Introduction

Welcome to Zebaesh. Your trust is central to everything we do, and we are committed to handling personal information with care, transparency, fairness, and respect.

This Privacy Policy explains how Zebaesh collects, uses, stores, shares, transfers, protects, and otherwise processes personal information when you visit or interact with our website, create or use a customer account, browse or purchase products, communicate with our customer-care team, subscribe to marketing communications, participate in promotions, submit reviews, or otherwise use any feature, product, service, or digital experience offered by us.

In this Privacy Policy, the terms “Zebaesh,” “we,” “us,” and “our” refer to the Zebaesh business operating this online store. The terms “you,” “your,” “visitor,” and “customer” refer to any visitor, prospective customer, purchaser, account holder, subscriber, gift recipient, authorised representative, or other individual who interacts with us.

Our store is powered by Shopify and may use trusted applications, payment providers, courier services, fulfilment partners, analytics tools, advertising platforms, communication services, review platforms, customer-support systems, and other technology providers. These providers may process certain personal information on our behalf or for their own lawful purposes, subject to their respective obligations and privacy practices.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires consent for a particular activity, we will request that consent or provide an appropriate choice before carrying out that activity.

This Privacy Policy should be read together with our Terms of Service, Shipping Policy, Refund Policy, Contact Information, cookie notice, and any additional terms or notices displayed when you use a particular product, feature, or service.

Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with the Zebaesh website, online store, customer accounts, customer-support channels, order fulfilment, marketing communications, social-media interactions, promotional campaigns, reviews, surveys, loyalty initiatives, and any related digital or commercial service controlled by Zebaesh.

Products and Services Covered

This policy is intentionally designed to support the continued growth of Zebaesh. It applies to our current products and, where introduced in the future, to products and services including:

• Hair oils, shampoos, conditioners, serums, masks, treatments, styling products, and other hair-care products.
• Skincare, body-care, bath-care, personal-care, wellness, and grooming products.
• Cosmetics, makeup, fragrances, beauty tools, and beauty accessories.
• Handbags, purses, wallets, fashion accessories, and lifestyle products.
• Jewellery, watches, ornaments, gift items, and related accessories.
• Undergarments, apparel, textiles, and other fashion categories introduced by Zebaesh.
• Gift cards, vouchers, bundles, subscriptions, memberships, loyalty programs, and rewards.
• Mobile applications, digital accounts, virtual consultations, product-matching tools, personalised recommendations, and future online services.
• Any additional product, collection, feature, platform, or service offered under the Zebaesh brand.

Individuals Covered

This policy applies to website visitors, customers, prospective customers, account holders, gift recipients, newsletter subscribers, promotion participants, product reviewers, individuals communicating with customer support, and any person whose information is provided to us in connection with an order or service.

If you provide information on behalf of another person, such as a family member, gift recipient, or authorised representative, you confirm that you have an appropriate reason and authority to provide that information and that the individual has been informed about how it may be processed.

Services Not Controlled by Zebaesh

This Privacy Policy does not govern websites, applications, platforms, or services operated independently by third parties, even where they are linked to or integrated with our website. Those third parties may maintain their own privacy policies and terms, which should be reviewed before personal information is provided directly to them.

Jurisdiction-Specific Protections

Privacy rights and legal requirements may differ depending on your location. Where mandatory applicable law provides additional protections or rights, we will process personal information in accordance with those requirements.

Our Role and Shopify’s Role

Zebaesh generally determines why and how personal information is used in connection with our store, orders, customer service, marketing, business administration, and related activities.

Shopify provides the ecommerce infrastructure used to operate our online store. When you visit our website, create an account, place an order, or otherwise interact with our store, Shopify may process personal information to provide and improve its platform, maintain security, prevent fraud, support transactions, and perform other activities described in Shopify’s own privacy documentation.

Depending on the activity involved, Shopify and other service providers may process information on our instructions, as independent organisations, or in another legally recognised role. Their independent processing is governed by their respective privacy policies and legal obligations.

Personal Information We Collect

The information we collect depends on how you interact with Zebaesh, which features you use, the products or services you request, and the choices you make. We seek to collect information that is reasonably relevant to operating our store, fulfilling customer requests, protecting our business, and providing a high-quality experience.

