Privacy policy

Privacy Policy

Last updated: October 2, 2026

This Privacy Policy explains how Robust Ventures LTD ("Robust Ventures," "we," "us," or "our") collects, uses, shares, and protects your personal information when you visit zestdelites.com (the "Site"), create an account, sign up for our emails, or buy Zest Delites or Zest Delites+ products from us.

1. Who We Are

Robust Ventures LTD is the operator of the Site and the "controller" of your personal information.

Robust Ventures LTD
Spaces Victoria, Office 2.20
25 Wilton Road
London SW1V 1LW
United Kingdom
Email: hello@zestdelites.com

2. Information We Collect

Information you give us

Order information: name, billing and shipping address, email address, phone number, and order details. Payment card details are entered directly into our payment processors' secure checkout; we do not store full card numbers.
Account information: if you create an account, your login details, saved addresses, and order history.
Newsletter sign-ups: your email address and your marketing preferences.
Customer support: any information you provide when you contact us, such as your name, email address, order number, and the content of your message.

Information collected automatically
When you use the Site, we and our service providers automatically collect information such as your IP address, browser and device type, approximate location (derived from IP address), pages and products viewed, referring website, search terms, and how you interact with the Site. We collect this using cookies, pixels, and similar technologies (see Section 6).

Information from third parties
We may receive information from payment processors (such as payment confirmation and fraud signals), shipping carriers (such as delivery status), and advertising partners (such as how you interacted with our ads).

3. How We Use Your Information

We use your personal information to:

process, ship, and deliver your orders, and send order confirmations and shipping updates;
create and manage your account;
provide customer support and respond to your requests;
send you marketing emails if you have signed up (you can unsubscribe at any time);
understand how visitors use the Site so we can improve it;
measure and improve our advertising, including showing you relevant ads on other platforms;
detect and prevent fraud, abuse, and security incidents; and
comply with legal, tax, and accounting obligations and enforce our terms.

4. Legal Bases for Processing (UK and EEA)

Where UK or EU data protection law applies, we rely on the following legal bases:

Performance of a contract: to process and deliver your orders and manage your account.
Consent: for marketing emails and for non-essential cookies and advertising pixels, where consent is required. You may withdraw your consent at any time.
Legitimate interests: to operate, secure, and improve the Site, prevent fraud, and understand our customers, where these interests are not overridden by your rights.
Legal obligation: to keep records required by tax and accounting laws and to respond to lawful requests.

5. How We Share Your Information

We do not sell your personal information for money. We share it only as described below:

Shopify: our e-commerce platform, which hosts the Site and processes orders. See Shopify's Privacy Policy: https://www.shopify.com/legal/privacy
Payment processors: to process your payment securely.
Shipping and fulfillment partners: to deliver your orders.
Email service provider: to send our order and marketing emails.
Advertising and analytics partners: Meta (Facebook and Instagram) and Google receive information about your use of the Site through their pixels and tags so we can measure and show relevant ads (see Section 6).
Legal and safety: where required by law, to respond to a subpoena, court order, or other lawful request, or to protect our rights, customers, or others.
Business transfers: in connection with a merger, acquisition, or sale of assets, in which case your information may be transferred to the new owner.

Under some U.S. state privacy laws, sharing information with advertising partners for targeted advertising may be considered a "sale" or "sharing" of personal information. You can opt out of this as described in Sections 6 and 10.

6. Cookies, Pixels, and Targeted Advertising

We use cookies and similar technologies to make the Site work (for example, your shopping cart and checkout), to analyze Site usage, and for advertising. These include:

Strictly necessary cookies set by Shopify for cart, checkout, login, and security.
Analytics: Shopify Analytics and Google Analytics.
Advertising: the Meta Pixel and Google Ads tags, which help us measure the performance of our ads and show you ads on Facebook, Instagram, Google, and partner sites.

Your choices:

Use the cookie preferences banner on the Site to accept or decline non-essential cookies.
We honor Global Privacy Control (GPC) browser signals as a request to opt out of targeted advertising for that browser.
Opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout
Manage Google ad personalization: https://adssettings.google.com
Manage Meta ad preferences: https://www.facebook.com/settings/?tab=ads
Industry opt-out tools: https://optout.aboutads.info and https://optout.networkadvertising.org
You can also block or delete cookies in your browser settings, but some parts of the Site may then not work properly.

Do Not Track: Because there is no common industry standard for "Do Not Track" signals, we do not respond to them. We do honor GPC signals as described above.

7. Marketing Emails

If you sign up for our newsletter or agree to receive marketing at checkout, we will send you news, offers, and tips about our products. Every marketing email includes an unsubscribe link, and you can also contact us at hello@zestdelites.com to opt out. We will still send transactional emails about your orders.

8. Data Retention

We keep your personal information only as long as needed for the purposes described in this policy. In general, we keep order records for as long as required by tax and accounting laws (typically up to 6 years), account information until you close your account, and marketing data until you unsubscribe. After that, we delete or anonymize it.

9. Security

We use reasonable technical and organizational measures to protect your personal information, including encrypted (HTTPS) connections and PCI-DSS-compliant payment processing through our platform providers. However, no method of transmission or storage is completely secure.

10. Your Privacy Rights

UK and EEA residents. You have the right to access, correct, delete, or receive a portable copy of your personal information, to restrict or object to our processing, and to withdraw consent at any time. You also have the right to lodge a complaint with the UK Information Commissioner's Office (https://ico.org.uk/make-a-complaint/) or your local data protection authority.

U.S. residents. Depending on your state of residence (including California, Virginia, Colorado, Connecticut, Texas, and other states with consumer privacy laws), you may have the right to:

know and access the personal information we have collected about you;
correct inaccurate personal information;
delete your personal information;
obtain a copy of your personal information in a portable format; and
opt out of the "sale" or "sharing" of personal information and of targeted advertising.

California residents may also request information about the disclosure of personal information to third parties for their direct marketing purposes (California "Shine the Light" law).

How to exercise your rights: Email us at hello@zestdelites.com with the subject line "Privacy Request." We will verify your identity before responding, usually by matching the information you provide with what we have on file. You may use an authorized agent to submit a request on your behalf; we may ask for proof of their authorization. If we deny your request, you may appeal by replying to our decision with the subject line "Privacy Appeal." We will not discriminate against you for exercising your privacy rights.

11. International Data Transfers

We are based in the United Kingdom, and our service providers, including Shopify, may store and process your information in the United States, Canada, the European Union, and other countries. When we transfer personal information out of the UK or EEA, we rely on appropriate safeguards such as adequacy decisions, the UK International Data Transfer Agreement or Addendum, or the European Commission's Standard Contractual Clauses.

12. Children's Privacy

The Site is intended for adults and is not directed to children under 13 (or under 16 in the UK and EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at hello@zestdelites.com and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. We will post the updated version on this page with a new "Last updated" date and, where required by law, notify you of material changes.