Your privacy, held with care.
We collect as little as we can, explain why plainly, and make it easy for you to see, change or delete what we hold. This notice applies wherever you are, and we follow UK GDPR, EU GDPR and the Nigeria Data Protection Act 2023.
Privacy at a glance
-
Who we are
The Zahra Zakariya Collective (company no. 17429068, England and Wales) is the data controller. That includes Ilé Shifa, Abímbọ́lá Àṣàbí Studio, ZZ&Co. Advisory and Embrace Your Season.
-
What we collect
Only what you give us, such as your email address for our letters, or your details when you place an order or get in touch. If you allow analytics cookies, we also see how the site is used.
-
Why we use it
To send what you asked for, fulfil orders, answer you and keep the site safe. We never sell your data, and we don't use it for automated decisions about you.
-
Who we share it with
Trusted processors under contract: Flodesk (email), Google Analytics (only if you allow it), our payment provider (only if you shop with us) and our website host. They may only use it to provide their service to us.
-
Where it goes
Some providers process data outside the UK, EEA or Nigeria. When they do, we rely on adequacy decisions or approved safeguards such as the UK IDTA and EU Standard Contractual Clauses.
-
How we keep it safe
Access is limited to people who need it. If a breach puts you at risk, we'll tell you, and we'll notify the ICO and NDPC within 72 hours where required.
How we use your data
Each use has a lawful basis recognised under UK GDPR, EU GDPR and the Nigeria Data Protection Act 2023. Where we rely on consent, you can withdraw it at any time. Withdrawing doesn't affect anything we did before.
| Purpose | Information | Lawful basis | How long we keep it |
|---|---|---|---|
| Sending Soulful Letters | Email address; whether emails are opened or clicked | Consent | Until you unsubscribe, then deleted |
| Embrace Your Season updates | Email address | Consent | Until shortly after the book's release, or until you unsubscribe |
| Store orders | Name, email, delivery address, order details. Card details are handled by our payment provider and never stored by us. | Contract; legal obligation (tax records) | As long as tax law requires |
| Enquiries & advisory work | Name, contact details and anything you tell us | Contract, or legitimate interests in replying to you | As long as we need to help you, then deleted |
| Understanding site use | Pages visited, device type, approximate location (from analytics cookies) | Consent | Up to 14 months |
| Keeping the site secure | IP address, server logs | Legitimate interests in protecting the site | Only as long as needed to keep the site safe |
Children. Our services are for adults. We don't knowingly collect data from children. If you think a child has shared data with us, contact us and we'll delete it.
Your rights
These rights apply under UK GDPR, EU GDPR and the Nigeria Data Protection Act 2023. Exercising them is free.
-
To be informed
Know what we collect and why. That's this notice.
-
Access
Ask for a copy of the personal data we hold about you.
-
Correction
Have inaccurate or incomplete data put right.
-
Erasure
Ask us to delete your data where we no longer need it.
-
Restriction & objection
Limit how we use your data, or object to uses based on legitimate interests.
-
Portability
Receive your data in a common format, or have it sent to someone else.
-
Withdraw consent
Unsubscribe or change cookie choices at any time. It's as easy as giving consent.
-
Complain
UK: the ICO (ico.org.uk). Nigeria: the NDPC (ndpc.gov.ng). EU/EEA: your local data protection authority. We'd welcome the chance to help first.
Make a data request
Tell us what you'd like and we'll take it from there. We may ask you to confirm your identity before sharing or changing anything, so your data stays yours.
We'll reply without undue delay, and within one month under UK and EU GDPR or the timescale the NDPA sets. If a request is complex, we'll tell you why we need longer.
Prefer email? Write to contact@zahrazakariya.com with "Data request" in the subject.
We've emailed you a confirmation with your reference. If we need to confirm it's you, we'll be in touch soon.
Cookies & your choices
We only set strictly necessary cookies until you choose otherwise, as the UK's PECR, the EU ePrivacy rules and the NDPA require. YouTube videos and Instagram posts stay hidden behind a "load" button until you allow media cookies.
| Category | Set by | Why | Lasts |
|---|---|---|---|
| Strictly necessary | Us | Security, consent record, store basket | Up to 6 months |
| Analytics | Google Analytics | Aggregate visit statistics | Up to 2 years |
| Media & social | YouTube (Google), Instagram (Meta) | Play embedded videos and posts | Set by the provider |
Accessibility statement
We want everyone to feel at home here. This site is designed to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA.
- Every page works with a keyboard, with a visible focus ring and a "Skip to main content" link.
- Text and controls meet AA contrast (4.5:1 for text, 3:1 for field borders and icons).
- Images have text alternatives, and Yoruba names are marked up so screen readers pronounce them correctly.
- Pages reflow to 320px wide and stay usable at 200% zoom. Motion is reduced if your device asks for it.
- Forms have visible labels, required fields are marked, and messages are announced to screen readers.
If something doesn't work for you, or you need content in another format, email contact@zahrazakariya.com. We'll reply as soon as we can.
Contact us about privacy
The Zahra Zakariya Collective
Company No. 17429068