Identity and Contact Information

We may collect:

• Full name.
• Email address.
• Telephone or mobile number.
• Billing address.
• Shipping or delivery address.
• City, province, state, region, postal code, and country.
• Preferred language or communication method.
• Delivery instructions voluntarily provided by you.

Order and Transaction Information

When you browse products, place an order, request assistance, or otherwise transact with us, we may collect:

• Products viewed, selected, purchased, returned, exchanged, or added to a shopping cart or wishlist.
• Order number, date, quantities, prices, discounts, taxes, delivery charges, and total amount.
• Order, fulfilment, delivery, and courier-tracking status.
• Billing details and selected payment method.
• Cash-on-delivery confirmation and delivery-verification information.
• Return, refund, replacement, cancellation, warranty, or complaint records.
• Gift messages, recipient information, and delivery preferences.
• Information used to identify or investigate suspicious or fraudulent transactions.

Payment Information

Depending on the payment method selected, payment information may be collected directly by an authorised payment gateway, bank, financial institution, digital-wallet provider, cash-on-delivery provider, or other transaction processor.

Zebaesh may receive limited transaction information, such as payment status, payment method, transaction reference, billing name, partial account details, or fraud-screening results. We do not ordinarily receive or store complete payment-card numbers, CVV codes, online-banking passwords, or banking PINs within our own business records.

Customer Account Information

If customer accounts are available, we may collect:

• Account name and contact details.
• Authentication or login information.
• Saved addresses and preferences.
• Order history and account activity.
• Wishlist, saved products, loyalty points, rewards, or subscriptions.
• Account-security and verification information.

Passwords and authentication credentials may be managed by Shopify or another authorised account provider and may not be directly accessible to Zebaesh in readable form.

Customer Support and Communications

When you contact us through email, telephone, WhatsApp, social media, live chat, contact forms, or another support channel, we may collect:

• Your name and contact information.
• The content of your inquiry, complaint, message, or request.
• Order details provided for verification or assistance.
• Photographs, videos, screenshots, or documents voluntarily submitted by you.
• Records of our responses and follow-up communications.
• Customer-service notes created to address your request.

Please avoid providing sensitive information that is not reasonably necessary for us to assist you.

Reviews, Testimonials, Surveys, and User-Generated Content

If you submit a rating, review, testimonial, photograph, video, survey response, comment, or other content, we may collect that content together with your name or display name, city, purchase-verification status, submission date, product information, and any other details you choose to provide.

Where content is intended for publication, selected information may be displayed publicly in accordance with the choices and terms presented to you. Do not include confidential, private, or unnecessary personal information in publicly submitted content.

Marketing and Preference Information

Where applicable, we may collect information relating to:

• Email, SMS, WhatsApp, or other marketing subscriptions.
• Communication and notification preferences.
• Promotions, giveaways, competitions, surveys, or loyalty-program participation.
• Products, collections, or categories that may interest you.
• Responses to advertisements, campaigns, surveys, and offers.
• Marketing permissions, consent records, and unsubscribe requests.

Personalisation and Consultation Information

If Zebaesh offers consultations, quizzes, virtual assistance, product-matching tools, or personalised recommendations, we may collect information voluntarily provided about your preferences, concerns, routines, goals, product experiences, style preferences, or intended use.

This information may be used to provide general product guidance and improve your experience. Unless expressly stated otherwise, online recommendations are general in nature and are not medical diagnoses.

Information About Other Individuals

You may provide information about another individual when purchasing a gift, arranging delivery, referring a customer, or acting as an authorised representative. This may include the recipient’s name, telephone number, address, and delivery instructions.

You are responsible for ensuring that you have an appropriate and lawful reason to provide another individual’s information.

Sensitive Personal Information

We do not ordinarily require sensitive personal information to sell or deliver our products. Please do not provide government identification numbers, financial passwords, complete card credentials, medical records, biometric information, or other highly sensitive information unless specifically requested for a lawful and necessary purpose.

If limited sensitive information is voluntarily submitted in connection with customer support, a product concern, accessibility request, fraud investigation, or legal request, we will seek to process it only to the extent reasonably necessary for that purpose.

Information Collected Automatically

When you visit or interact with our website, certain information may be collected automatically by Shopify, our website technologies, and authorised providers. This helps us operate the website, maintain security, understand performance, and improve customer experience.

