Global Store Privacy Policy

1. Data controller and contact

AL ZARROUK operates the global store from Tunisia and is responsible for the customer relationship and the personal-data processing described in this policy.

Privacy questions and requests may be sent to support@alzarrouk.com or through the official live chat shown on the store.

2. Data we collect

• Account and identity data, including name, verified email address, phone number, account identifier, and account-status information.
• Sign-in data supplied through an enabled sign-in provider such as Google. AL ZARROUK does not receive the password for that external account.
• Checkout and delivery data, including recipient name, phone number, governorate, delegation, locality, postal code, address, delivery instructions, products, variants, quantities, and order information.
• Payment data needed to verify a store payment, including payment identifier, selected USDT network, amount, payment status, and transaction reference or hash when available.
• Support and live-chat data, including messages, files, photos, videos, product-condition evidence, packaging or shipping-label evidence, and other information the customer chooses to send.
• Technical and security data, including IP address, browser and device information, session information, login and request timestamps, security events, and records used to prevent fraud, abuse, attacks, or unauthorized access.
• Essential cookie and local-storage data used for sessions, language preference, cart persistence, and security.
• Analytics data when an analytics service is enabled, such as page usage, performance, referral, device, and interaction information to understand and improve the store.

3. Why we process data

• To create, authenticate, maintain, and secure customer accounts.
• To maintain the cart, validate checkout, create and manage orders, verify payment, fulfill delivery, and provide order support.
• To share the minimum delivery and order information necessary with suppliers, carriers, postal or delivery operators involved in fulfillment.
• To investigate damaged, defective, incorrect, lost, delayed, or non-conforming products and to process authorized returns and refunds.
• To detect fraud, abuse, security threats, duplicate or suspicious activity, and to protect customers, the store, payments, and accounts.
• To operate, diagnose, measure, and improve the website and customer experience, including through analytics when enabled.
• To send marketing only when the customer has separately chosen to subscribe, with an option to unsubscribe.
• To send necessary transactional or service messages about accounts, orders, payments, shipping, tracking, returns, refunds, or support whether or not the customer subscribes to marketing.
• To comply with applicable legal, regulatory, accounting, tax, security, and dispute-resolution obligations.

4. Cookies, local storage, and analytics

AL ZARROUK uses essential cookies and browser storage for secure sessions, account functions, language preference, cart persistence, and security. The cart may remain stored on the customer's device after the browser is closed.

AL ZARROUK may enable an analytics service to measure store usage and performance. Where applicable law requires consent for non-essential analytics or similar technologies, the relevant consent choice will be presented before those technologies are used.

The global store does not currently use advertising pixels or disclose personal data to advertisers for sale or advertising targeting. If this materially changes, this policy and any required consent controls will be updated before the new use applies.

5. Who may receive data

Personal data is shared only when reasonably necessary for the purposes described in this policy. Recipients may include infrastructure, authentication, payment, security, analytics, customer-support, email, supplier, carrier, postal, delivery, and other service providers used to operate or fulfill the store.

Suppliers and delivery providers receive only the order and delivery information reasonably necessary for fulfillment. This policy does not identify or endorse any particular supplier marketplace or individual supplier.

AL ZARROUK does not sell customers' personal data and does not share it with advertisers for the purpose of selling the data or targeting customers with third-party advertising.

Data may also be disclosed to a competent authority when disclosure is lawfully required, or when reasonably necessary to establish, exercise, or defend legal rights as permitted by applicable law.

6. International processing and transfers

Some service providers, suppliers, infrastructure, authentication, payment, support, analytics, or delivery systems may process data outside Tunisia.

Any international transfer or processing of personal data is subject to applicable Tunisian data-protection requirements, including required safeguards, approvals, or authorizations where the law requires them. AL ZARROUK limits transferred data to what is necessary for the relevant purpose.

7. USDT payment and third-party acquisition boundary

AL ZARROUK uses USDT only as a payment method for store purchases. The store does not buy, sell, exchange, broker, or recommend cryptocurrency and does not direct customers to a person, platform, or place from which to acquire it.

If a customer independently obtains USDT from another person, exchange, platform, or third party, that separate transaction is outside the AL ZARROUK service and its data processing. The customer should not send AL ZARROUK passwords, private keys, seed phrases, wallet passwords, email passwords, or one-time authentication codes.

8. Retention

AL ZARROUK keeps personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, security, fraud-prevention, fulfillment, support, and dispute-resolution requirements.

A customer account may remain available until the customer requests deletion or until AL ZARROUK has a lawful reason to close it. A deletion request does not require deletion of records that must be retained for an active order, payment, return, dispute, fraud investigation, security record, accounting record, or legal obligation.

Support and live-chat records, including submitted photos or videos, follow the same necessity-based retention approach.

9. Security and fraud prevention

AL ZARROUK uses reasonable administrative and technical safeguards, restricted access, secure connections, and security monitoring appropriate to the store.

Where fraud, abuse, unauthorized access, payment manipulation, or another security risk is reasonably suspected, AL ZARROUK may temporarily restrict an account or order and verify relevant information as permitted by law.

Support will never ask for a wallet private key, seed phrase, wallet password, email password, or one-time authentication code.

10. Your privacy rights

Customers retain the privacy rights granted by applicable Tunisian law. Depending on the circumstances, these may include rights to access, correct, update, clarify, object to certain processing, withdraw consent where processing depends on consent, and request deletion or cessation of processing where legally applicable.

Requests may be sent through support@alzarrouk.com or official live chat. AL ZARROUK may take reasonable steps to verify identity before acting and may retain information where retention is required or permitted by law.

11. Minors

Use of the store by a minor is subject to the age, consent, guardian, and other requirements of applicable Tunisian law. Where the law requires a parent, guardian, or other legal authorization, that requirement must be satisfied before the relevant personal data is submitted or processed.

12. Marketing and service communications

Marketing messages are sent only to customers who separately choose to subscribe. A customer may unsubscribe from marketing without losing necessary order, payment, shipping, security, or support communications.

13. Future Marketplace services

This version covers the global store. When AL ZARROUK launches Marketplace buyer, seller, delivery-worker, or related local-platform services, additional privacy terms will be published for the extra data and processing required by those services.

14. Changes to this policy

AL ZARROUK may update this policy when the store, analytics, providers, legal requirements, or processing practices change. The current version and update date will remain published here.

When a change materially affects how customer personal data is used, AL ZARROUK will provide an appropriate notice before or when the material change takes effect, as required by applicable law.