Privacy
Privacy Policy
Last updated: 11 August 2026
01Data controller
The data controller is Zara Bespoke Technology FZCO, Dubai Airport Free Zone, Dubai, United Arab Emirates, license no. 07477.
For any privacy matter you can write to [email protected].
02What data we process
We process only the data strictly needed to run this website and answer your enquiries:
- Contact form data: the name, email address and message you choose to send us.
- Technical server logs: IP address, user agent and timestamps, kept by our infrastructure for security purposes.
- Aggregate analytics data: anonymous, aggregate statistics on site traffic (page views, referrers, approximate country, device type), collected without cookies and without identifying visitors.
03Purposes and legal basis
We use your data for the following purposes:
- Responding to enquiries: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR).
- Security: our legitimate interest in keeping the website and its infrastructure secure (Art. 6(1)(f) GDPR).
- Understanding site usage: our legitimate interest (Art. 6(1)(f) GDPR) in measuring aggregate traffic to improve the website, using privacy-preserving, cookieless analytics.
04Retention
Contact enquiries are kept for up to 24 months from the last exchange. Technical logs are kept for up to 12 months. After these periods, data is deleted or anonymised.
05Recipients and processors
Your data may be handled on our behalf by a small number of service providers acting as processors:
- Hetzner (Germany/Finland): EU-based hosting of this website and its infrastructure.
- Cloudflare: CDN and reverse proxy in front of the website, and provider of Cloudflare Web Analytics, a cookieless service that processes aggregate traffic statistics on our behalf.
- Google Workspace: email services used to receive and answer enquiries.
WhatsApp is not one of our processors: if you choose to write to us on WhatsApp, that conversation takes place on WhatsApp (Meta), under WhatsApp's own privacy policy. This website transmits nothing to WhatsApp until you actively open the chat.
We do not sell your data or share it with anyone else.
06International transfers
This website is hosted in the European Union. The data controller is established in the United Arab Emirates, so data connected to your enquiry may be accessed from outside the EU/EEA. Where such access takes place, we rely on appropriate safeguards under Chapter V GDPR, such as standard contractual clauses, and limit access to what is strictly necessary.
07Your rights
Under the GDPR you have the right to:
- access your personal data;
- have it rectified or erased;
- restrict or object to its processing;
- receive it in a portable format;
- lodge a complaint with a supervisory authority (for Italy, the Garante per la protezione dei dati personali).
To exercise any of these rights, write to [email protected]. We will reply within the timeframes set by the GDPR.
08Cookies and analytics
This website uses no cookies and stores nothing on your device: no cookies, no local storage, no fingerprinting, no profiling, no cross-site tracking.
We measure traffic with Cloudflare Web Analytics, which works without cookies and collects only anonymous, aggregate data (page views, referrers, approximate country, device type). No visitor is identified and no browsing profile is built.
Because nothing is stored on your device and no visitor is identified, no consent banner is required: there is still nothing to accept and nothing to refuse.
This policy may be updated from time to time; the date above always reflects the latest version.