Privacy policy
This Privacy Policy explains how Zen Gift Cards ("we", "us") collects and uses your personal data when you use zengiftcards.online. We follow the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). We only collect what we need to deliver your gift cards safely.
1. Who is responsible for your data
Zen Gift Cards, Dubai, United Arab Emirates, is the controller of your personal data. For any privacy question or request, email support@zengiftcards.online.
2. What we collect
- Order details: your email address, the recipient's email address (if you send a gift), the products, amounts and order number.
- Payment information: card and Apple Pay payments are handled entirely by Stripe. We receive only limited details such as the payment status, card brand, the last four digits and the country of issue. We never see or store your full card number or security code. For USDT payments, we receive the payment amount, network, sending wallet address and transaction hash from NOWPayments.
- Verification information: if we need to verify an order, the documents or details you send us.
- Support messages: what you send us by email or WhatsApp.
- Technical data: IP address, browser and device type, and timestamps, which our hosting and payment providers use for security and fraud prevention.
3. How and why we use it
| Purpose | Legal basis |
|---|---|
| Processing your payment and delivering your Codes by email | Performing our contract with you |
| Preventing fraud, chargebacks and misuse of payment methods | Our legitimate interests and legal obligations |
| Customer support and handling refunds | Performing our contract with you |
| Keeping accounting and tax records; anti-money-laundering checks | Legal obligations |
| Sending marketing emails (only if you opt in) | Your consent, which you can withdraw at any time |
We do not sell your personal data, and we do not use it for automated decisions that have legal effects on you without human review.
5. International transfers
Some of our providers process data outside the UAE (for example in the European Union or the United States). When this happens, we rely on the safeguards allowed by the PDPL, such as contractual protections, to keep your data secure.
6. How long we keep it
- Order and payment records: for as long as required by UAE commercial and tax law, generally 5 years.
- Verification documents: up to 5 years where needed for anti-fraud and anti-money-laundering purposes, otherwise deleted once the check is complete.
- Support messages: up to 2 years.
8. Security
The Website uses HTTPS encryption. Payments are processed by PCI-DSS certified providers, and access to order data is limited to the people who need it. No online system is completely secure, so please also keep your email account and your Codes safe.
9. Your rights
Under the PDPL you have the right to:
- access the personal data we hold about you and receive a copy;
- ask us to correct inaccurate data;
- ask us to delete your data, unless we must keep it by law;
- restrict or object to certain processing;
- withdraw consent to marketing at any time;
- complain to the UAE Data Office.
To make a request, email support@zengiftcards.online from the address you used for your order. We will reply within 30 days.
10. Children
The Website is not intended for anyone under 18, and we do not knowingly collect data from children.
11. Changes to this policy
We will post any changes on this page and update the date at the top. If a change significantly affects how we use your data, we will tell you by email where appropriate.