Privacy Policy

    Last updated: 7/22/2026

    Data Controller Information

    Data Controller: ZheraDesign
    Email: support@zheradesign.com
    Contact for Data Protection: support@zheradesign.com

    ZheraDesign is the data controller responsible for processing your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

    1. Information We Collect

    We collect information you provide directly to us, such as when you create an account, request a quote, or contact us. This may include:

    • Name and contact information (email, phone number)
    • Project details and requirements
    • Payment information (processed securely through third-party providers)
    • Communications with our team
    • Consultation booking information (date, time preferences)
    • Review and feedback content

    Legal Basis for Processing

    We process your personal data based on:

    • Contract: To provide our web design services and fulfill our obligations
    • Consent: For marketing communications and review publication (where you've given explicit consent)
    • Legitimate Interest: For business operations, fraud prevention, and service improvement
    • Legal Obligation: To comply with legal requirements such as tax and accounting laws

    2. How We Use Your Information

    We use the information we collect to:

    • Provide and improve our web design services
    • Process payments and fulfill orders
    • Communicate with you about your projects
    • Send updates about our services (only with your explicit consent)
    • Schedule and conduct consultations
    • Display customer reviews (only with your explicit consent)
    • Comply with legal obligations
    • Protect against fraud and ensure security

    3. Information Sharing

    We do not sell, trade, or otherwise transfer your personal information to third parties without your explicit consent, except as described in this policy. We may share information with:

    • Service providers who assist in our operations (hosting, payment processing, email services)
    • Legal authorities when required by law or to protect our rights
    • Business partners only with your explicit consent for specific purposes

    Third-Party Service Providers

    We work with the following categories of third-party processors:

    • Hosting Services: For website infrastructure and data storage
    • Email Services: For sending communications and notifications
    • Payment Processors: For secure payment handling
    • Analytics Services: For website performance analysis (only with consent)

    4. Data Retention

    We retain your personal information for different periods depending on the purpose:

    • Quote Requests: 3 years after the last contact or until you request deletion
    • Customer Data: 7 years after project completion for legal and tax purposes
    • Marketing Consents: Until you withdraw consent or 3 years of inactivity
    • Reviews: Indefinitely unless you request removal
    • Consultation Records: 2 years after the consultation date

    We will securely delete or anonymize your personal data when the retention period expires, unless we are legally required to retain it longer.

    5. Data Security

    We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

    • SSL/TLS encryption for data transmission
    • Secure data storage with encrypted databases
    • Regular security updates and monitoring
    • Limited access to personal data on a need-to-know basis
    • Regular security audits and assessments

    However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

    6. Your Rights Under GDPR

    If you are in the European Economic Area (EEA), you have the following rights:

    Right to Access

    Request a copy of the personal data we hold about you

    Right to Rectification

    Request correction of inaccurate or incomplete data

    Right to Erasure

    Request deletion of your personal data in certain circumstances

    Right to Restrict Processing

    Request limitation of processing in certain circumstances

    Right to Data Portability

    Receive your data in a structured, machine-readable format

    Right to Object

    Object to processing based on legitimate interests or for marketing purposes

    Right to Withdraw Consent

    Withdraw consent for data processing at any time

    How to Exercise Your Rights

    To exercise any of these rights, please contact us at support@zheradesign.com with:

    • Your full name and email address
    • Description of your request
    • Proof of identity (to prevent unauthorized access)

    We will respond to your request within 30 days and may extend this by up to 60 days in complex cases.

    7. Cookies

    Our website uses cookies to enhance your experience. We obtain your consent before setting non-essential cookies. You can manage your cookie preferences through our cookie banner or browser settings.

    For detailed information about our cookie usage, please see our Cookie Policy.

    8. International Data Transfers

    Your personal data may be transferred to and processed in countries outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

    • Standard Contractual Clauses approved by the European Commission
    • Adequacy decisions by the European Commission
    • Other appropriate safeguards as required by law

    9. Changes to This Policy

    We reserve the right to update this privacy policy at any time. Material changes will be communicated through email notification or prominent notice on our website. The updated policy will indicate the revision date.

    10. Complaints

    If you believe we have not handled your personal data in accordance with this policy or applicable law, you have the right to lodge a complaint with your local data protection authority.

    11. Contact Us

    If you have any questions about this Privacy Policy or our data practices, please contact us:

    General Inquiries: support@zheradesign.com

    Data Protection: support@zheradesign.com

    Subject Line: Privacy Policy Inquiry

    Cookie Notice

    We use cookies to enhance your experience. By continuing, you agree to our use of cookies. Learn more