Privacy & Data Retention Policy
House of ZAFORA Global Data Protection Charter · Autumn 2026 Edition
1. Minimal Collection for Fulfilment & Customs
ZAFORA collects only the personal coordinates necessary to dispatch your coffret, clear customs where applicable (recipient name, delivery address, email, and courier contact), and maintain statutory tax invoices. Guest checkout is supported by default—we never force account creation prior to purchase.
2. Payment Security & Zero Card Storage
Payment credentials are tokenized directly by PCI-DSS Level 1 processors. ZAFORA servers never store raw primary account numbers (PAN) or card security codes.
3. Consent-Aware Conversion Analytics
Non-essential conversion telemetry executes strictly after explicit opt-in consent in our privacy bar. Essential session cookies (zafora_market and zafora_cart_id) operate solely to preserve your selected destination currency and private shopping bag.
4. Grower & Supplier PII Masking
To protect smallholder farming families and cooperative partners from unsolicited scraping, public Batch Passport pages and JSON APIs expose only verified cooperative codes, regional elevation, and custody timestamps—strictly stripping private personal names, phone numbers, and commercial rates.
5. Retention & Data Subject Rights
Order and customs records are retained for the statutory fiscal period (typically 7 years), while public Batch Passport quality records remain permanently accessible so physical flacon QR codes continue resolving throughout shelf life. Clients may request access, correction, or erasure via our Private Client Desk.