Device and Technical Information

This information may include:

• Internet Protocol address.
• Device type and device identifiers.
• Browser type, version, and language.
• Operating system.
• Screen size and display settings.
• Internet service provider or network information.
• Time zone, approximate region, and general location inferred from technical information.
• Date and time of access.
• Security, diagnostic, and error information.

Approximate location information is generally inferred from an IP address or device settings. We do not intend to collect precise physical location unless a feature clearly requests and receives appropriate permission.

Website Activity and Interaction Information

We may collect information about:

• Pages, products, collections, and content viewed.
• Search terms entered on our website.
• Links, buttons, filters, menus, and features used.
• Products added to or removed from carts or wishlists.
• Time spent on pages and general navigation patterns.
• Referral source or the page visited before arriving at our website.
• Checkout progress, abandoned-cart activity, and purchase journeys.
• Interactions with advertisements, messages, and campaigns.
• Website errors, loading performance, and functionality issues.

Information From Providers and Business Partners

We may receive information from providers including:

• Shopify and applications installed on our Shopify store.
• Payment providers and fraud-prevention services.
• Courier, logistics, fulfilment, and delivery partners.
• Analytics and website-performance providers.
• Advertising networks and social-media platforms.
• Email, SMS, WhatsApp, and communication providers.
• Review, loyalty, customer-support, and marketing platforms.

Information received may include transaction confirmation, delivery status, campaign interaction, device data, fraud-risk indicators, customer-support records, or information necessary to connect related activity across services.

Analytics and Inferences

We or our providers may analyse available information to understand general customer interests, product popularity, shopping patterns, likely preferences, campaign effectiveness, and website performance.

For example, we may infer interest in a product category based on products viewed or added to a cart. Such insights may be used to improve navigation, stock planning, communications, promotions, and recommendations, subject to applicable law and available choices.

Fraud Prevention and Security Signals

To protect customers and our business, Zebaesh, Shopify, and authorised providers may evaluate technical, transaction, account, and behavioural information for signs of fraud, abuse, unauthorised access, malicious activity, or violations of our terms.

An order or transaction may be delayed, declined, cancelled, or referred for manual review where reasonably necessary to protect customers, Zebaesh, Shopify, payment providers, or other parties.

Cookies and Similar Technologies

Zebaesh, Shopify, and authorised providers may use cookies, pixels, tags, local storage, software development kits, and similar technologies to operate our website, remember choices, understand interactions, provide relevant content, measure performance, maintain security, and support marketing.

A cookie is a small data file placed on or accessed from your browser or device. Some cookies remain only for the duration of a browsing session, while others remain for a longer period unless deleted or blocked.

Strictly Necessary Cookies

These technologies may support:

• Loading and displaying the website correctly.
• Maintaining shopping-cart contents.
• Supporting checkout and order processing.
• Authenticating customer accounts.
• Remembering privacy or security settings.
• Preventing fraud, abuse, and unauthorised access.
• Maintaining website stability and security.

Because these technologies are necessary for requested services, security, or core website operation, they may not be fully disabled through our website controls.

Functional Cookies

Functional cookies may remember:

• Language, country, or regional preferences.
• Recently viewed products.
• Saved preferences and customisation choices.
• Customer-service or chat settings.
• Account and session preferences.

Analytics and Performance Cookies

Analytics technologies may assist us in measuring:

• Visitor numbers and traffic sources.
• Popular pages, products, and collections.
• Navigation patterns and engagement.
• Page loading, errors, and technical performance.
• Checkout journeys and conversion performance.
• The effectiveness of website improvements.

Advertising and Marketing Technologies

Subject to applicable law and available consent controls, we and our advertising providers may use cookies, pixels, tags, or similar technologies to:

• Measure advertisements and marketing campaigns.
• Understand whether an advertisement resulted in a visit or purchase.
• Limit repeated or irrelevant advertising.
• Create or measure audiences based on website interactions.
• Present advertising that may be more relevant to customer interests.
• Support abandoned-cart, product-reminder, or promotional communications where permitted.

Advertising providers may process information collected through their technologies in accordance with their own privacy policies and platform settings.

Social-Media Technologies

Social-media buttons, embedded content, login features, pixels, or integrations may allow the relevant platform to receive information about your browser, device, or interaction with our website. Depending on the technology, this may occur even where you do not actively click the relevant feature.

