ZZTirans is operated by Z TRANS, a French société à responsabilité limitée (SARL) registered under SIREN 498 330 182 (SIRET 498 330 182 00029), with its registered office at 21 Rue du Dix Neuf Mars 1962, 38690 Biol, France, represented by its manager Olivier Zocca. References to “we”, “our”, “us” or “ZZTirans” in this document refer to that legal entity.
We sell moving and packing kits to consumers worldwide and ship them from our French warehouse. Protecting the personal information of our customers, prospects and website visitors is a core part of how we run that business. This Privacy Policy explains what data we collect through zztirans.com, why we collect it, how long we keep it and what rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR and the California Consumer Privacy Act (CCPA) as amended by the CPRA.
1. Data Controller and Contact
Z TRANS SARL is the data controller for the personal data processed via zztirans.com.
- Postal address: 21 Rue du Dix Neuf Mars 1962, 38690 Biol, France
- Privacy contact: privacy@zztirans.com
- Customer service: support@zztirans.com
- Phone: +33 759 069 145
Given our size and the nature of our processing (a consumer e-commerce shop), we are not legally required to appoint a Data Protection Officer, but privacy@zztirans.com is monitored by a dedicated staff member.
2. Categories of Personal Data We Collect
We only collect what we need to run the shop and fulfil your orders.
- Account data: first and last name, billing and shipping address, email, phone number, password (stored hashed).
- Order and transaction data: purchased items, order value, currency, invoice number, VAT status, delivery instructions.
- Payment data: card payments are processed directly by Stripe; we receive only the last four digits, card brand, expiry month and a transaction token. We do not store full PAN data.
- Customer service data: messages you send through our forms, by email or by phone, and any attachments (for example photos of a damaged kit).
- Marketing data: email address, first name and consent status if you subscribe to our newsletter.
- Technical data: IP address, browser type, device identifiers, pages viewed, referring URL, and cookies (see our Cookie Policy).
- User-generated content: product reviews, ratings and photos you choose to post.
We do not knowingly collect special categories of data (health, religion, biometrics, etc.) and you should not send us any.
3. Legal Bases for Processing (GDPR Art. 6)
- Performance of a contract (Art. 6(1)(b)): creating your account, processing your order, taking payment, arranging delivery, handling returns and refunds.
- Legal obligation (Art. 6(1)(c)): keeping accounting records under the French Commercial Code, complying with consumer law, responding to lawful requests from authorities.
- Legitimate interests (Art. 6(1)(f)): fraud prevention, securing our website, basic non-intrusive analytics, defending legal claims, sending service emails about an open order.
- Consent (Art. 6(1)(a)): marketing emails, non-essential cookies, push notifications. Consent can be withdrawn at any time.
4. Third-Party Processors
We share personal data only with vetted processors bound by written agreements (GDPR Art. 28):
- Stripe Payments Europe Ltd (Ireland) — card processing, fraud screening.
- Hostinger International Ltd — website hosting and CDN in EU data centres.
- WooCommerce / Automattic Inc. — e-commerce engine and plugins.
- Google Ireland Ltd — Google Analytics 4 with Consent Mode v2; IP truncation enabled.
- Mailchimp (Intuit Inc.) — newsletter delivery for opted-in subscribers.
- Carriers: La Poste / Colissimo, Chronopost, DHL, UPS, FedEx and last-mile partners depending on destination. They receive the name, address and phone number needed to deliver your parcel.
We never sell personal data and we do not use it for automated decision-making that produces legal effects.
5. International Data Transfers
Most data is stored within the European Economic Area. Where a processor (notably Google, Stripe US affiliates, Mailchimp or carriers in the US, UK or other countries) requires transfer outside the EEA, we rely on the European Commission’s Standard Contractual Clauses (SCC, 2021/914) and, where applicable, on adequacy decisions (UK, Canada, Japan). Copies of the SCCs are available on request from privacy@zztirans.com.
6. Retention Periods
- Order, invoice and accounting records: 10 years from the end of the fiscal year, as required by Article L.123-22 of the French Commercial Code.
- Customer account (if inactive): 3 years after last login or last order, then deletion or anonymisation in line with CNIL guidance.
- Marketing prospect data: 3 years from the last positive interaction (CNIL recommendation).
- Customer service tickets: 3 years from closure.
- Web analytics (GA4 with anonymisation): 14 months.
- Cookies: see Cookie Policy for individual durations.
7. Your Rights Under GDPR and UK GDPR
You have the right to:
- Access your data (Art. 15) and obtain a copy.
- Rectify inaccurate data (Art. 16).
- Erase your data (Art. 17), subject to our legal retention duties.
- Restrict processing (Art. 18).
- Object to processing based on legitimate interests or direct marketing (Art. 21).
- Portability of data you provided under contract or consent (Art. 20).
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with the French data protection authority CNIL (3 Place de Fontenoy, 75007 Paris, www.cnil.fr) or with the supervisory authority of your country of residence. UK residents may contact the ICO.
Send any request to privacy@zztirans.com. We respond within one month, extendable by two months for complex requests.
8. CCPA Rights for California Residents
If you are a California resident, you have the right to know what categories of personal information we collect, to access and delete that information, to correct inaccuracies, and to opt out of any “sale” or “sharing” of personal information as defined by §1798.100 et seq. of the California Civil Code. We do not sell personal information for money. To exercise your rights, contact privacy@zztirans.com with proof of California residency. We will not discriminate against you for exercising these rights.
9. Cookie Management
Detailed information on cookies, including categories, durations and the consent tool, is set out in our Cookie Policy. You can change your choices at any time via the “Cookie settings” link in the website footer.
10. Protection of Minors
ZZTirans is intended for adults purchasing moving supplies. We do not knowingly collect personal data from children under 16 (or the relevant age of digital consent in your country). If you believe a minor has provided us with personal data, please contact privacy@zztirans.com and we will delete it.
11. Security
We use TLS 1.2+ for all traffic to zztirans.com, hash account passwords with modern algorithms, restrict back-office access with role-based controls and review our logs. No system is perfect, so we cannot guarantee absolute security, but we follow recognised industry practices and notify CNIL and affected users in the event of a breach likely to result in a high risk to their rights (Art. 33-34 GDPR).
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in law or in our processing activities. The new version becomes effective when posted at zztirans.com/privacy-policy. Material changes will be announced by email or by a banner on the homepage at least 15 days before they take effect.
Last updated: 2026-05-11