Privacy Policy
This policy explains what personal information we collect when you use our store, why we need it, who we share it with, and the control you have over it. We do not sell your data.
Last updated: 30 July 2026
1. Scope
This policy applies to personal data we process when you visit this website, create an account, place an order, subscribe to our newsletter, submit a review, or contact our support team. It does not cover third-party websites we link to, each of which has its own policy.
2. Who Is Responsible for Your Data
The data controller is:
- Entity: [COMPANY LEGAL NAME]
- Commercial register: [COMMERCIAL REGISTER NO.]
- Address: [STORE ADDRESS]
- Privacy contact: [SUPPORT EMAIL]
3. What We Collect
Information you give us
| Category | Examples | When we collect it |
|---|---|---|
| Identity | Name, and company name where relevant | Registration, checkout, enquiries |
| Contact | Email address, telephone number, billing and delivery addresses | Registration, checkout, enquiries |
| Account | Username, hashed password, saved addresses, wishlists | Registration and account use |
| Order | Products ordered, order history, invoices, returns and warranty records | Placing and servicing orders |
| Payment | Payment method type, last four digits, authorisation result, transfer receipts | Checkout, via our processors |
| Communications | Emails, contact-form messages, call and chat notes, review content | When you contact us or post |
| Marketing | Newsletter subscription status and preferences | When you subscribe or opt out |
Information collected automatically
- IP address, approximate location derived from it, and language preference.
- Device and browser type, operating system, and screen characteristics.
- Pages viewed, products viewed, search terms used, referring page and time spent.
- Basket and session identifiers held in cookies so your basket survives page changes.
Information from third parties
- Payment and fraud-screening outcomes from our payment processors.
- Delivery status and proof of delivery from carriers.
- Basic profile data if you choose to sign in or pay via a third-party service such as PayPal.
We do not knowingly collect special-category data (health, religion, political opinion, biometrics) and we ask you not to send it to us. Please do not include payment card numbers in an email or contact-form message.
4. Why We Use It, and Our Legal Basis
| Purpose | Data used | Basis |
|---|---|---|
| Process and deliver your order, and handle returns and warranty claims | Identity, contact, order, payment | Performance of our contract with you |
| Take payment and prevent fraud | Payment, order, technical | Contract, and our legitimate interest in preventing fraud |
| Manage your account and support requests | Account, contact, communications | Contract |
| Send order, dispatch and service notifications | Contact, order | Contract |
| Send marketing emails and newsletters | Contact, marketing preferences | Your consent, withdrawable at any time |
| Improve the site, our range and our service | Technical, usage, aggregated order data | Our legitimate interest in running the business well |
| Keep accounting, tax and warranty records | Identity, order, payment | Compliance with our legal obligations |
| Secure the site and investigate misuse | Technical, account, usage | Legitimate interest in protecting our systems and customers |
5. Cookies and Similar Technologies
We use cookies and comparable browser storage for the following purposes:
- Strictly necessary — sign-in sessions, shopping basket, checkout steps, security tokens. The store cannot function without these.
- Preference — remembering your locale, currency and display choices.
- Analytics — understanding, in aggregate, which pages and products people use, so we can improve them.
- Marketing — where enabled, measuring campaign performance and showing relevant offers.
You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will prevent you from signing in or completing checkout. Where consent is required for analytics or marketing cookies, we ask for it before setting them, and you can change your mind at any time.
6. Who We Share It With
We share personal data only where it is needed to run the store, and only to the extent necessary. We never sell your personal data.
| Recipient | What they receive | Why |
|---|---|---|
| Payment processors (e.g. Stripe, PayPal) | Payment and billing details, order amount | To take payment and screen for fraud |
| Delivery carriers | Name, delivery address, telephone number, order reference | To deliver your parcel and contact you about it |
| Manufacturers and authorised service centres | Product, serial number, fault description, and your contact details where needed | To process warranty and service claims |
| Email and hosting providers | Data necessary to run the site and send transactional and marketing email | Infrastructure and communications |
| Analytics providers | Pseudonymised usage and device data | To measure and improve the site |
| Professional advisers and authorities | Only what is legally required | Accounting, audit, legal obligations, lawful requests |
Our service providers act on our instructions under contract, and are not permitted to use your data for their own purposes. We may also disclose data where required by law, to enforce our terms, or in connection with a sale or restructuring of our business — in which case the recipient remains bound by this policy.
