What we know about you,
and what we do with it.

ZAANVO LLC, operating under the brand name Zaanvo, designs, manufactures, and sells tempered glass backsplashes, wall art, and custom photo panels through zaanvo.com. The studio is located in Florida, USA, and we ship directly to customers worldwide.

For the purposes of this Privacy Policy and applicable data-protection laws, including the GDPR where applicable, ZAANVO LLC is the data controller responsible for deciding how and why personal data is processed.

Email us at info@zaanvo.com with any privacy question.

We only collect data you give us, in one of three ways:

1. When you place an order

• Your name (so we can address you and label the parcel)
• Your email (to send the order confirmation and payment link)
• Your shipping address (so FedEx can deliver)
• Your phone number, if you provide it (FedEx uses it for delivery contact)
• The items, sizes, and prices in your order

2. When you write to us

• Your name and email
• The subject and message you sent us

3. Automatically, when you visit

• Our hosting provider (Vercel) records basic request information — IP address, time, page requested, browser user-agent — in short-lived server logs, to keep the site running and to detect abuse.
• We keep your cart in your browser's localStorage so it survives page refreshes. That data never leaves your device.

4. Anonymised page-view analytics (only if you opt in)

If you accept analytics in our cookie banner, we use Vercel Web Analytics to count page views and see which pages people read. This data is cookie-free, IP-anonymised before storage, and aggregated per day. It tells us things like "100 people visited /backsplashes today" — never who you are, what you bought, or anything that could identify you.

If you don't accept, nothing is loaded — no script, no IP processing, no aggregated counts. You appear in our server logs the same as everyone else (see #3 above) but not in any analytics dashboard.

What we still don't collect: no Google Analytics, no advertising trackers, no social-media pixels, no cross-site fingerprinting. If any of that changes, this page changes first.

Under the UK and EU General Data Protection Regulation ("GDPR"), every collection of personal data needs a lawful basis. Ours:

• Order data— to perform our contract with you (Article 6(1)(b)). We can't make and ship a panel without knowing where to send it.
• Contact form data — your consent when you submit the form (Article 6(1)(a)), and our legitimate interest in replying to your message (Article 6(1)(f)).
• Server logs — our legitimate interest in keeping the site secure and operational (Article 6(1)(f)).

We never sell your data. We use a small set of service providers to run the site — each acts as a processor on our instructions:

• Supabase Inc.
• Resend Inc.
• Vercel Inc.
• Cloudflare, Inc.

For shipping, we also share your name, address, and phone with FedEx so they can deliver the parcel.

We never share your data with advertisers, data brokers, or social networks.

Because Supabase, Resend, and Vercel host data in the United States, your data leaves the EU/UK when we serve EU/UK customers. Each of those providers offers Standard Contractual Clauses or equivalent transfer safeguards approved by the European Commission, which we've accepted.

• Order records— 10 years from the order date. We're required to keep them this long under applicable tax law.
• Contact-form messages — 2 years from the date you wrote in, then deleted.
• Server logs — retained by Vercel for around 30 days, then automatically purged.
• Cart in localStorage— sits on your device until you clear your browser or finish checkout. We can't delete it from your end; you can clear your browser's site data at any time.

When you use the custom-photo backsplash or wall-art builder, the image you upload is treated as part of your order file. Concretely:

• Why we collect it. To prepare, produce, fulfill, and support your custom order. Nothing else.
• Who can see it. Only the ZAANVO LLC team responsible for producing your panel and the customer-support person handling your order. It is not shared with any third party outside the production workflow.
• Where it is stored. On our Supabase Storage bucket, protected by access controls that block anonymous reads. The direct file URL is not published anywhere on the site.
• Retention.The image stays attached to your order record for as long as the order record itself (see "How long we keep it" above) so we can honour reprints, replacements, and support requests years later. You can ask us to delete it earlier — see "Your rights" below.
• No marketing use. We do not use your uploaded image on our website, social media, or in any advertisement unless you separately give us permission for that specific use.
• No AI training.Your uploaded image is not fed into any generative-AI training pipeline — ours or a third party's.

By uploading an image, you confirm that you own the copyright or have permission from the copyright holder to reproduce it on a printed product. If you believe a Zaanvo product infringes your copyright, write to us at info@zaanvo.com with a description of the work, evidence of ownership, and the product URL in question, and we will remove the listing while we review.

We use a small number of cookies — all strictly necessary for the site to work — and no advertising cookies of any kind:

• Cart state — stored in your browser's localStorage, not in a cookie. It only contains the items you added.

If we ever add analytics or non-essential cookies, we'll present a clear consent prompt before they load — and update this page first.

If you're in the EU, UK, or another GDPR-equivalent region, you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Delete your data, subject to our tax-law retention obligation on completed orders
• Restrict or object to specific uses of your data
• Port your data to another service in a machine-readable format
• Complainto your local data-protection supervisory authority if you think we're mishandling your data

To exercise any of these rights, email info@zaanvo.com. We aim to respond within 30 days. We may ask you to confirm your identity first, so we don't hand your data to someone else.

Our products aren't marketed to children, and we don't knowingly collect data from anyone under 16. If you believe a child has submitted personal data through our site, email us and we'll delete it.

• All traffic to the site is encrypted with TLS (HTTPS).
• Our database is protected by Row-Level Security policies that deny anonymous access to order and contact data by default.
• Admin access requires a signed-in account with a strong password and short-lived session cookies.
• Service-role credentials (which can bypass database security) are never sent to your browser — they live only on our server.

When we update this policy, the "last updated" date at the top of this page changes. For material changes — for example, adding a new third-party service that processes personal data — we will email customers with active orders before the new policy takes effect.