Privacy & cookie policy

Privacy and cookie policy

Last updated: 31-08-2026

Who we are

Zedrafit, based in the Netherlands, is the controller for personal data processed via www.zedrafit.com. Contact: info@zedrafit.com.

What we process and why

  • Account: email address, name, password (stored encrypted), language preference — to manage your account and orders (performance of the contract).
  • Orders and invoices: delivery address, phone number, ordered products, payment references — for delivery and our legal (tax) records. Invoices are kept for 7 years (statutory retention).
  • Payments: handled by our payment providers (Mollie or Stripe); we never receive or store card details.
  • Email: transactional email (order status, invoices, account) via our email provider. No newsletters without separate consent.
  • Support tickets: the content of your messages, to answer your question.
  • Referral programme: if you sign up through an invite link, we link that to the inviter for the reward.

Sharing

We only share data with processors needed to run the shop (hosting, email delivery, payment provider, parcel carrier) and only for those purposes. We never sell data.

Cookies

Zedrafit uses functional cookies only, which are necessary for the shop to work:

  • session — keeps you signed in (30 days)
  • cart_token — remembers your cart (30 days)
  • ref_code — remembers whose invite link you used (30 days)
  • language/display preferences in your browser (localStorage)

We do not use any third-party tracking, advertising or analytics cookies. Consent is therefore not required for these cookies under the ePrivacy rules; we still inform you via the cookie notice.

Your rights (GDPR)

You have the right to access, rectify, erase, restrict, port and object. Email info@zedrafit.com; we respond within 30 days. You can also lodge a complaint with the Dutch DPA, Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Security and retention

Data is transmitted encrypted (TLS) and passwords are stored hashed. We keep data no longer than needed: account data until you ask for deletion, invoices for 7 years (tax law).