Privacy Policy

Last updated: July 19, 2026

Zinati operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).

Our store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, process and disclose your personal information when you visit our store, use our Services, place an order, communicate with us or otherwise interact with Zinati.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read and understood the collection, use and disclosure practices described in this Privacy Policy.

1. Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you or another person.

Personal information does not include information that has been anonymised or properly de-identified so that it cannot reasonably be linked to an individual.

Depending on how you interact with our Services, where you live and what is permitted or required by applicable law, we may collect or process the following categories of personal information:

Contact information

This may include:

• your first and last name;
• telephone number;
• email address;
• billing address;
• shipping address;
• city;
• postal code;
• country.

Account information

This may include:

• username;
• password;
• security questions;
• account preferences;
• saved settings.

Order and transaction information

This may include:

• products you view;
• products added to your cart or wishlist;
• products purchased;
• order value;
• selected product variants;
• purchase history;
• returns;
• exchanges;
• cancelled orders;
• payment status;
• delivery status.

Payment information

Depending on the payment method used, this may include:

• form of payment;
• payment confirmation;
• payment status;
• transaction details;
• payment-card or financial-account information processed by Shopify or another authorised payment provider.

Zinati may not directly store complete payment-card details when payments are processed through a third-party payment provider.

Communications with us

This includes information you provide when you:

• contact customer service;
• communicate with us through email;
• contact us through WhatsApp;
• contact us through social media;
• submit a request or complaint;
• respond to an order-confirmation call or message.

Device and technical information

This may include:

• IP address;
• browser type;
• browser settings;
• device type;
• operating system;
• language settings;
• network connection;
• unique device identifiers;
• cookie identifiers;
• advertising identifiers.

Website-usage information

This may include information about:

• how you interact with our website;
• pages you visit;
• products you view;
• links you click;
• searches you perform;
• time spent on pages;
• referring websites or advertisements;
• the date and time of your activity;
• shopping-cart activity;
• checkout activity.

2. Sources of Personal Information

We may collect personal information from the following sources:

Directly from you

For example, when you:

• place an order;
• create an account;
• complete a form;
• contact us;
• subscribe to marketing communications;
• provide delivery information;
• communicate with customer service.

Automatically through our Services

We may collect information automatically when you visit or interact with our store through:

• cookies;
• pixels;
• tags;
• software development kits;
• server-side integrations;
• analytics technologies;
• similar tracking technologies.

From Shopify and our service providers

We may receive information from Shopify and from companies that provide services on our behalf, including:

• website hosting;
• payment processing;
• order management;
• customer support;
• delivery and fulfilment;
• analytics;
• advertising;
• fraud prevention;
• cloud storage.

From advertising and marketing partners

We may receive information from marketing platforms and social-media services, including:

• Meta;
• Facebook;
• Instagram;
• TikTok.

From other third parties

We may receive information from delivery providers, business partners, fraud-prevention providers or other lawful sources.

3. How We Use Your Personal Information

We may use personal information for the following purposes.

Providing and improving the Services

We may use your information to:

• process and confirm orders;
• provide products and Services;
• process payments;
• arrange shipping;
• contact you regarding delivery;
• manage returns and exchanges;
• maintain your account;
• remember your preferences;
• provide customer support;
• recommend products;
• improve our website;
• personalise your shopping experience.

Order confirmation and delivery

We may use your name, telephone number, address and order information to:

• confirm your order;
• verify delivery information;
• contact you by telephone or WhatsApp;
• send your order to a delivery provider;
• provide delivery updates;
• resolve delivery problems;
• handle returned or refused parcels.

Marketing and advertising

We may use personal information for marketing and promotional purposes, including to:

• send promotional messages where permitted;
• display advertisements for Zinati products;
• measure advertising performance;
• personalise advertisements;
• remind you about products you viewed;
• advertise products placed in your cart;
• create advertising audiences;
• improve campaign performance;
• understand which advertisements resulted in visits, checkouts or purchases.

