Privacy Policy
Last updated: August 12, 2026
This Privacy Policy describes how Zenit Group, trading as Naiad (“Naiad,” “we,” “us,” or “our”), collects, uses, and discloses personal information when you visit our website, use our services, make a purchase, or otherwise interact with us (collectively, the “Services”).
For the purposes of applicable data-protection law, Zenit Group is the data controller.
1. Personal Information We Collect
Depending on how you interact with the Services, we may collect the following categories of personal information.
Device and Usage Information
This may include your browser type and version, device information, IP address, time zone, cookie data, pages and products viewed, search terms, referring pages, and interactions with the Services.
We collect this information automatically through cookies, log files, pixels, tags, web beacons, and similar technologies to operate the website, keep it secure, understand its use, and improve performance.
Order and Account Information
This may include your name, billing address, shipping address, contact details supplied during checkout, order history, account credentials, and payment-related information. Payment-card details are processed by our payment providers and are not stored directly by us in full.
We use this information to process payments, fulfil orders, arrange shipping, provide order confirmations and invoices, manage returns, prevent fraud, and meet our legal and contractual obligations.
Customer Support Information
When you request support, we may collect the information you provide, such as your name, order details, delivery information, correspondence, and any other information needed to respond to and resolve your request.
Marketing and Preference Information
If you choose to receive marketing communications, we may collect your contact details, communication preferences, interactions with our messages, and information about your interests and purchase history. You may withdraw your consent or unsubscribe at any time using the method provided in the relevant communication. Transactional communications relating to an order or account may still be sent where necessary.
Information from Third Parties
We may receive personal information from service providers that support our Services, including Shopify, payment processors, fulfilment providers, delivery partners, analytics providers, fraud-prevention providers, and advertising partners.
2. How We Use Personal Information
We may use personal information to:
-
provide, operate, and improve the Services;
-
process payments, orders, deliveries, returns, and refunds;
-
create and manage customer accounts;
-
communicate about purchases, accounts, and customer-service requests;
-
detect, investigate, and prevent fraud, abuse, and security incidents;
-
personalize the website and measure its performance;
-
provide marketing and advertising where permitted by law;
-
comply with legal, tax, accounting, and regulatory obligations;
-
establish, exercise, or defend legal claims; and
-
protect our rights, users, business, and Services.
3. Legal Bases for Processing
Where the General Data Protection Regulation (“GDPR”) applies, we process personal information on one or more of the following legal bases:
-
Performance of a contract: to process and fulfil purchases and provide requested Services.
-
Legal obligations: to comply with accounting, tax, consumer-protection, and other legal requirements.
-
Legitimate interests: to operate and improve our business, prevent fraud, secure the Services, and understand customer use, provided those interests do not override your rights and freedoms.
-
Consent: where required, including for certain marketing communications, advertising technologies, or non-essential cookies. You may withdraw consent at any time without affecting prior lawful processing.
4. How We Disclose Personal Information
We may disclose personal information to service providers and other parties where reasonably necessary to operate the Services, including:
-
Shopify, which hosts and powers our online store;
-
payment processors and financial-service providers;
-
fulfilment, warehousing, shipping, and delivery providers;
-
analytics, hosting, information-technology, and security providers;
-
advertising and marketing partners where legally permitted;
-
professional advisers, insurers, auditors, and legal representatives;
-
public authorities or other parties where required by law; and
-
parties involved in a merger, acquisition, financing, reorganization, insolvency, or sale of all or part of our business.
We do not authorize service providers to use personal information for purposes unrelated to the services they provide to us.
Shopify’s privacy information is available at shopify.com/legal/privacy.
5. Behavioural Advertising and Analytics
Where permitted by law and subject to any required consent, we may use analytics and advertising technologies to understand how visitors use the Services, measure campaigns, and display advertisements that may be relevant to their interests.
These technologies may involve sharing identifiers, device information, website activity, and purchase-event information with analytics or advertising partners. You can manage non-essential cookies through our cookie consent controls and, where available, through your browser or platform settings.
You can learn more about interest-based advertising and available opt-out tools through the European Interactive Digital Advertising Alliance or the Digital Advertising Alliance.
6. Cookies
Cookies are small files placed on your device when you visit the Services. We use cookies and similar technologies to:
-
operate essential website and checkout functions;
-
remember selections and preferences;
-
maintain account and cart sessions;
-
protect the Services and prevent fraud;
-
understand website performance and usage; and
-
support analytics and advertising where permitted.
Some cookies are necessary for the Services to function and cannot be disabled through our consent tool. Non-essential cookies are used only where permitted by applicable law and, where required, after consent.
Cookie names, providers, purposes, and retention periods may change as Shopify and other service providers update their technologies. Current information about cookies used by Shopify is available in Shopify’s cookie policy.
You can also control cookies through your browser settings. Blocking certain cookies may prevent parts of the Services from working properly.
7. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain business and transaction records, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements.
Retention periods vary depending on the type of information, the nature of our relationship with you, legal requirements, and whether the information is needed for an actual or anticipated dispute.
8. International Data Transfers
Our service providers may process personal information outside France or the European Economic Area, including in countries whose data-protection laws may differ from those in your jurisdiction.
Where required, we rely on recognized safeguards such as adequacy decisions, standard contractual clauses approved by the European Commission, or other lawful transfer mechanisms. Information about Shopify’s handling of international transfers is available in its privacy documentation.
9. Automated Decision-Making
We do not use personal information to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.
Shopify and our payment or fraud-prevention providers may use limited automated tools to identify potentially fraudulent or high-risk transactions. These tools may temporarily restrict transactions or identifiers associated with suspected fraud.
10. Your Rights
Depending on your location and applicable law, you may have the right to:
-
request access to personal information we hold about you;
-
request correction of inaccurate or incomplete information;
-
request deletion of personal information;
-
restrict or object to certain processing;
-
withdraw consent at any time where processing relies on consent;
-
receive certain information in a portable format;
-
object to direct marketing; and
-
lodge a complaint with a competent data-protection authority.
To exercise a privacy right, send a written request to the postal address in the “Contact” section below. We may need to verify your identity before completing a request. You may also appoint an authorized representative where applicable law permits.
You have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) or another competent supervisory authority. Information about the CNIL is available at cnil.fr.
11. Children’s Privacy
The Services are not intended for individuals under the age of 18, and we do not knowingly collect personal information from children. A parent or legal guardian who believes that a child has provided personal information may submit a written deletion request to the postal address below.
12. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no transmission or storage system is completely secure, and we cannot guarantee absolute security.
13. Third-Party Websites
The Services may link to websites or services operated by third parties. We are not responsible for the privacy, security, or content practices of those third parties. Review their privacy policies before providing personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our practices, technologies, Services, or legal obligations. The revised version will be posted on this page with an updated date.
15. Contact
For questions, complaints, or requests concerning this Privacy Policy or your personal information, write to:
Naiad / Zenit Group
4 Place de la Porte de Bagnolet
75020 Paris
France