Cookie Duration

Session cookies generally expire when you close your browser. Persistent cookies remain for a defined period or until removed. Their duration depends on their purpose, provider, and browser or device settings.

Managing Cookie Choices

Where a cookie banner, consent manager, or privacy-preference tool is available, you may use it to manage non-essential technologies. Cookies may also be controlled through browser or device settings.

Most browsers allow you to:

• View stored cookies.
• Delete some or all cookies.
• Block cookies from particular websites.
• Block third-party cookies.
• Receive a notification before a cookie is stored.

Blocking or deleting cookies may affect functionality. Your cart, account session, saved preferences, checkout, or other website features may not work correctly.

Browser and Device Privacy Signals

Some browsers and devices provide privacy signals or tracking-prevention settings. Our response may depend on applicable law, the signal received, and the capabilities provided through Shopify and our service providers.

Changes to Cookie Use

We may update the technologies used by our store as our products, website, services, marketing practices, and providers evolve. Material changes will be reflected in this Privacy Policy or an appropriate cookie notice where required.

How We Use Personal Information

We use personal information to operate our business, fulfil customer requests, provide and improve products and services, maintain security, comply with legal obligations, and deliver a reliable customer experience.

Orders and Fulfilment

We may use information for:

• Confirming and processing orders.
• Processing or verifying payments.
• Preparing invoices and receipts.
• Packaging, dispatching, and delivering products.
• Providing courier and tracking updates.
• Managing returns, refunds, replacements, exchanges, and cancellations.
• Verifying delivery and contact information.
• Resolving order-related concerns.

Customer Service

We use information to respond to inquiries, complaints, product questions, delivery concerns, account issues, warranty requests, and other support matters.

Account Administration

Where customer accounts are available, information may be used to:

• Create and manage accounts.
• Authenticate account access.
• Maintain saved preferences and addresses.
• Provide order history.
• Administer rewards, wishlists, or subscriptions.
• Maintain account security.

Business Operations

Information may be processed for inventory management, financial reporting, accounting, auditing, taxation, customer relationship management, product planning, operational analysis, quality control, and internal administration.

Website and Service Improvement

We may analyse information to understand website usage, customer preferences, product popularity, loading performance, checkout completion, service quality, and opportunities to improve our website and customer experience.

Product and Service Development

Reviews, feedback, purchasing patterns, surveys, and market insights may be used to improve existing offerings and develop new products, collections, packaging, formulas, fragrances, accessories, services, technologies, and customer experiences.

Fraud Prevention and Security

We may use information to detect, investigate, prevent, and respond to fraud, payment abuse, account misuse, security incidents, suspicious orders, unauthorised access, policy violations, and harmful activity.

Legal Compliance and Protection

We may process information to comply with legal obligations, lawful government requests, court orders, tax and accounting requirements, consumer-protection obligations, intellectual-property rights, and other lawful processes.

Information may also be used to establish, exercise, or defend legal rights; resolve disputes; enforce our terms; and protect customers, Zebaesh, service providers, and other parties.

Legal Bases for Processing

Where applicable data-protection law requires a legal basis, we may process personal information on one or more of the following grounds:

Performance of a Contract

Processing may be necessary to provide products or services you request, process an order, arrange delivery, manage payments, provide customer support, administer an account, or otherwise perform our contractual obligations.

Legal Obligations

Processing may be necessary to comply with applicable taxation, accounting, financial-reporting, consumer-protection, regulatory, law-enforcement, or other legal requirements.

Legitimate Interests

We may process information where reasonably necessary for legitimate business interests, such as operating and improving our store, maintaining security, preventing fraud, understanding customers, managing business operations, developing products, and protecting legal rights.

Where required, we consider whether those interests are necessary and balanced against your interests, rights, freedoms, and reasonable expectations.

Consent

We may rely on consent for certain marketing, advertising, cookie, personalisation, sensitive-data, or other activities where applicable law requires it.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect processing already carried out lawfully before consent was withdrawn.

Vital Interests and Other Lawful Grounds

In limited circumstances, processing may be necessary to protect the vital interests of an individual or may be permitted under another applicable lawful basis.

Marketing Communications

Where permitted by applicable law or where you have requested or agreed to receive them, we may send communications about products, collections, promotions, educational content, brand updates, seasonal campaigns, surveys, newsletters, or special offers.