Security and fraud prevention

We may use personal information to:

• authenticate accounts;
• protect our website;
• detect suspicious activity;
• prevent fraud;
• investigate misuse;
• protect our customers;
• protect Zinati’s legal and commercial interests.

Communicating with you

We may use your information to:

• respond to your questions;
• confirm your order;
• provide customer support;
• send important service messages;
• manage our business relationship with you.

Legal and regulatory purposes

We may use or retain personal information to:

• comply with applicable laws;
• respond to lawful government requests;
• enforce our policies;
• resolve disputes;
• establish or defend legal claims;
• comply with accounting, tax or record-keeping obligations.

4. Meta, Facebook and Instagram Data Use

We use advertising and analytics technologies provided by Meta Platforms and its affiliates, including Facebook and Instagram.

These technologies may include:

• Meta Pixel;
• Meta Conversions API;
• Advanced Matching;
• cookies;
• server-side event sharing;
• Shopify’s Facebook and Instagram integration;
• other Meta Business Tools.

Meta describes its Business Tools as technologies that enable businesses to share data, measure products and services, and reach people who may be interested in their offerings. These tools include the Meta Pixel and Conversions API.

Depending on your activity and our settings, Meta may receive information about events such as:

• page views;
• product views;
• website searches;
• products added to cart;
• checkout initiation;
• purchases;
• order value;
• currency;
• product identifiers;
• date and time of activity;
• browser and device information;
• IP address;
• cookie identifiers;
• advertising identifiers;
• referring advertisements.

Where permitted, certain customer information may also be shared for matching purposes, including:

• email address;
• telephone number;
• first name;
• last name;
• city;
• postal code;
• country;
• customer ID;
• order ID.

Some identifying information may be converted into a hashed format before being transmitted. Hashing helps protect information during transmission but does not necessarily make the information anonymous.

We may use Meta technologies to:

• measure advertising conversions;
• attribute purchases to advertisements;
• optimise advertisement delivery;
• understand campaign performance;
• create custom audiences;
• create retargeting audiences;
• reach people with interests similar to our existing customers;
• prevent fraudulent or invalid advertising activity.

Shopify provides Standard, Enhanced and Maximum customer-data-sharing levels for its Meta integration. The information shared depends on the selected level and the available Shopify and Meta technologies.

Meta processes information under its own privacy policy, business-tool terms and advertising terms.

5. TikTok Data Use

We use advertising, measurement and analytics technologies provided by TikTok and its affiliates.

These technologies may include:

• TikTok Pixel;
• TikTok Events API;
• Advanced Matching;
• first-party cookies;
• third-party cookies;
• Shopify’s TikTok integration;
• browser-based and server-side event sharing.

TikTok allows businesses to connect website data through TikTok Pixel, Events API or both. These tools can be used for campaign measurement, advertising optimisation, targeting and audience creation.

Depending on your activity and our configuration, TikTok may receive information about events such as:

• page views;
• product views;
• searches;
• add-to-cart activity;
• checkout activity;
• purchases;
• order value;
• currency;
• product names;
• product identifiers;
• quantity;
• date and time of activity;
• browser information;
• device information;
• IP address;
• cookie identifiers;
• advertising identifiers;
• TikTok click identifiers.

Where permitted, certain customer information may also be transmitted for matching and measurement purposes, including:

• email address;
• telephone number;
• first name;
• last name;
• city;
• postal code;
• country;
• customer ID;
• order ID.

Some identifying information may be hashed before it is shared.

We may use TikTok technologies to:

• measure conversions;
• calculate advertising return on investment;
• attribute website actions to advertisements;
• improve campaign optimisation;
• create custom audiences;
• create retargeting audiences;
• show more relevant advertisements;
• analyse customer journeys;
• detect suspicious or invalid activity.

TikTok states that cookies used with its Pixel can help match website events with people who interact with content on TikTok and can support measurement, optimisation and targeting.

TikTok processes information according to its own privacy policy, advertising terms and business-product terms.

6. Cookies and Similar Technologies

We and our partners may use cookies and similar technologies to operate, improve, secure and advertise our Services.

These technologies may include:

• cookies;
• pixels;
• browser storage;
• tags;
• server-side events;
• software development kits;
• device identifiers;
• advertising identifiers.

Essential cookies

Essential cookies are required for functions such as:

• keeping the website secure;
• maintaining your shopping cart;
• processing checkout;
• remembering privacy preferences;
• preventing fraud;
• operating your account.

Analytics cookies

Analytics technologies help us understand:

• how customers use the store;
• which pages are visited;
• which products are popular;
• whether technical problems occur;
• how our store can be improved.

Advertising cookies

Advertising cookies and similar technologies may be used to:

• measure advertisements;
• personalise advertising;
• attribute purchases;
• create audiences;
• retarget visitors;
• limit repeated advertising;
• improve campaign performance.

Where required by applicable law, non-essential cookies and advertising technologies will be activated only after the required consent has been obtained.

Shopify provides customer-privacy tools that can allow visitors to manage cookie consent and opt out of certain advertising-data uses.

You may manage your preferences through the cookie banner or privacy-preference tool available on our store.

Rejecting non-essential cookies will not prevent you from browsing or purchasing products, but some personalisation or measurement features may not work as intended.

7. How We Disclose Personal Information

We may disclose personal information in the following circumstances.

Shopify

Our Services are hosted and supported by Shopify. Information you provide through the store may be processed by Shopify in order to operate, secure, improve and provide the Services.

Service providers

We may disclose information to companies that perform services for us, including:

• website hosting;
• order processing;
• payment processing;
• delivery;
• logistics;
• customer support;
• data analytics;
• fraud prevention;
• cloud storage;
• technical support.

Advertising and marketing partners

We may share information with advertising and marketing partners, including:

• Meta;
• Facebook;
• Instagram;
• TikTok.

This may occur through:

• Meta Pixel;
• Meta Conversions API;
• TikTok Pixel;
• TikTok Events API;
• Advanced Matching;
• cookies;
• server-side events;
• Shopify integrations.

The information may be used for:

• advertising measurement;
• conversion attribution;
• campaign optimisation;
• audience creation;
• retargeting;
• personalised advertising;
• fraud prevention.

Delivery providers

We may share your name, telephone number, address, city and order information with delivery providers where necessary to deliver your order.

When you request or consent to disclosure

We may disclose information when you request it, direct us to do so or consent to a third-party integration.

Business transfers

Information may be disclosed in connection with a:

• merger;
• acquisition;
• financing;
• sale of assets;
• restructuring;
• insolvency;
• transfer of business ownership.

Legal obligations

We may disclose information where necessary to:

• comply with applicable law;
• respond to valid legal processes;
• protect our rights;
• enforce our terms;
• investigate fraud or misconduct;
• protect customers or the public.

8. Relationship With Shopify

Our store is hosted by Shopify.

Shopify collects and processes personal information about your access to and use of our Services in order to provide, secure and improve Shopify’s services and our store.

Information submitted through our store may be transmitted to Shopify and other service providers, including providers located in countries other than your country of residence.

We may use Shopify features that combine information about customer interactions with our store, Shopify and other participating merchants to improve commerce services, analytics or advertising features.

When Shopify independently determines how and why certain information is processed, Shopify may be responsible for responding to privacy-rights requests concerning that processing.

More information about Shopify’s data practices and customer privacy rights is available through Shopify’s Consumer Privacy Policy and Privacy Portal.

9. Personalised and Targeted Advertising

Depending on your location and applicable law, some use or disclosure of personal information for targeted advertising may be considered a “sale,” “sharing” or use for cross-context behavioural advertising.

We may use your activity on our store to:

• display relevant advertisements;
• retarget you after visiting our store;
• create custom audiences;
• measure whether advertisements resulted in purchases;
• find potential customers with similar interests.

You may have the right to object to or opt out of certain targeted-advertising uses.

Shopify notes that merchants using advertising and audience features may need to allow customers to opt out of the sale or sharing of personal information for targeted advertising.

10. Your Privacy Choices

Depending on where you live, you may have the following choices:

• reject non-essential cookies;
• withdraw cookie consent;
• opt out of targeted advertising;
• unsubscribe from promotional emails;
• adjust advertising preferences in Facebook, Instagram or TikTok;
• use browser or device privacy controls;
• contact us regarding your personal information.

Your preferences may need to be set separately on each browser or device.

You may also be able to use browser-based signals, such as Global Privacy Control, where recognised and supported.

11. Third-Party Websites and Links

Our Services may contain links to websites, social-media platforms or services operated by third parties.

We do not control and are not responsible for the privacy, security or content practices of those third parties.

When you visit another website or platform, you should review its privacy policy and terms.

Information posted on public or semi-public social-media services may be visible to other users and may be used by those platforms according to their own policies.

12. Children’s Data

Our Services are not intended for children.

We do not knowingly collect personal information from children under the applicable age of majority.

A parent or legal guardian who believes that a child has provided personal information to us may contact us to request its deletion.

We do not knowingly sell or share the personal information of individuals under 16 years of age for targeted advertising.

13. Security

We take reasonable administrative, technical and organisational measures designed to protect personal information.

However, no security system or transmission method is completely secure, and we cannot guarantee absolute security.

Please avoid sending sensitive or confidential information through unsecured communication channels.

You are responsible for protecting your account credentials and should not share your password with others.

14. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The retention period may depend on:

• whether you have an account;
• whether an order remains active;
• customer-service needs;
• delivery and return processing;
• fraud prevention;
• contractual obligations;
• tax and accounting requirements;
• legal obligations;
• dispute resolution.

When information is no longer required, we may delete, anonymise or securely dispose of it.

15. Your Rights

Depending on where you live and applicable law, you may have some or all of the following rights.

Right to access

You may request information about the personal information we hold about you.

Right to deletion

You may request deletion of personal information, subject to legal exceptions.

Right to correction

You may request correction of inaccurate or incomplete information.

Right to portability

You may request a copy of certain personal information in a portable format.

Right to object or restrict processing

You may have the right to object to or restrict certain processing activities.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing that occurred before consent was withdrawn.

Right to opt out of targeted advertising

You may have the right to opt out of the sale, sharing or use of personal information for targeted advertising.

Right to complain

You may have the right to lodge a complaint with the appropriate data-protection authority.

These rights are not absolute and may be limited by applicable law.

We may need to verify your identity before completing a request.

16. Marketing Communications

We may send promotional emails, messages or other communications where permitted.

You may unsubscribe from promotional emails by using the unsubscribe link included in the message.

You may ask us to stop promotional WhatsApp or SMS communications by contacting us or replying with an opt-out request.

Even after you opt out of promotional communications, we may still send non-promotional messages concerning:

• your order;
• payment;
• delivery;
• account;
• returns;
• customer-service requests;
• security.

17. International Transfers

Your personal information may be transferred, stored or processed outside Morocco.

Shopify, Meta, TikTok and other providers may operate servers, companies or service providers in several countries.

Where required, transfers may be made using recognised legal mechanisms, contractual protections or other safeguards required by applicable law.

18. Complaints

For complaints concerning how Zinati handles personal information, please contact us using the details below.

We will review and respond to complaints within a reasonable period.

Depending on your location, you may also have the right to contact or lodge a complaint with your local data-protection authority.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our Services;
• changes to Shopify features;
• changes to Meta or TikTok integrations;
• changes to advertising practices;
• legal or regulatory requirements;
• operational or security changes.

The updated version will be published on this page with a revised “Last updated” date.

20. Contact

For questions about this Privacy Policy, our privacy practices or your personal information rights, contact us at:

Zinati

Telephone: +212 7 71 79 29 72
Email: zinatishop.ma@gmail.com
Address: Tetouan, 93000 Tetouan, Morocco

This version includes the contact information from your existing policy.

This template should match your actual Shopify, Meta and TikTok settings. It is not a substitute for advice from a qualified Moroccan privacy-law professional.