Privacy policy

1. Who we are

This website is operated by:

JS E-Commerce GmbH
Kölner Straße 3
65760 Eschborn
Germany
Email: support@zimeo.uk

For the purposes of this Privacy Policy, JS E-Commerce GmbH is the controller of your personal data.

2. What this Privacy Policy covers

This Privacy Policy explains how we collect, use and share personal data when you visit our website, contact us, place an order, upload content for personalised products, subscribe to marketing communications or interact with our shop.

Personal data means information that identifies you or can reasonably be linked to you, such as your name, email address, delivery address, IP address, order details, payment information, uploaded images or personalisation details.

3. Legal bases for processing

Depending on the purpose, we process personal data on one or more of the following legal bases:

contract: where processing is necessary to take steps at your request or perform a contract with you;
legal obligation: where we must process data to comply with legal requirements;
legitimate interests: where processing is necessary for our business interests and your rights do not override those interests;
consent: where you have given us permission, for example for certain cookies, analytics or marketing.

4. Visiting our website and server logs

When you visit our website, technical information is automatically transmitted by your browser to our website systems or hosting providers.

This may include:

IP address;
date and time of access;
pages visited;
browser type and version;
operating system;
device type;
referring website;
amount of data transferred;
technical error or security logs.

We process this information to provide the website, maintain security, prevent misuse, analyse technical errors and ensure stable operation. The legal basis is our legitimate interest in operating a secure and functional online shop.

5. Shop system, hosting and technical providers

We use technical service providers to operate our online shop, process orders, provide checkout functions, maintain security and deliver website content.

If we use Shopify, personal data may be processed by Shopify International Ltd. and affiliated Shopify companies. This may involve transfers to countries outside the UK, including Canada or the United States. Where required, such transfers are protected by appropriate legal mechanisms, such as adequacy regulations, standard contractual clauses, the UK International Data Transfer Addendum or other safeguards recognised under UK data protection law.

6. Contacting us

If you contact us by email, contact form or another communication channel, we process the information you provide.

This may include:

name;
email address;
phone number;
order number;
message content;
any other information you choose to provide.

We use this data to respond to your enquiry. If your enquiry relates to an order, complaint, product question or contract, the legal basis is contract. For other enquiries, the legal basis is our legitimate interest in responding to customer communications.

7. Orders and checkout

When you place an order, we collect and process the data required to complete and manage your purchase.

This may include:

name;
billing address;
delivery address;
email address;
phone number, where provided or needed for delivery;
products ordered;
personalisation details;
order number;
payment method;
delivery status;
customer service communication.

We process this data to conclude and perform the contract with you, deliver your order, provide customer support and handle returns, complaints or claims.

We may also retain order, invoice and payment data where this is required for tax, accounting or legal purposes.

8. Personalised products, uploads and images

We sell personalised gift items. Depending on the product, you may provide names, text, dates, images, photographs, designs or other personalisation details.

We process this data to create, produce, check and deliver the personalised product, and to handle customer service requests or complaints.

If you upload images, these may contain personal data or show identifiable individuals. Please only upload content that is necessary for your order and that you are allowed to use.

Personalisation data may be shared with production, printing, fulfilment, shipping or IT providers where this is necessary to complete your order.

9. Payments

We use external payment service providers to process payments. The payment methods available to you are shown during checkout.

Depending on the payment method selected, we or the payment provider may process:

name;
billing address;
delivery address;
email address;
order amount;
order number;
payment method;
transaction data;
technical payment data.

Payment providers may include:

PayPal;
Klarna;
credit card providers;
Amazon Pay;
Apple Pay;
Google Pay;
other payment methods shown at checkout.

Some payment methods, such as invoice, direct debit, instalment or pay later options, may involve identity or credit checks carried out by the relevant payment provider under its own responsibility.

10. Shipping, fulfilment, production and order management

To process and deliver your order, we may share necessary data with shipping providers, production partners, fulfilment providers, order management systems, invoice providers and IT service providers.

This may include:

name;
delivery address;
email address;
phone number;
order number;
product information;
personalisation data, where needed for production.

The legal basis is the performance of the contract with you. Where service providers process personal data on our behalf, we use appropriate contractual arrangements.

11. Delivery notifications

Where needed to deliver your order or where you have agreed to it, we may share your email address or phone number with a shipping provider so that you can receive delivery updates.