7. Payment Card Data
We do not see, process or store full payment card numbers, expiry dates or security codes. Card details are submitted directly to a PCI-DSS compliant payment processor over an encrypted connection. We retain only the payment method type, the last four digits, and the authorisation result — enough to identify a transaction, support a refund and answer a query.
8. How Long We Keep It
| Record | Retention period |
|---|---|
| Order, invoice and tax records | As required by applicable accounting and tax law, typically 10 years |
| Warranty and service records | For the warranty period plus 2 years |
| Account data | While your account is active, then up to 24 months after last activity |
| Support correspondence | Up to 3 years from case closure |
| Newsletter subscription | Until you unsubscribe, plus a suppression record so we do not email you again |
| Analytics and server logs | Up to 26 months, in aggregated or pseudonymised form |
When a retention period ends we delete or irreversibly anonymise the data.
9. How We Protect It
- All traffic to and from the site is encrypted with TLS (HTTPS).
- Passwords are stored only as salted one-way hashes; nobody at ZoneTec can read your password.
- Administrative access is restricted by role, granted on a least-privilege basis, and logged.
- Payment processing is delegated to PCI-DSS compliant providers, keeping card data out of our systems.
- Systems and dependencies are patched, and backups are held securely.
No system can be guaranteed completely secure. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority without undue delay.
10. Your Rights
Subject to applicable law, you may ask us to:
- Access the personal data we hold about you, and receive a copy.
- Correct data that is inaccurate or incomplete.
- Delete data we no longer have a lawful reason to keep.
- Restrict or object to certain processing, including processing based on legitimate interest.
- Port data you gave us to another provider in a machine-readable format.
- Withdraw consent for marketing at any time, without affecting anything done before.
You can update most details yourself under My Account → Profile. For anything else, email [SUPPORT EMAIL] from the address on your account. We respond within 30 days and may need to verify your identity first. Note that we cannot delete records we are legally obliged to retain, such as tax invoices.
11. Marketing Preferences
We send marketing email only where you have opted in. Every marketing email carries an unsubscribe link that takes effect immediately, and you can also email [SUPPORT EMAIL] to opt out.
Transactional messages — order confirmations, dispatch and delivery notices, invoices, warranty updates and security notifications — are part of servicing your order and are sent regardless of marketing preferences.
12. Children
This store is not directed at children under 18 and we do not knowingly collect their personal data. If you believe a child has provided us with personal information, contact [SUPPORT EMAIL] and we will delete it.
13. International Transfers
Some of our service providers — hosting, email delivery, payment processing, analytics — operate outside Lebanon. Where personal data is transferred internationally, we require appropriate contractual safeguards obliging the recipient to protect it to a standard consistent with this policy and applicable law.
14. Automated Decision-Making
We use automated fraud screening at checkout, which may flag an order for manual review or decline it. High-value and unusual orders are always reviewed by a person before a final decision. If an order of yours is declined on these grounds, contact us and we will look at it again manually.
15. Changes to This Policy
We may update this policy to reflect changes in our practices or in the law. The current version is always published here, with the "last updated" date at the top. Where a change materially affects your rights, we will take reasonable steps to notify you directly.
Contact Us
To exercise a right, or to ask anything about how we handle your data:
- Email: [SUPPORT EMAIL]
- Phone: [SUPPORT PHONE]
- WhatsApp: [WHATSAPP NUMBER]
- Showroom: [STORE ADDRESS]
- Contact form: send us a message
Our support hours are Monday to Friday, 9:00 to 18:00, and Saturday, 10:00 to 16:00 (Beirut time). We are closed on Sundays and public holidays.