16, 2026

This Privacy Policy explains how Zorana LLC (doing business as Zorana Toronto, “Zorana”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you visit or use https://zorana-toronto.com, place an order, create an account, contact us, subscribe to marketing, or otherwise interact with our services.

1. Personal information we collect

Depending on how you interact with us, we may collect the following categories of personal information:

·         Contact and identity information, such as your name, billing and shipping address, email address, and telephone number.

·         Order and transaction information, such as products ordered, order value, discounts, shipping method, returns, refunds, and customer-service history.

·         Payment-related information. Payments are processed by our payment service providers. We do not receive or store your full payment-card number.

·         Account information, if you create a customer account, including login-related information and saved preferences.

·         Communications you send to us, including emails, contact-form messages, return requests, complaints, and other correspondence.

·         Device and usage information, such as IP address, browser/device type, cookie identifiers, pages viewed, referring pages, interactions with the store, and similar technical data.

·         Marketing and preference information, such as newsletter subscriptions, consent choices, and communication preferences.

2. How we collect information

We collect personal information:

·         directly from you, for example when you place an order, contact us, create an account, or subscribe to marketing;

·         automatically through cookies, pixels, log files, and similar technologies when you use the website; and

·         from service providers and business partners involved in operating the store, processing payments, fraud prevention, order fulfillment, delivery, analytics, advertising, and customer communications.

3. Why we use personal information

We may use personal information to:

·         process and fulfill orders, accept payments, arrange delivery, provide tracking, and handle returns and refunds;

·         provide customer service and respond to questions, requests, or complaints;

·         create and manage customer accounts and store preferences;

·         operate, maintain, secure, troubleshoot, and improve our website and services;

·         detect, investigate, and prevent fraud, abuse, security incidents, and other unlawful activity;

·         measure store performance and understand how customers use our website;

·         send marketing communications where we have the required consent or another lawful basis, and to record and respect unsubscribe or opt-out choices;

·         personalize content or advertising where permitted by law and consistent with your privacy choices; and

·         comply with legal, tax, accounting, regulatory, and record-keeping obligations, and establish or defend legal claims.

4. Legal bases for processing in the EEA/UK

Where the GDPR, UK GDPR, or similar law applies, we rely on one or more lawful bases depending on the purpose: performance of a contract (for orders and requested services), compliance with legal obligations, our legitimate interests (such as security, fraud prevention, customer service, and improving our store), and consent where required (for example, certain marketing or non-essential cookies). You may withdraw consent at any time where processing is based on consent.

5. How we disclose personal information

We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described above:

·         Shopify and related Shopify services that host and operate our ecommerce platform;

·         payment processors and financial service providers used to authorize and settle payments;

·         suppliers, fulfillment partners, warehouses, postal operators, couriers, and other logistics providers involved in fulfilling and delivering orders;

·         customer-service, email, marketing, analytics, advertising, fraud-prevention, and technology service providers used to operate and improve the store;

·         professional advisers, insurers, auditors, accountants, legal advisers, regulators, courts, law enforcement, or other parties where disclosure is required or reasonably necessary by law; and

·         a buyer, investor, successor, or other relevant party in connection with a proposed or completed merger, acquisition, financing, restructuring, or sale of all or part of our business, subject to appropriate safeguards.

We do not sell personal information for money. However, certain analytics or advertising activities may be treated as a “sale”, “sharing”, or “targeted advertising” under some privacy laws. Where applicable, we provide the legally required cookie, consent, or data-sharing opt-out controls.

6. Shopify

Our store is hosted on Shopify. Shopify processes personal information to provide ecommerce, checkout, security, fraud-prevention, payment, and related services. Shopify may process certain information in accordance with its own privacy terms and the settings enabled for our store. Where Shopify privacy controls are available for your region, you can use those controls in addition to contacting us.

7. Cookies and similar technologies

We and our service providers may use cookies, pixels, local storage, and similar technologies. Some are necessary for the website and checkout to function. Others may support preferences, analytics, performance measurement, advertising, or personalization. Where consent is legally required for non-essential technologies, we will request it through the available cookie or privacy controls. You can also adjust your browser settings, although disabling necessary cookies may affect website functionality.

8. Marketing communications

If you subscribe to marketing, we may send you promotional email or other commercial communications in accordance with applicable law. Where required, we will obtain consent before sending marketing. Every marketing email will include an unsubscribe method. Transactional messages about an order, payment, account, return, or customer-service request are not marketing and may still be sent when necessary.

9. International transfers

Because we use international service providers and may fulfill orders across borders, personal information may be processed in countries other than the country where you live, including the United States and other locations in which Shopify, payment providers, suppliers, logistics providers, or other service providers operate. Where required by applicable law, appropriate safeguards are used for international transfers.

10. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to fulfill orders, provide customer service, maintain business and tax records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary depending on the type of information and applicable law. When information is no longer required, we delete, anonymize, or securely dispose of it where reasonably practicable.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Payment-card information is handled through payment providers and ecommerce infrastructure designed for secure payment processing.

12. Your privacy rights

Depending on where you live, you may have rights to request access to personal information, correction, deletion, restriction, portability, withdrawal of consent, objection to certain processing, or an opt-out of certain data sharing, targeted advertising, or marketing. You may also have the right to complain to a privacy or data-protection authority. These rights may be subject to legal exceptions and verification of your identity.

To exercise a privacy right, contact us at info@zorana-toronto.com. We will respond in accordance with applicable law. You may also use any privacy-choice or data-sharing opt-out controls made available through our website.

13. Children

Our store is intended for a general adult audience and is not directed to children under 16. We do not knowingly collect personal information from children in circumstances where parental or guardian consent is legally required. If you believe a child has provided personal information to us improperly, please contact us.

14. Third-party websites and services

Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies. We are not responsible for the privacy or security practices of third parties that we do not control.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, technologies, legal requirements, or services. The “Last updated” date will be revised when material changes are made. Where required by law, we will provide additional notice or obtain consent.

Contact details

Zorana LLC
Company Number: 2026-002047342
Business Address: 34 N Franklin Ave, Ste 687 #5171, Pinedale, WY 82941, USA
Email: info@zorana-toronto.com
Phone: +1 416 383 3365
Website: https://zorana-toronto.com