The legal basis is contract or, where applicable, consent. You may withdraw consent at any time with effect for the future.

12. Reviews and review reminders

If you leave a review, we process the information you provide, such as your name, review text, rating, email address and order reference.

We use this data to publish, verify and manage reviews. The legal basis may be consent, contract or legitimate interests, depending on how the review function is implemented.

If we send you a review reminder by email, we do so only where we have a lawful basis, such as your consent or another legally permitted basis.

13. Email marketing and newsletters

If you sign up for our newsletter or marketing communications, we process your email address and, where provided, further information such as your name, preferences or order information.

We send newsletters on the basis of your consent. You can unsubscribe at any time using the link in the email or by contacting us.

We may use Klaviyo or similar providers to send newsletters, automate marketing communications and analyse campaign performance. In that context, data such as email address, name, order information, opens, clicks, technical data and preferences may be processed.

We may also send marketing emails to existing customers about similar products where permitted by law. You can object to direct marketing at any time.

14. Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small files stored on your device. Similar technologies may store or access information on your device.

We use these technologies for purposes such as:

essential shop functions;
cart and checkout;
security;
language or preference settings;
consent management;
analytics;
marketing and retargeting;
embedded external content.

Essential cookies are used because they are necessary to provide the website and shop functions you request.

Non-essential cookies and similar technologies, including analytics and marketing technologies, are used only where you have given consent. You can change or withdraw your consent at any time through the cookie settings.

15. Consent management

We use a consent management tool to collect, manage and document cookie and tracking preferences.

This may involve processing:

IP address or shortened IP address;
date and time of consent;
consent status;
selected categories;
browser and device information;
a technical consent ID.

The legal basis is our legal obligation to demonstrate and manage consent choices.

Possible consent tools may include:

Shopify Privacy & Compliance;
Cookiebot;
Consentmanager;
CookieFirst;
Complianz;
Klaro;
Real Cookie Banner;
other comparable consent tools.

16. Analytics, statistics and shop optimisation

We may use analytics tools to understand how visitors use our shop, improve our website, measure performance and optimise marketing.

Depending on the tool, the following data may be processed:

IP address or shortened IP address;
cookie IDs or similar identifiers;
browser and device information;
referring website;
pages visited;
clicks and interactions;
cart and purchase events;
session duration;
approximate location.

Where analytics tools are not strictly necessary, they are used only with your consent.

Analytics tools may include:

Shopify Analytics;
Google Analytics 4;
Google Tag Manager;
Microsoft Clarity;
Hotjar;
Matomo;
Mouseflow;
Smartlook;
Adobe Analytics;
other comparable analytics tools.

17. Google Analytics 4

If we use Google Analytics 4, this service is provided by Google Ireland Limited. Google Analytics helps us analyse website use, measure events, compile statistics and improve the shop.

It may process data such as pages visited, interactions, device and browser information, referral data, approximate location and purchase events.

Google Analytics is used only with your consent. Data may be transferred to Google companies and servers outside the UK, including in the United States. Where required, Google uses appropriate transfer mechanisms.

You can withdraw your consent at any time through the cookie settings.

18. Google Tag Manager

If we use Google Tag Manager, it helps us manage and trigger website tags. It may be used to integrate analytics, marketing or other services.

Google Tag Manager itself is not used by us for direct marketing. However, it may trigger other services that process personal data. Services requiring consent are only activated after consent has been given.

19. Marketing, retargeting and conversion tracking

We may use marketing and conversion tracking technologies to measure advertising performance, build audiences, display relevant ads and analyse conversions.

Depending on the tool, the following data may be processed:

IP address;
cookie IDs or similar identifiers;
browser and device information;
pages visited;
products viewed;
cart events;
purchases;
ad interactions.

These tools are used only with your consent where required.

Marketing tools may include:

Meta Pixel;
Google Ads Conversion Tracking;
Google Remarketing;
TikTok Pixel;
Pinterest Tag;
Microsoft Advertising;
LinkedIn Insight Tag;
Criteo;
HubSpot;
Klaviyo Tracking;
other comparable services.

20. Meta Pixel

If we use Meta Pixel, the service is provided by Meta Platforms Ireland Limited. Meta Pixel may be used to measure the performance of advertising on Facebook and Instagram, create audiences and display personalised ads.

