ZISTY HOME
PRIVACY POLICY
Last updated: March 2026
1. Introduction
This Privacy Policy describes how ZISTY Home (hereinafter "we", "us" or "our") collects, uses, stores and protects your personal data when you access our website www.zistyhome.com (hereinafter the "Site"), use our services, make a purchase or communicate with us.
This policy complies with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and Belgian data protection legislation.
By accessing the Site and using our services, you acknowledge that you have read and understood this Privacy Policy. In the event of any conflict between our Terms of Service and this Policy, this Privacy Policy shall prevail with respect to the collection and processing of your personal data.
2. Data Controller
The person responsible for processing your personal data is:
ZISTY Home
Guamra Janati – Founder
87 Rue Dehin, 4000 Liège, Belgium
ECB: 1030.868.092 | VAT: BE 1030.868.092
Email: contact@zistyhome.com
Telephone: +32 467 64 39 77
For any questions relating to the protection of your personal data, you can contact us at the address above.
3. Personal data collected
We collect the following categories of personal data, depending on your interaction with the Site:
| Category | Data concerned |
|---|---|
| Contact details | Name, surname, postal address, delivery address, billing address, telephone number, email address |
| Payment details | Card type, card number (processed by Shopify Payments, not stored by ZISTY Home), payment confirmation, transaction details |
| Account data | Username, password (encrypted), preferences and settings |
| Transaction data | Items viewed, added to cart, purchased, returned, order history |
| Communications | Messages sent via the contact form, emails exchanged with customer service |
| Technical data | IP address, browser type, operating system, device type, unique identifiers, connection data |
| Navigation data | Pages visited, visit duration, interactions with the Site, traffic source |
4. Data Sources
We collect your personal data from the following sources:
- Directly with you: when you create your account, place an order, subscribe to the newsletter, or communicate with us in any way.
- Automatically via the Site: through cookies and similar technologies during your browsing
- With our service providers: Shopify (hosting and payment processing), analytics and marketing providers
5. Legal basis for processing (GDPR – Article 6)
In accordance with the GDPR, each processing of personal data is based on a legal basis. Here are the legal bases we use:
| Purpose of the processing | Legal basis |
|---|---|
| Order fulfillment (delivery, payment, tracking) | Contract execution (Art. 6.1.b) |
| Managing your customer account | Contract execution (Art. 6.1.b) |
| Sending marketing emails and newsletters | Consent (Art. 6.1.a) |
| Personalized advertising and retargeting | Consent (Art. 6.1.a) |
| Site Analysis and Improvement | Legitimate interest (Art. 6.1.f) |
| Fraud prevention and security | Legitimate interest (Art. 6.1.f) |
| Compliance with legal obligations (accounting, taxation) | Legal obligation (Art. 6.1.c) |
| Responding to customer service requests | Performance of the contract (Art. 6.1.b) / Legitimate interest (Art. 6.1.f) |
6. How we use your data
6.1 Command Execution
We use your data to process your orders, manage payments, arrange shipments, facilitate returns and exchanges, and send you notifications related to your order (confirmation, shipment, delivery).
6.2 Account Management
If you create an account, we use your data to create, maintain and secure your account, remember your preferences and provide you with a personalized experience.
6.3 Marketing and Commercial Communications
With your prior consent , we may send you marketing communications by email (newsletter, promotional offers, news). You can withdraw your consent at any time by using the unsubscribe link in each email or by contacting us directly.
Even after unsubscribing, we may send you transactional emails related to your orders (confirmation, shipping, tracking).
6.4 Site Improvement
We analyze browsing data to understand how the Site is used, identify areas for improvement, and optimize your shopping experience.
6.5 Security and fraud prevention
We use certain data to detect and prevent fraudulent activities, and to protect the security of our services and users.
6.6 Legal Obligations
We retain and process certain data to comply with our accounting, tax and legal obligations.
7. Sharing data with third parties
We do not sell your personal data. We may share your data in the following circumstances:
| RECIPIENT | Purpose |
|---|---|
| Shopify Inc. (Canada) | Website hosting, payment processing, analytics, service improvement |
| Carriers | Delivery of your orders (name, delivery address, telephone number) |
| Payment providers | Secure transaction processing (Shopify Payments, PayPal, etc.) |
| Analytics tools (Google Analytics) | Analysis of traffic and behavior on the Site (data anonymized where possible) |
| Marketing tools (Klaviyo) | Sending newsletters and promotional emails (with your consent) |
| Competent authorities | In the event of a legal obligation or legal proceedings |
All our service providers are bound by contractual obligations of confidentiality and security in accordance with the GDPR.
