Zenrua
Shop Gifts

Who we are

Zenrua is an online shop selling home fragrance, candles, oil burners and gifts at www.zenrua.com. Zenrua is run by Nattaphat Coombes, a sole trader based in Thailand, who is the controller of your personal data. In this policy, "we", "us" and "our" mean Zenrua. This policy explains what personal data we collect when you visit our website or buy from us, how we use it, and the rights you have. Because we sell to customers in the UK, we follow UK data protection law. Contact us about your data Nattaphat Coombes 241 Moo 5, Soi Romklao 6/1 Perfect Park Romklao Phase 5 Romklao Rd., Min Buri Bangkok 10510 Thailand Email: shop@zenrua.com We are a small business and have not appointed a Data Protection Officer, but we will deal with any privacy question personally.

Privacy Policy

Last updated: 6 October 2026

Who we are

Zenrua is an online shop selling home fragrance, candles, oil burners and gifts at www.zenrua.com. Zenrua is run by Nattaphat Coombes, a sole trader based in Thailand, who is the controller of your personal data. In this policy, "we", "us" and "our" mean Zenrua. This policy explains what personal data we collect when you visit our website or buy from us, how we use it, and the rights you have. Because we sell to customers in the UK, we follow UK data protection law.  

Contact us about your data

Email: shop@zenrua.com

We are a small business and have not appointed a Data Protection Officer, but we will deal with any privacy question personally.

What personal data we collect

We collect only what we need to run the shop and deliver your order.
Type of data Examples Where it comes from
Identity and contact Name, email address, phone number You, when you order, create an account or contact us
Delivery and billing Delivery address, billing address, gift recipient's name and address You, at checkout
Order Products bought, order value, order date, gift messages Your order
Payment Confirmation that a payment was made Stripe or PayPal; we never see or store your full card details
Account Username and password (stored encrypted), saved addresses You, if you create an account
Communications Emails and messages you send us You
Website usage IP address, browser and device type, pages viewed, how you reached our site Cookies and similar technologies (see Cookies)
If you buy a gift to be delivered to someone else, we use their name and address only to deliver it. Please make sure they would be happy for you to share these details with us. You need to give us your name, contact details and delivery address to place an order; without them we cannot complete it. Everything else is optional.

How we use your data and our lawful bases

UK data protection law requires us to have a lawful basis for each way we use your data.
What we use your data for Lawful basis
Processing, packing and delivering your order, and sending order and dispatch updates Contract: we need it to fulfil your order
Handling returns, refunds and questions about your order Contract
Managing your account, if you create one Contract
Keeping accounting and tax records Legal obligation
Preventing fraud and keeping our website secure Legitimate interests: protecting our business and customers
Understanding how visitors use our website so we can improve it Consent, given through our cookie banner
Replying to messages you send us Legitimate interests: providing good customer service
Where we rely on legitimate interests, we have balanced our interests against your rights, and you can object at any time (see Your rights). We do not make decisions about you based solely on automated processing.

Who we share your data with

We never sell your personal data. We share it only with trusted service providers who help us run the shop, and only as much as each needs:
Provider What they do Data shared
Stripe and PayPal Process card and online payments securely Name, billing address, email address, order value
Royal Mail Delivers your order Recipient's name and delivery address, and email address for delivery updates where offered
Namecheap Hosts our website, where order data is stored All data held on the website
StatCounter Website visitor statistics, only with your consent IP address, device and browsing information
NitroPack Speeds up our website Technical connection data such as IP address
These providers act on our instructions or under their own privacy policies, and must keep your data secure. We may also share data where the law requires it, for example with HMRC or the police, or if our business is sold, in which case your data would pass to the new owner under the same protections.

International transfers

Zenrua is run from Thailand, so your personal data is accessed and handled there to run the shop, for example to manage orders and reply to your messages. We apply UK data protection standards to your data wherever it is handled, and Thailand's Personal Data Protection Act also protects it. Some of our service providers, such as payment, analytics and website services, may also store or process data in other countries, including the European Economic Area and the United States. Where they do, they protect it with safeguards recognised under UK law, such as UK adequacy decisions or ICO-approved contracts. You can contact us for more details.

How long we keep your data

We keep personal data only for as long as we need it:
Data How long we keep it
Order, payment and invoice records 6 years from the end of the financial year of the order, as tax law requires
Customer account Until you ask us to close it, or deleted after 3 years without any activity
Messages and customer service emails Up to 2 years after our last contact, unless linked to an order
Website analytics Only if you consent; see Cookies
When we no longer need your data, we delete it securely or anonymise it.

Cookies

Cookies are small files stored on your device when you visit a website. We use necessary cookies to make the shop work, and analytics cookies only if you agree to them.
Cookie type What it does Examples How long it lasts
Necessary Keeps items in your basket, runs checkout, keeps you logged in, remembers your cookie choices WooCommerce basket and session cookies; cookie consent cookie Most end when you close your browser or within 48 hours; your cookie choice is remembered until it expires or you change it
Analytics Counts visitors and shows which pages are popular, so we can improve the site StatCounter Set only with your consent, for the period StatCounter sets; see StatCounter's privacy policy
Necessary cookies do not need your consent, because the shop cannot work without them. Analytics cookies are set only if you accept them in our cookie banner. You can change your choice at any time using the cookie settings link at the bottom of every page. You can also block or delete cookies in your browser settings, although parts of the shop, such as the basket, may then stop working.

Marketing

We do not send marketing emails. We only email you about your orders, for example order confirmations, dispatch updates and replies to your questions. We do not share your details with other companies for their own marketing.

Your rights

Under UK data protection law, you have the right to:
  • Access the personal data we hold about you and receive a copy.
  • Rectification: ask us to correct data that is wrong or incomplete.
  • Erasure: ask us to delete your data, unless we must keep it by law, for example for tax records.
  • Restriction: ask us to limit how we use your data while a concern is looked into.
  • Portability: receive data you gave us in a common digital format, or have it sent to another organisation.
  • Object to us using your data based on legitimate interests.
  • Withdraw consent at any time, where we rely on consent, for example for analytics cookies.
To use any of these rights, email shop@zenrua.com. There is normally no charge. We will reply within one month, and may need to confirm your identity first. If a request is complex, we may extend this by up to two further months and will tell you why.

Keeping your data secure

Our website uses an encrypted connection (HTTPS), and payments are handled by our payment providers, so we never see or store your full card details. Access to customer data is limited to the people who run Zenrua, and we use strong passwords and keep our website software up to date.

Children

Our shop is intended for adults. We do not knowingly collect personal data from children under 13.

Complaints

If you have a concern about how we use your data, please contact us first at shop@zenrua.com, and we will do our best to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:

Website: ico.org.uk/make-a-complaint

Phone: 0303 123 1113

Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Changes to this policy

We may update this policy from time to time, for example if we start using a new service provider. The date at the top shows when it was last updated. If we make significant changes, we will make them clear on our website.

Powered by