Privacy policy

Effective Date: September 25, 2026

Last Updated: September 25, 2026

At Zahra Craft ("we," "us," or "our"), operating via zahracraft.store, we are committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website, make a purchase, or interact with our services.

1. Information We Collect

We collect information directly from you, automatically through your use of our site, and from third-party sources to provide and improve our services.

A. Information You Directly Provide to Us

Contact Information: Full name, email address, phone number, shipping address, and billing address.
Order & Purchase Information: Payment card details (processed securely by third-party payment gateways), items purchased, order history, and delivery preferences.
Customer Support: Information provided when communicating with us regarding inquiries, custom orders, order tracking, or feedback.

B. Information Automatically Collected

Device & Usage Data: IP address, browser type, operating system, preferred language, referring/exit pages, and time stamps.
Cookies & Tracking Technologies: Pages visited, products viewed, time spent on pages, links clicked, and shopping cart items.

2. How We Use Your Information

We use the collected information for the following business purposes:

Order Fulfillment: Processing transactions, arranging express shipping, sending order confirmations, and providing invoice/receipt details.
Customer Support: Resolving technical or shipping issues, answering product questions, and processing returns/refunds.
Store Optimization: Analyzing site traffic, optimizing user experience, and improving overall store layout and offerings.
Marketing Communications: Sending promotional updates, special discounts, or new collection releases (only if you have opted in; you may unsubscribe at any time).
Fraud Prevention & Compliance: Preventing fraudulent transactions, enforcing store policies, protecting against unauthorized activities, and complying with legal obligations.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We only share data with trusted third-party service providers necessary to operate our store:

E-Commerce Platform: Hosted on Shopify, which stores data on secure servers to facilitate shop operations.
Payment Processors: Secure payment gateways (e.g., Stripe, PayPal) to handle payment verification and transactions.
Shipping Carriers: Express courier partners (e.g., DHL, FedEx, UPS, USPS) to fulfill and deliver your orders to your address.
Legal Compliance: When required by law, court order, or government authority to protect the legal rights, safety, or property of Zahra Craft or our customers.

4. Cookies & Analytics

We use essential, functional, and analytical cookies to remember your cart preferences, maintain session stability, and understand how visitors interact with our store.

You can control or disable cookies through your browser settings. However, disabling essential cookies may impact store functionality (e.g., placing items in your cart or completing checkout).

5. Data Security & Retention

We implement physical, electronic, and procedural safeguards (including SSL encryption) to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, resolve disputes, maintain accurate tax/legal records, and enforce our agreements.

6. Your Rights & Choices

Depending on your geographic location (including California/CCPA and European Union/GDPR), you may have the following rights regarding your personal information:

Access & Portability: Request details about the personal information we hold about you.
Correction: Request updates or corrections to inaccurate or incomplete information.
Deletion: Request that we erase your personal data, subject to certain statutory retention requirements.
Opt-Out: Unsubscribe from marketing communications at any time using the "Unsubscribe" link in our emails.

To exercise any of these rights, please contact us at contact@zahracraft.store.

7. Children's Privacy

Our website is not intended for or directed toward individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately to have it deleted.

8. International Data Transfers

As we operate globally and provide express worldwide delivery, your information may be transferred to and processed in countries outside your country of residence (including the United States), where data protection laws may differ.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our operational, legal, or regulatory practices. Any updates will be posted on this page with an updated "Last Updated" date.