8. Cookies and similar technologies
The Site uses cookies and similar technologies to ensure its proper functioning, analyze traffic, and personalize your experience.
8.1 Types of cookies used
- Essential cookies: necessary for the operation of the Site (shopping cart, session, security). They do not require your consent.
- Analytical cookies: these allow us to measure audience and analyze Site usage (Google Analytics). Subject to your consent.
- Marketing cookies: used to show you relevant ads and measure the effectiveness of our campaigns. Subject to your consent.
8.2 Cookie Management
On your first visit, a banner will allow you to accept or reject non-essential cookies. You can change your preferences at any time via your browser settings or through our cookie management tool.
9. International Data Transfers
Some of your personal data may be transferred and processed outside the European Economic Area (EEA), including in Canada (Shopify Inc.) and the United States (certain service providers).
When such transfers take place, we ensure that they are governed by appropriate safeguards in accordance with the GDPR, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- European Commission adequacy decisions (Canada benefits from a partial adequacy decision)
10. Data retention period
We retain your personal data only for as long as necessary for the purposes for which it was collected:
- Order data: 10 years from the date of the transaction (Belgian accounting and tax obligations)
- Customer account data: for the duration of your account, then 3 years after the last activity
- Marketing data (newsletter): until you withdraw your consent, then for a maximum of 3 years.
- Analytical cookies: maximum 13 months
- Browsing data: maximum 26 months
Upon expiry of these periods, your data is deleted or anonymized irreversibly.
11. Your rights (GDPR)
In accordance with the GDPR, you have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Right of access | Obtain a copy of the personal data we hold about you |
| Right of rectification | Request the correction of inaccurate or incomplete data |
| Right to erasure | Request the deletion of your personal data (under certain conditions) |
| Right to limitation | Request the restriction of the processing of your data in certain circumstances |
| Right to portability | Receive your data in a structured format and transfer it to another controller |
| Right to object | You have the right to object to the processing of your data for direct marketing purposes or based on legitimate interest. |
| Withdrawal of consent | You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out beforehand. |
How to exercise your rights: send your request by email to contact@zistyhome.com , specifying your identity and the right you wish to exercise. We will respond within a maximum of 30 days in accordance with the GDPR. This period may be extended by an additional 60 days in the case of a complex request, in which case we will inform you.
For data processed directly by Shopify, you can exercise your rights via the Shopify privacy portal .
12. Protection of minors
This Site is not intended for individuals under the age of 18. We do not knowingly collect any personal data from minors. If you are a parent or guardian and believe that a minor has provided us with personal data, please contact us at contact@zistyhome.com to request its deletion.
13. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include, but are not limited to:
- SSL encryption of all communications on the Site
- Secure payment processing via Shopify Payments (PCI DSS certified)
- Access to personal data is restricted to authorized personnel only.
However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.
14. Third-party websites and links
The Site may contain links to websites operated by third parties. We are not responsible for the privacy practices or content of these sites. We recommend that you review the privacy policies of each third-party site you visit.
15. Complaints
If you believe that the processing of your personal data does not comply with the GDPR, you can:
- Contact us directly at contact@zistyhome.com to resolve the issue.
- To file a complaint with the Belgian Data Protection Authority (DPA) :
Data Protection Authority
Rue de la Presse 35, 1000 Brussels
www.autoriteprotectiondonnees.be
Email: contact@apd-gba.be - If you reside in another EEA country, you can contact the supervisory authority in your country of residence. A list is available on the website of the European Data Protection Board (EDPB) .
16. Amendments to this Policy
We may update this Privacy Policy at any time to reflect changes in our practices or for legal or regulatory reasons. The revised version will be posted on this page with an updated "Last Updated" date.
In the event of a substantial change, we will inform you by email or by a notice visible on the Site, in accordance with applicable law.
17. Contact
For any questions regarding this Privacy Policy or to exercise your rights, please contact us:
ZISTY Home – Data Controller
Guamra Janati – Founder
87 Rue Dehin, 4000 Liège, Belgium
Email: contact@zistyhome.com
Telephone: +32 467 64 39 77