Marketing channels may include:

• Email.
• SMS.
• WhatsApp.
• Social-media or advertising platforms.
• Push notifications where available.
• Other communication channels selected by you.

Your Choices

You may unsubscribe or update your preferences by using an unsubscribe link, adjusting available settings, following opt-out instructions, or contacting our support team.

Opting out of promotional communications will not prevent us from sending non-marketing messages relating to orders, deliveries, accounts, transactions, security, legal notices, or customer-service requests.

Artificial Intelligence and Personalised Experiences

As technology evolves, Zebaesh may use automated systems, intelligent tools, or artificial-intelligence technologies to improve customer experience, product discovery, website performance, customer support, inventory planning, fraud prevention, recommendations, content, and operational efficiency.

Examples may include:

• Personalised product recommendations.
• Shopping assistance and improved search.
• Virtual consultations or product-matching tools.
• Beauty, hair-care, skincare, or style quizzes.
• Automated customer support.
• Inventory and demand forecasting.
• Fraud-risk analysis.
• Content and communication personalisation.

Automated tools are intended to assist customers and improve services. Unless expressly stated otherwise, recommendations are general in nature and are not intended to replace professional medical advice, diagnosis, or treatment.

Where applicable law provides rights concerning solely automated decisions that produce legal or similarly significant effects, we will respect those rights. We do not intend to make such decisions about customers without appropriate safeguards.

Payment Processing and Transaction Security

Payments may be processed through authorised gateways, banking partners, digital-wallet providers, cash-on-delivery services, or other payment processors.

These providers maintain their own security systems, privacy practices, fraud controls, encryption technologies, and regulatory obligations.

Transaction Verification

For customer protection and fraud prevention, transactions may be reviewed or verified using:

• Customer identity and contact information.
• Billing and delivery details.
• Payment status.
• Order history.
• Device and technical signals.
• Fraud-risk indicators.

Although reasonable safeguards are used, no internet transmission or electronic-storage system can be guaranteed completely secure.

Never share passwords, one-time verification codes, banking PINs, or other confidential payment credentials with anyone claiming to represent Zebaesh.

Sharing and Disclosure of Personal Information

We share personal information only where reasonably necessary to operate our business, provide requested services, comply with legal obligations, prevent fraud, protect rights, or support another purpose described in this Privacy Policy.

Service Providers

Information may be shared with providers including:

• Shopify and Shopify applications.
• Payment processors and financial-service providers.
• Courier, logistics, warehouse, and fulfilment partners.
• Hosting, cloud-storage, and cybersecurity providers.
• Customer-support and communication platforms.
• Email, SMS, and WhatsApp service providers.
• Analytics, advertising, and marketing providers.
• Fraud-prevention and transaction-verification services.
• Review, loyalty, subscription, and rewards platforms.
• Professional advisers, auditors, insurers, accountants, and legal representatives.

Providers generally receive information necessary to perform their services and are expected to protect it appropriately.

No Monetary Sale of Personal Information

Zebaesh does not sell personal information for monetary consideration.

Certain advertising, analytics, or audience-related activities may, under the broad definitions used by some privacy laws, be treated as a “sale,” “sharing,” disclosure for targeted advertising, or similar activity even where no money is exchanged.

Where applicable, we will provide the notices, consent mechanisms, and opt-out choices required by law.

Legal Requirements and Protection of Rights

Information may be disclosed where required or permitted by law, including in response to lawful requests from courts, regulators, tax authorities, consumer-protection bodies, law-enforcement agencies, or other governmental authorities.

We may also disclose information where reasonably necessary to protect the rights, property, safety, security, or legal interests of Zebaesh, customers, employees, providers, business partners, or other parties.

International Data Transfers

Zebaesh operates online and works with Shopify and other technology or service providers whose systems, personnel, or infrastructure may be located in multiple countries.

As a result, personal information may be transferred to, stored in, accessed from, or processed in a country outside your place of residence where permitted by applicable law.

Privacy and data-protection laws in another country may differ from those in your country. Where required, we seek to rely on recognised safeguards, contractual protections, security measures, adequacy arrangements, or another valid transfer mechanism.

