Privacy Policy

Last updated: 29 October 2026

This policy explains how Zentus Workwear collects and uses personal data when you browse our store, place an order, use your customer account or contact us. It also explains Shopify's role, cookies and your data protection rights.

1) Controller and contact details

CREATEUR GROUPE SRL is the controller for the processing we determine in running Zentus Workwear.
VAT (CUI): RO42705716
Trade Register No.: J2020000602152
Registered office and contact address: Str. Drumul Băcriiului nr. 36D, Roșu, Chiajna, Ilfov, Romania, 077042
Email for support and data protection: contact@zentus-workwear.com
Phone: +40 758 307 307
Website: zentus-workwear.com

Privacy and data-protection contact: Dan Ilinca — contact@zentus-workwear.com.

Shopify also acts as a controller for certain processing described in section 6. This does not remove our responsibility for the processing we control.

2) Information we collect and its sources

  • Contact and account details: your name, email, phone number, shipping and billing addresses, and account information you provide.
  • Business billing details: company name, VAT identifier and address where supplied for a business purchase, including the personal contact details of its representative.
  • Orders and transactions: products, personalisation instructions you supply, order value, payment method and confirmation, invoicing, delivery, returns, refunds and complaint records.
  • Communications: messages and information you send in enquiries, forms or support correspondence.
  • Device and usage data: IP address, browser and device information, pages viewed and interactions such as adding a product to the cart, together with relevant cookie identifiers and privacy choices.

We receive information directly from you, automatically from your interaction with the store, and from service providers involved in your transaction, such as payment-status or delivery updates. We do not store full payment card details; payment providers process them.

Information marked as required during checkout is needed to enter into or perform the sale, deliver goods or meet a legal obligation. If it is not supplied, we may be unable to complete your order. Marketing consent is optional and is not a condition of purchasing.

3) Purposes and legal bases

  • Contract and steps you request before a contract: answering purchase enquiries, processing orders and payments, delivering goods, managing your customer account, and handling cancellations, returns and refunds.
  • Legal obligations: required invoicing and accounting records, tax compliance, and duties relating to consumer complaints and rights.
  • Legitimate interests: protecting our store and customers against fraud and abuse, maintaining security, handling business-contact correspondence, improving our services using information that may lawfully be processed for that purpose, and establishing or defending legal claims. We assess these interests against your rights. This basis does not replace consent where consent is required for cookies, tracking or marketing.
  • Consent: optional marketing communications and optional analytics, advertising or other tracking where consent is required, including consent-dependent targeted advertising connected with Shopify's services.

We use the relevant basis for the purpose concerned, rather than treating a purchase or acceptance of our terms as consent to optional tracking or advertising.

4) Marketing and personalisation

If you choose to subscribe to marketing, we use the contact details and preferences you provide for that purpose. You can unsubscribe using the link in a marketing message or by contacting us. Transactional messages needed for orders, refunds or account security are separate from promotional messages.

Where enabled and supported by the required consent, analytics and advertising technologies can measure interactions, assess campaign performance and help display more relevant offers. This can involve grouping customers or visitors according to shopping activity. You may object to direct marketing, including associated profiling, at any time.

5) Recipients

We disclose the information needed for the relevant purpose to the following recipient categories:

  • Shopify: hosting and operating the store, checkout, customer accounts and the services described below.
  • Payment providers and banks: processing Shopify Payments card and supported wallet payments, bank transfers, payment confirmations and refunds.
  • Delivery and logistics providers: delivering goods and handling related delivery or return matters.
  • IT and security service providers: supporting the systems used to run our business.
  • Order-management, invoicing and accounting system providers: where used, to process orders, issue invoices and maintain accounting records.
  • Analytics and advertising providers: for enabled services, subject to consent where required.
  • Professional advisers and authorities: accountants, legal advisers, courts and competent authorities where needed for legal obligations, investigations or claims.

The information disclosed depends on the service; for example, delivery providers need delivery and contact details. Providers processing data for us act under the applicable arrangements, while independent controllers are responsible for their own processing.

6) Shopify and Shopify Network Intelligence

Shopify hosts our store and processes information about visits and purchases to operate its services. Shopify Network Intelligence is enabled. It uses information from interactions with this store alongside interactions with other merchants and Shopify to support enhanced services, including personalisation and service improvements. Other merchants do not receive access to our customer data through this feature.

