This Privacy Policy describes how Zombie Off Road Parts (“we”, “our”, or “us”) collects, uses, and protects your personal data when you visit our website www.zombie-offroadparts.ro (the “Site”).

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws in Romania and the EU.

1. Information We Collect
When you use our Site or purchase our products, we may collect the following types of personal data:

• Contact details (e.g., name, email address, phone number)
• Shipping and billing address
• Order details
• Payment information
• Technical data (e.g., IP address, browser type, device information)
• Cookies and usage data (if applicable)

2. How We Use Your Information
We use your personal data for the following purposes:

To process and fulfill orders

To respond to your inquiries and provide customer support

To send order confirmations and updates

To improve our website and user experience

To comply with legal obligations

3. Legal Basis for Processing
Under GDPR, we process your personal data based on the following legal grounds:

Performance of a contract – to fulfill and deliver your purchases

Consent – where required (e.g., marketing communications or cookie usage)

Legal obligation – to comply with applicable laws

Legitimate interest – to improve our services and prevent fraud

4. Cookies and Tracking
We may use cookies and similar technologies to enhance your experience on our Site. Cookies help us understand how users interact with our website.

If applicable, a cookie banner will ask for your consent when you first visit our Site.

You can manage or disable cookies in your browser settings.

5. Data Sharing and Third Parties
We may share your data with trusted third parties that help us operate our website and fulfill orders, such as:

Payment processors

Shipping carriers

Hosting providers

IT and security service providers

We do not sell or rent your personal data to third parties.

6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law (e.g., tax or accounting regulations).

7. Your Rights Under GDPR
You have the right to:

Access your personal data

Request correction or deletion of your data

Restrict or object to processing

Withdraw your consent (where applicable)

File a complaint with a data protection authority

To exercise any of these rights, please contact us via our contact form.

8. Data Security
We implement appropriate security measures to protect your personal data, including SSL encryption, secure hosting, and access controls.

9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Effective Date.”

10. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact us through our contact form.