Regardless of where information is processed, we expect providers to maintain appropriate confidentiality, security, and responsible data-handling standards consistent with their services and applicable obligations.

Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, operate our business, comply with legal obligations, resolve disputes, protect rights, prevent fraud, enforce agreements, and maintain appropriate business records.

Retention periods depend on factors including:

• The category and sensitivity of the information.
• The purpose for which it was collected.
• The nature and duration of our relationship with you.
• Accounting, taxation, consumer-protection, or regulatory requirements.
• Applicable limitation periods and potential legal claims.
• Fraud-prevention, security, and dispute-resolution needs.
• Whether information can reasonably be anonymised instead of deleted.

Examples of Retention

• Account information may be retained while an account remains active and for a reasonable period afterwards.
• Order, invoice, payment, delivery, and transaction records may be retained for accounting, taxation, reporting, fraud-prevention, and consumer-protection purposes.
• Customer-support records may be retained to resolve inquiries, investigate complaints, improve service, and protect legal rights.
• Marketing preference and consent records may be retained to honour choices and demonstrate compliance.
• Technical logs, analytics data, and security records may be retained for cybersecurity, operational analysis, fraud prevention, and system maintenance.

Where reasonably practicable, we apply internal retention criteria based on information categories, continuing business purposes, legal requirements, security needs, and applicable limitation periods.

When information is no longer reasonably required, we will seek to securely delete, anonymise, aggregate, or otherwise dispose of it in accordance with applicable requirements and internal practices.

Children’s Privacy

Protecting children’s privacy is important to Zebaesh.

Our website and services are intended for a general audience and are not designed or directed primarily toward children who are below the minimum age permitted under applicable law to independently provide personal information.

We do not knowingly collect personal information directly from children in circumstances requiring parental or legal-guardian consent unless appropriate consent or another lawful basis has been established.

Purchases for Children

Some Zebaesh products may be purchased by a parent or guardian for use by a child. In such circumstances, order and customer information should be provided by the responsible adult making the purchase rather than directly by the child.

Accounts, Reviews, Promotions, and Communications

Children should not independently create customer accounts, subscribe to marketing, participate in promotions, publish reviews, submit photographs, or communicate personal information through our services where they are not legally permitted to do so without adult involvement.

Information Collected Unintentionally

If we become aware that a child’s personal information has been collected in a manner inconsistent with this Privacy Policy or applicable law, we will take reasonable steps to investigate and, where appropriate, delete, anonymise, restrict, or otherwise address the information.

Parents and Legal Guardians

A parent or legal guardian who believes a child has provided personal information through our website may contact us. We may request reasonable information to verify the requester’s identity, authority, and relationship to the child before acting on the request.

Following verification, we will consider appropriate correction, deletion, access, restriction, or other action in accordance with applicable law.

Your Privacy Rights

Depending on your location and applicable law, you may have certain rights concerning personal information. These rights are not identical in every jurisdiction and may be subject to conditions, exceptions, or verification.

Rights That May Be Available

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of information where legally applicable.
• Request restriction of certain processing.
• Object to certain processing activities.
• Withdraw consent where processing is based on consent.
• Request a portable copy of certain information in a commonly used format.
• Opt out of promotional communications.
• Opt out of certain targeted-advertising, sale, or sharing activities where applicable.
• Request information about categories of information collected, used, or disclosed.
• Complain to an appropriate data-protection or regulatory authority where that right exists.

Submitting a Privacy Request

To submit a privacy request, contact us through the official details provided in the Contact Us section and clearly describe the right you wish to exercise.

We may request reasonable information to verify your identity, locate the relevant records, confirm the scope of your request, and protect information against unauthorised access or disclosure.

Authorised Representatives

Where permitted, an authorised representative may submit a request on your behalf. We may require evidence of the representative’s authority and may also contact you directly to verify the request.

Response Period

We will seek to respond within the period required by applicable law. Where permitted and reasonably necessary, that period may be extended, in which case we will provide an appropriate explanation where required.

Limitations and Exceptions

A request may be refused, limited, or deferred where permitted or required by law, including where information must be retained for:

• Order fulfilment or contractual obligations.
• Accounting, taxation, and legal compliance.
• Fraud prevention and security.
• Dispute resolution or legal claims.
• Protection of rights and safety.
• Freedom of expression or another protected interest.
• Internal uses reasonably aligned with customer expectations and applicable law.

