Privacy policy

Draft only — to be reviewed (GDPR) before definitive publication.

1. Data controller

ZIZAI (, SIRET 10513397900010), 4 Rue Monsieur le Prince, 75006 Paris, service.client@zizaiparis.com.

ZIZAI is the website of the tea salon and online shop: browse the catalogue, salon and journal, place an order, create an account, and follow orders, returns and loyalty. These pages are available without an account, except the personal area.

2. Data we collect

Depending on how you use the site: identity and contact details (account, order, delivery); order and return history; preferences (newsletter, only with consent); payment data at the payment provider (we do not store the full card number); security logs (IP address, browser, connection logs); if you choose “Continue with Google”: the name and email address of your Google account.

3. Google sign-in

When you sign in or create an account with Google, ZIZAI receives only your Google name and email. They are used to create or open the customer account, attach orders, and send transactional emails. We do not access Gmail, Google Drive, or any other Google data. Google acts as an authentication provider; its processing is governed by its own policy.

4. Purposes

Performing orders and the customer account; after-sales service and returns; legal and accounting obligations; site security (fraud, abuse); newsletter only with consent; audience statistics only if implemented and, where required, after consent (see Cookies).

5. Legal bases

Contract: account, order, delivery / pickup. Legal obligation: invoicing, accounting. Legitimate interest: security, service improvement. Consent: newsletter, non-essential cookies.

Google sign-in is based on the contract (creating / accessing the account) and on your choice to use that button.

6. Recipients

Authorised staff of ZIZAI; hosting provider; payments (Stripe); transactional email; Google (authentication only if you use that button); carriers if we deliver. We do not sell personal data.

7. Transfers outside the EU

Some providers (payments, Google) may process data outside the EEA, with GDPR safeguards (standard contractual clauses, etc.). Details: service.client@zizaiparis.com.

8. Retention

Account: while active, then deletion / legally required archiving. Orders / invoicing: accounting periods (up to 10 years indicatively). Newsletter: until you unsubscribe. Technical logs: a limited period needed for security.

9. Your rights

Access, rectification, erasure, restriction, objection, portability, withdrawal of consent. Export from My data, or service.client@zizaiparis.com. Complaint: CNIL (cnil.fr). Given the size of the activity, no DPO has been appointed to date.

10. Cookies

See the Cookies page. Non-essential cookies require your agreement.

Last updated: 21 August 2026.