privacy policy

Our Attitude to Your Privacy

This website is operated by Zanda, a sole trader based in the United Kingdom. Zanda is the data controller for all personal information collected through this site.

For any queries relating to this policy or how your data is handled, contact us at admin@zanda.space

1. Who We Are

This site does not track you, profile you, or collect any information about you as a visitor beyond what is strictly necessary for the site to function.

We have no interest in surveillance, behavioural advertising, or data extraction. We do not use analytics cookies, third-party tracking pixels, or any tool designed to follow you across the internet. The only cookies this site uses are essential ones — small technical files that allow the site and its checkout to work. They contain no personal data and are not used to identify or monitor you in any way.

We are aware that the word "cookies" has become associated with an intrusive culture of data harvesting that most people rightly find uncomfortable. Essential cookies have nothing in common with that culture beyond an unfortunate shared name. They are closer to the memory of where you are in a process than to anything resembling surveillance.

Where we do hold personal information — if you have made a purchase, signed up to the newsletter, or contacted us — we hold only what is necessary, use it only for the purpose for which it was given, and do not share it with anyone beyond the partners needed to fulfil your order.

The formal details of how we handle data are set out below, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

This site does not collect any information about visitors who simply browse it. No tracking, no profiling, no analytics cookies.

Personal information is collected only in the following specific circumstances:

When you make a purchase: name, email address, delivery address, and payment information. Payment card details are processed securely by Shopify and are never stored by us.

When you sign up to our newsletter: name and email address.

When you contact us: name, email address, and any information you include in your message.

3. How We Use Your Information

We use your personal information only for the purpose for which it was given:

• To process and fulfil your orders, including passing your name and delivery address to our print production partner (theprintspace) for the sole purpose of shipping your order

• To send you order confirmations and dispatch notifications

• To respond to enquiries and customer service requests

• To send you our newsletter and studio updates, if you have subscribed

We do not use your information for profiling, advertising, or any purpose beyond the above.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — to process and fulfil orders you have placed

• Legitimate interests — to respond to enquiries you have sent us

• Consent — to send newsletter and studio updates. You may withdraw your consent and unsubscribe at any time using the link included in every email

5. Sharing Your Information

We share your information only where strictly necessary:

6. Cookies

7. How Long We Keep Your Data

8. Your Rights

9. Complaints

10. Changes to This Policy

This site uses only essential cookies — the minimum required for the site and its checkout to function. Examples include cookies that keep you logged in during a session or maintain the state of a checkout process.

• Order information — retained for six years in accordance with HMRC requirements for sole trader financial records

Under UK GDPR, you have the right to:

If you are unhappy with how we handle your personal data, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection authority. You can do so at ico.org.uk or by calling 0303 123 1113.

We may update this policy to reflect changes in our practices or legal requirements. If we were to introduce non-essential cookies, this policy would be updated and your consent sought before they were used. The current version will always be available on this page.

• theprintspace — your name and delivery address are passed to our print production and fulfilment partner solely for the purpose of printing and shipping your order. theprintspace does not use your data for any other purpose.

• Shopify — your order and payment information is processed by Shopify. Their privacy policy is available at shopify.com/legal/privacy.

• Hostinger Reach — if you subscribe to our newsletter, your name and email address are stored with Hostinger Reach, Hostinger's own newsletter delivery platform. Their privacy policy is available at hostinger.com/privacy-policy.

Beyond the three partners listed above — whose involvement is limited strictly to fulfilling your order, processing your payment, and delivering your newsletter — your personal data is never passed to any third party for any purpose. We do not sell it, share it, trade it, or make it available to anyone else under any circumstances.

Essential cookies do not track your behaviour, collect personal data, or follow you beyond this site. Under UK law they do not require your consent, which is why you will not see a cookie banner when you visit.

We do not use advertising cookies, analytics cookies, or any third-party tracking. If this were to change, this policy would be updated and your consent sought before any non-essential cookies were introduced.

You can disable cookies entirely through your browser settings. Doing so may affect some functionality, particularly during the checkout process.

• Newsletter subscriptions — retained until you unsubscribe

• Enquiry correspondence — retained for two years, or until the matter is resolved

• Access the personal data we hold about you

• Erase your data, where we have no legal obligation to retain it

• Restrict or object to how we process your data in certain circumstances

• Withdraw consent for marketing emails at any time, without affecting the lawfulness of processing prior to withdrawal

• Data portability — to receive your data in a structured, commonly used format

To exercise any of these rights, contact us at admin@zanda.space. We will respond within one month, as required by UK GDPR.

We would always welcome the opportunity to address your concerns directly before you contact the ICO, so please reach out to us first if you are able to.

Last updated: 03 June 2026