We may also decline requests that are fraudulent, manifestly unfounded, excessive, repetitive, technically impossible, or submitted by an individual whose identity or authority cannot be reasonably verified.

Non-Discrimination

Where applicable law requires it, we will not unlawfully discriminate against you for exercising a privacy right.

Third-Party Services and External Links

Our website may contain payment gateways, applications, embedded content, social-media features, support tools, analytics technologies, review platforms, marketing services, or links operated by independent third parties.

Those services operate under their own terms, privacy policies, security measures, and data-handling practices. Zebaesh does not control independent processing carried out by such organisations.

We encourage you to review the relevant third-party privacy policy before providing information directly to an external service.

Website and Account Security

Zebaesh seeks to maintain commercially reasonable administrative, organisational, technical, and physical safeguards designed to protect personal information against accidental loss, unauthorised access, misuse, alteration, disclosure, or destruction.

Safeguards may include:

• Access controls and authentication procedures.
• Encryption where appropriate and available.
• Fraud monitoring and transaction verification.
• Software updates and security maintenance.
• Network, system, and provider protections.
• Security testing and incident-monitoring practices.
• Staff awareness and confidentiality measures.

No internet transmission, electronic-storage system, or security measure can guarantee complete security.

Protecting Your Account

You should use a strong and unique password, protect one-time verification codes, avoid sharing account credentials, sign out from shared devices, and notify us promptly if you suspect unauthorised access.

Data Breach and Incident Response

If Zebaesh becomes aware of an actual or suspected security incident involving personal information, we will seek to investigate it promptly, take reasonable containment and remediation measures, and coordinate with Shopify or other relevant providers where necessary.

We will fulfil notification or reporting obligations required by applicable law. Where appropriate, affected individuals may receive information about the nature of the incident and reasonable protective steps, subject to legal, security, and investigative considerations.

Accessibility and Inclusive Privacy

Zebaesh believes privacy information should be reasonably accessible and understandable.

If you experience difficulty accessing or understanding this Privacy Policy because of a disability, language barrier, or technical limitation, contact our customer-support team. We will make reasonable efforts to provide assistance or an accessible alternative where practicable.

Business Transfers and Corporate Changes

As Zebaesh grows, our ownership, corporate structure, commercial relationships, technologies, or operations may change.

If Zebaesh is involved in a merger, acquisition, investment, partnership, restructuring, financing, insolvency process, sale of assets, transfer of business, or similar transaction, personal information may be disclosed or transferred as part of that transaction where permitted by law.

Parties receiving information in connection with such a transaction may be required to maintain confidentiality and protect the information in accordance with applicable legal requirements.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our products, categories, services, technologies, website features, providers, legal obligations, security practices, or business operations.

Updated terms become effective upon publication unless a different effective date is stated.

The “Last Updated” date displayed at the top of the policy indicates its most recent revision.

Where required, we may provide additional notice of material changes or request renewed consent for a particular activity.

We encourage you to review this page periodically to remain informed about our privacy practices.

Contact Us

If you have questions, concerns, requests, or complaints concerning this Privacy Policy or our handling of personal information, contact us through the details below.

Privacy Contact

Business Name: Zebaesh

Email: admin@zebaesh.com

Telephone / WhatsApp: +92 370 5710351

Website: www.zebaesh.com

Our current postal or business address, where applicable, is available through our Contact Information page or official customer-support channels.

Reasons You May Contact Us

• Questions about this Privacy Policy.
• Access, correction, deletion, restriction, or objection requests.
• Marketing or cookie preferences.
• Account-security concerns.
• Children’s privacy inquiries.
• Questions about data sharing or international transfers.
• Complaints about how information has been handled.

We will make reasonable efforts to respond to legitimate privacy inquiries fairly, respectfully, and within the period required by applicable law.

Our Commitment to Privacy

Privacy is not simply a legal requirement for Zebaesh. It is an essential part of the relationship we seek to build with every customer.

We believe you should understand what information is collected, why it is used, how it is protected, with whom it may be shared, and what choices may be available.

As Zebaesh expands into additional product categories, technologies, services, and markets, we remain committed to responsible data handling, meaningful transparency, appropriate security, and respect for customer choices.

We sincerely appreciate the trust you place in Zebaesh.