Privacy Policy

1. Who is responsible

This policy explains how Zora's Finds, operated by Hangzhou Sifu Design Co., Ltd. (杭州丝孚设计有限公司) (“we”, “us”), handles your personal data when you use this website and our personal shopping service. We process data in line with applicable data-protection laws, including the EU and UK General Data Protection Regulation (GDPR).

Our registered details are: Hangzhou Sifu Design Co., Ltd., Room 40500, 4th Floor, Auxiliary Building, No. 240 Dongxin Road, Wenhui Subdistrict, Gongshu District, Hangzhou, Zhejiang Province, China (Unified Social Credit Code: 92330109MAE90REN17).

2. Information we collect

We collect only the information we actually need:

Contact and communication data: your name or WhatsApp/email handle, your messages, product requests, and destination country.
Order and delivery data: items, quantities and budget, and the recipient's name, delivery address and phone number needed for shipping and customs; where a destination requires it, an ID or tax number for clearance.
Payment data: payments are processed by Payoneer and PayPal. We do not receive or store full card numbers; we see payment confirmations, transaction references, and the payer name and email.
Technical data: when the site is deployed, our hosting provider Cloudflare may process limited data such as IP address and device/browser information to keep the site secure and reliable. If we enable analytics, we use privacy-friendly, cookieless aggregate statistics.

We do not create user accounts, and we do not ask for sensitive special-category data such as health or biometric information. Please avoid sending such data unless it is genuinely needed for an order.

3. How we use it

To answer your enquiries and prepare quotes, and to perform the contract once you place an order.
To source, verify, pack and ship your items, including customs handling.
To process payments and prevent fraud, based on our legitimate interests.
To meet legal obligations such as accounting and tax records.
Where processing relies on consent, we will ask for it and you can withdraw it at any time.

We share data only with parties involved in fulfilling your order:

Domestic sellers and suppliers, to purchase your items.
Freight forwarders and couriers, for delivery and customs.
Payment providers Payoneer and PayPal.
Hosting and security provider Cloudflare.
Authorities where we are legally required to do so.

We never sell your personal data. Our service providers are required to protect it and to process it only on our behalf.

5. International transfers

Data is processed in China and may pass through providers in other countries, including courier networks, Cloudflare, and Payoneer/PayPal. Where data protected by the EU or UK GDPR is transferred outside a region with an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses and data-processing agreements, and we limit the data sent to what is necessary.

6. How long we keep it

We keep order data for as long as needed to complete the order and handle any claims, and afterwards for the period required by accounting and tax laws and to resolve disputes. Communication data is reviewed periodically and deleted or anonymized when no longer needed.

7. Your rights

Under the GDPR, UK GDPR and similar laws, you may have the right to access, correct, erase, restrict or object to processing, and to data portability, as well as the right to withdraw consent and to lodge a complaint with your local data-protection authority. Contact us to exercise these rights; we respond within the applicable timeframe. Some rights are subject to legal limits, and your mandatory rights apply regardless of the governing law in our Terms.

8. Cookies & tracking

This website itself does not use advertising cookies or marketing trackers. Cloudflare may set strictly necessary security cookies that are required for the site to function safely. We do not use cross-site advertising trackers. You can control cookies through your browser settings; blocking strictly necessary cookies may affect security and functionality.

9. Security

We use reasonable technical and organizational measures, including limited access, secure channels and reputable providers. No method of transmission is completely secure, and messages sent through third-party apps are also subject to those providers' own security.

10. Children

The service is not directed to anyone under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with information, please contact us and we will delete it.

11. Changes

We may update this policy and will post the current version with its “last updated” date. Continuing to use the service after changes means you accept the updated policy.

12. Contact

For privacy questions or requests, contact us on WhatsApp at +86 193 5212 1982. A domain email address will be published when the website launches.

On this page