Information about your use of our website may be transmitted to Meta. If you are logged into Facebook or Instagram, Meta may associate this information with your account.

The processing takes place only with your consent. For certain processing activities, we and Meta may be joint controllers.

21. Google Ads and Google Remarketing

If we use Google Ads, Google Conversion Tracking or Google Remarketing, these services help us measure the effectiveness of Google ads and display interest-based advertising.

Cookies, pixels or similar technologies may be used. Technical data, visited pages, clicks, purchase events and ad interactions may be processed.

The processing takes place only with your consent where required.

22. TikTok, Pinterest, LinkedIn, Microsoft and other advertising networks

If we use advertising tools from TikTok, Pinterest, LinkedIn, Microsoft or other networks, these services may be used for conversion tracking, retargeting, campaign measurement and interest-based advertising.

Technical data, online identifiers, visited pages, product interests, cart events and purchases may be transmitted to the relevant provider.

The processing takes place only with your consent where required.

23. External content, maps, videos and fonts

We may embed external content to make our website more functional or appealing. This may include:

YouTube;
Vimeo;
Google Maps;
Google Fonts;
social media content;
other embedded content.

When such content is loaded, data such as IP address, device information and usage data may be transmitted to the relevant provider.

Where the content is not strictly necessary, it is loaded only after you have given consent.

24. Google Maps and address validation

If we use Google Maps or Google address validation services, data may be transmitted to Google Ireland Limited.

Address validation may be used to prevent typing errors, verify delivery addresses and reduce delivery problems. This may involve processing address data, technical data and, where necessary, contact data.

The legal basis may be contract, where processing is necessary for order fulfilment, or legitimate interests in ensuring correct delivery data.

25. Security, spam protection and CAPTCHA

We may use technical security services to protect our website against spam, automated access, abuse, attacks, malware and other security risks.

This may involve processing:

IP address;
browser and device information;
access time;
technical usage behaviour;
security identifiers.

Services may include:

Google reCAPTCHA;
Shopify security features;
Cloudflare;
Wordfence;
other comparable services.

The legal basis is legitimate interests or, for technologies requiring consent, consent.

26. Social media links and plugins

Our website may contain links to our social media profiles or embedded social media content.

If we only provide standard links, visiting our website does not normally transmit data to the social media platform. Data is transmitted only when you click the link and leave our website.

If we use social plugins, share buttons or embedded content, personal data may be transmitted to the relevant provider. Where required, this happens only after consent.

Relevant providers may include:

Facebook;
Instagram;
TikTok;
Pinterest;
LinkedIn;
X;
YouTube.

27. Communication via social media

If you contact us through our social media profiles, we process the information you provide, such as profile name, message, comments or interactions.

We use this data to respond to your enquiry and communicate with you. The legal basis is contract if the communication relates to an order or contractual matter, otherwise legitimate interests.

The relevant social media platform also processes personal data under its own responsibility.

28. International transfers

Some of our providers may process personal data outside the United Kingdom.

International transfers take place only where a valid transfer mechanism is available, such as:

UK adequacy regulations;
standard contractual clauses;
the UK International Data Transfer Addendum;
the UK International Data Transfer Agreement;
consent or another lawful basis recognised under UK data protection law.

29. Service providers and processors

We use service providers that may process personal data on our behalf. These may include hosting, shop system, payment, shipping, production, fulfilment, newsletter, analytics, marketing, support and IT providers.

Where these providers act as processors, we use appropriate contractual arrangements.

30. How long we keep your data

We keep personal data only for as long as necessary for the purposes for which it was collected.

Order, invoice and payment data are retained in accordance with applicable tax, accounting and legal retention requirements. Communication data is kept for as long as necessary to handle the enquiry or as long as legal obligations or legitimate interests require.

Data processed on the basis of consent will no longer be processed for that purpose after consent is withdrawn, unless another legal basis applies.

31. Your rights

Subject to the conditions under applicable data protection law, you may have the following rights:

right of access;
right to rectification;
right to erasure;
right to restriction of processing;
right to data portability;
right to object;
right to withdraw consent at any time with effect for the future;
right to lodge a complaint with a supervisory authority.

To exercise your rights, contact us at: support@zimeo.uk

32. Direct marketing objection

You can object to the processing of your personal data for direct marketing at any time.

If you object, we will stop using your personal data for direct marketing.

33. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority.

For the United Kingdom, you may contact:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom