Privacy policy

This Privacy Policy explains how hazari.shop collects, uses, shares, stores and otherwise processes personal information when individuals:

• Visit hazari.shop;
• Browse products;
• Create or use an account;
• Place an order;
• Make a payment;
• Request delivery;
• Subscribe to communications;
• Contact customer service;
• Participate in a promotion; or
• Otherwise interact with our services.

For purposes of processing carried out by hazari.shop, hazari.shop acts as the data controller where it determines the purposes and means of processing personal data.

Contact:

Email: info@hazari.shop

Shopify notes that merchants are generally controllers of customer information, while Shopify may act as a processor for certain merchant-directed processing and may act separately as a controller in specific services described in Shopify's applicable terms.

Personal Information We May Collect

Depending on your interaction with hazari.shop, we may process categories of personal information including:

Identity Information

This may include:

• Name;
• Customer-account identifiers; and
• Other identifiers reasonably necessary to provide services.

Contact Information

This may include:

• Email address;
• Telephone information where provided;
• Billing information; and
• Shipping and delivery information.

Order Information

This may include:

• Products purchased;
• Product variations;
• Order value;
• Order number;
• Discounts;
• Returns;
• Refunds;
• Cancellations; and
• Order history.

Payment Information

Payments may be processed through Shopify, payment processors, card networks, banks or other payment service providers.

hazari.shop may receive information concerning payment status and transaction details.

Complete payment credentials may be processed directly by payment providers rather than stored by hazari.shop.

Technical Information

Depending on website configuration, we may process information such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Device identifiers;
• Website activity;
• Referral information;
• Approximate location derived from technical data;
• Session information;
• Security logs; and
• Cookie or similar technology identifiers.

Communications

When you contact us, we may process:

• Your email address;
• Your message;
• Attachments;
• Order information;
• Complaint information;
• Customer-service records; and
• Our responses.

Sources of Personal Information

We may obtain personal information:

• Directly from you;
• Automatically through use of the website;
• From Shopify;
• From payment providers;
• From fulfilment providers;
• From delivery and logistics providers;
• From fraud-prevention providers;
• From analytics providers;
• From marketing providers where permitted;
• From customer-service providers; and
• From other lawful sources.

Purposes of Processing

We may process personal information for purposes including:

Order Processing

To:

• Receive orders;
• Confirm purchases;
• Manage inventory;
• Process transactions;
• Arrange fulfilment;
• Arrange delivery;
• Provide tracking;
• Process returns; and
• Issue refunds.

Customer Service

To:

• Respond to questions;
• Investigate delivery issues;
• Process return requests;
• Address complaints;
• Resolve product problems;
• Provide account assistance; and
• Maintain customer-service records.

Website Operation

To:

• Operate hazari.shop;
• Maintain website functionality;
• Remember appropriate settings;
• Diagnose technical problems;
• Secure accounts; and
• Maintain platform stability.

Fraud Prevention and Security

We may process appropriate information to:

• Detect fraudulent activity;
• Protect transactions;
• Prevent account abuse;
• Investigate suspicious behaviour;
• Protect customers;
• Protect hazari.shop; and
• Maintain system security.

Legal Compliance

We may process information where necessary to:

• Comply with legal obligations;
• Maintain legally required transaction records;
• Respond to lawful requests;
• Establish or defend legal claims;
• Protect legal rights; and
• Meet regulatory requirements.

Marketing

Where legally permitted, we may use information to communicate information relating to products, offers or services.

Where consent is legally required, marketing communications will be based on valid consent.

Customers may withdraw marketing consent or unsubscribe using the method provided in the relevant communication or by contacting:

info@hazari.shop

Legal Bases for Processing

Where GDPR applies, the legal basis for processing depends on the relevant activity.

We may rely on:

Performance of a Contract

Processing may be necessary to:

• Accept an order;
• Process payment;
• Fulfil a purchase;
• Deliver goods;
• Handle returns; and
• Provide requested customer service.

Legal Obligation

We may process information where required to comply with applicable:

• Tax;
• Accounting;
• Consumer;
• Regulatory;
• Fraud-prevention; or
• Other legal obligations.

Legitimate Interests

Where permitted, we may process information for legitimate business interests such as:

• Protecting website security;
• Preventing fraud;
• Improving operational processes;
• Maintaining business records;
• Defending legal claims; and
• Understanding service performance.

Where legitimate interests are relied upon, we consider the impact on the rights and interests of affected individuals.

Consent

We may rely upon consent where legally required, including for certain:

• Marketing activities;
• Advertising technologies;
• Profiling technologies; and
• Non-essential cookies.

Consent may be withdrawn in accordance with applicable law.

Shopify

hazari.shop may be hosted or operated using Shopify's ecommerce infrastructure.

Shopify may process information required to provide services such as:

• Hosting;
• Checkout;
• Order processing;
• Security;
• Analytics;
• Payment functionality; and
• Ecommerce infrastructure.

Use of Shopify does not by itself guarantee GDPR compliance; merchants remain responsible for ensuring their own practices comply with applicable requirements.

Service Providers

We may share personal information with appropriate service providers where reasonably necessary to operate hazari.shop.

Recipients may include:

• Shopify;
• Payment processors;
• Banks and card networks;
• Fraud-prevention providers;
• Fulfilment providers;
• Warehousing providers;
• Delivery carriers;
• Logistics providers;
• Customer-service systems;
• Email service providers;
• Cloud hosting providers;
• Analytics providers;
• Advertising providers where permitted;
• Professional advisers; and
• Information-security providers.

Service providers should only receive information reasonably necessary for the applicable service and are subject to applicable legal requirements.

International Transfers

Ecommerce operations may involve service providers located in different countries.

Where personal information subject to GDPR is transferred outside the European Economic Area or another relevant protected jurisdiction, appropriate transfer mechanisms will be used where legally required.

These may include:

• An adequacy decision;
• Standard contractual clauses;
• Other legally recognised safeguards; or
• Another lawful transfer mechanism.

Cookies and Similar Technologies

hazari.shop may use cookies and similar technologies for purposes such as:

• Essential website functionality;
• Cart functionality;
• Checkout;
• Security;
• Account functionality;
• Preferences;
• Analytics;
• Advertising; and
• Performance measurement.

Necessary Cookies

Certain cookies may be necessary for essential website functions and may not require consent where applicable law permits their use without consent.

Analytics, Advertising and Profiling Technologies

Non-essential cookies or tracking technologies requiring consent will not be intentionally activated before obtaining the legally required consent.

The Italian Data Protection Authority states that by default, no cookies or tracking technologies other than technical ones should be placed on a user's device on first access, and consent for profiling or other non-technical tracking must be based on an affirmative user action.

Users should be given appropriate controls to accept, refuse or manage non-essential tracking choices.

Changing Cookie Preferences

Where hazari.shop uses consent-based cookies, customers may manage applicable preferences through the cookie or privacy controls made available on the website.

Withdrawal of consent should be possible as easily as reasonably required by applicable law.

The Italian Data Protection Authority also requires mechanisms allowing users to modify previously expressed tracking preferences.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.

Retention periods may depend on:

• The nature of the information;
• The purpose of processing;
• Contractual requirements;
• Tax obligations;
• Accounting obligations;
• Consumer-law requirements;
• Fraud-prevention requirements;
• Legal limitation periods;
• Dispute resolution; and
• Security considerations.

When information is no longer reasonably required, it may be deleted, anonymised or otherwise handled in accordance with applicable law.

Security

We use reasonable administrative, organisational and technical measures designed to protect personal information against risks including:

• Unauthorised access;
• Accidental disclosure;
• Loss;
• Alteration;
• Destruction; and
• Misuse.

No internet transmission or storage system can be guaranteed to be completely secure.

Customers are responsible for safeguarding passwords and account credentials under their control.

GDPR Data Subject Rights

Subject to applicable law and relevant exceptions, individuals may have rights including:

• Right of access – requesting information about personal data processed about you;
• Right to rectification – requesting correction of inaccurate personal data;
• Right to erasure – requesting deletion in qualifying circumstances;
• Right to restriction – requesting limitation of processing in qualifying circumstances;
• Right to data portability – receiving certain information in a structured and commonly used format where applicable;
• Right to object – objecting to certain processing based on legitimate interests;
• Right to withdraw consent – withdrawing previously provided consent where processing is consent-based; and
• Rights relating to qualifying automated decision-making.

Not every right applies in every circumstance.

Exercising Privacy Rights

To exercise a privacy right, contact:

info@hazari.shop

We may need to verify your identity before completing a request in order to protect personal information from unauthorised disclosure.

We will handle valid requests in accordance with applicable data-protection law.

Complaints

If you have concerns about how hazari.shop handles your personal information, please contact:

info@hazari.shop

Individuals may also have the right to lodge a complaint with an applicable data-protection supervisory authority, including the Italian Data Protection Authority where it has jurisdiction.

Children's Privacy

hazari.shop is intended for customers who are legally capable of entering into applicable transactions or acting with the legally required involvement of a parent or guardian.

We do not intentionally seek to collect children's personal information in a manner prohibited by applicable law.

If you believe personal information relating to a child has been collected improperly, contact:

info@hazari.shop

Business Transactions

If hazari.shop or its business operations are involved in a lawful merger, acquisition, restructuring, financing, sale or transfer of assets, personal information may be transferred as part of that transaction where legally permitted.

Any such processing will remain subject to applicable data-protection requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our services;
• Technology;
• Business operations;
• Service providers;
• Legal requirements; or
• Privacy practices.

The updated version will be published on hazari.shop with an appropriate revised date.

Privacy Contact

For questions, requests or concerns relating to this Privacy Policy:

hazari.shop
Email: info@hazari.shop