For these Enhanced Services, Shopify acts as a separate controller and determines the purposes and means of its processing. Shopify's Consumer Privacy Policy describes its data use, recipients and rights. Information is shared with Shopify and relevant third parties to provide these services, including recipients located in other countries.

Targeted advertising based on your activity across this store, other merchants and Shopify requires consent where applicable. Use our website's cookie preferences to change your choices. You can also use the Shopify Privacy Portal to exercise rights concerning Shopify's processing, including withdrawing consent or objecting as applicable. You may contact us about the processing for which we are responsible.

7) International transfers

Shopify and other service providers may process personal data outside the European Economic Area. Where a transfer requires safeguards under the GDPR, an applicable adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses must be used. You may contact us for information about the safeguards relevant to your data and how to obtain a copy, subject to lawful redactions. Shopify provides further information about its transfers in its privacy notices.

8) Retention

We keep personal data for as long as necessary for its purpose, taking account of the following criteria:

  • the duration of the order, delivery, return, support or account relationship;
  • applicable accounting, tax and other legally required recordkeeping periods;
  • the time reasonably needed to address a complaint or establish, exercise or defend a claim, including applicable limitation periods;
  • for consent-based marketing, whether consent remains in force, with limited records retained where needed to demonstrate or respect your choices.

Withdrawal of consent or an erasure request does not require deletion of records that must still be kept on another lawful basis. We retain only the information needed for that remaining purpose. Shopify explains its own retention criteria in its Consumer Privacy Policy.

9) Cookies and similar technologies

Strictly necessary technologies support functions such as the cart, checkout, security and recording privacy choices. Optional analytics and advertising technologies require your consent where applicable and are not made necessary merely by enabling a store feature.

You can accept or reject optional purposes and later change or withdraw consent through the cookie preferences on our website. Withdrawing consent does not affect processing that was lawful before withdrawal. For help finding or using the controls, contact contact@zentus-workwear.com. Browser controls can also restrict cookies, although blocking necessary cookies may affect shopping functions.

10) Security

We use reasonable technical and organisational measures, including appropriate access controls and the platform's security facilities, to protect personal data. No online system provides an absolute security guarantee.

11) Your rights

Where the GDPR applies, and subject to its conditions, you can request access, correction, erasure, restriction or portability of your personal data. You can object to processing based on legitimate interests on grounds relating to your situation, and object to direct marketing at any time. You may withdraw consent without affecting the lawfulness of earlier consent-based processing. You also have rights concerning solely automated decisions with legal or similarly significant effects.

Send requests to contact@zentus-workwear.com or our postal address. A “GDPR request” subject line is helpful but not required. We may ask for proportionate information to verify your identity. We respond without undue delay and normally within one month; if the law permits an extension for a complex or numerous request, we will explain it within that month.

You may complain to a competent data protection authority, including in the EU/EEA country where you habitually live or work or where an alleged infringement occurred. The Romanian supervisory authority is ANSPDCP. You do not have to contact us first to exercise that right.

12) Changes and contact

We may update this policy to reflect our practices or legal requirements and will show the updated date on this page. Where additional notice or consent is required, we will provide it.

Contact CREATEUR GROUPE SRL at contact@zentus-workwear.com, +40 758 307 307, or Str. Drumul Băcriiului nr. 36D, Roșu, Chiajna, Ilfov, Romania, 077042.

13) Microsoft Clarity and AI Shopping Assistant

We use Microsoft Clarity to analyze website interactions through heatmaps, session recordings and behavioral analytics to improve our website, products and customer experience.

We also use Microsoft Clarity Brand Agents, an AI-powered shopping assistant that helps customers discover products, compare options and receive shopping assistance.

To provide these services, Microsoft may process relevant business information, including product details, pricing, inventory and order-management data. Chat messages, interaction events and usage information may be shared with Microsoft to operate, secure and improve the service.

This processing may involve first-party and third-party cookies or similar tracking technologies, subject to applicable privacy and consent requirements.

Your privacy choices: You can request deletion of saved AI assistant insights directly through the chat by typing "Delete my saved information", or contact us at contact@zentus-workwear.com.

For more information, see the Microsoft Privacy Statement.