This Privacy Policy explains how Shopyzee handles personal information when people visit our website, open a merchant account, contact our team, or use our commerce services. Shopyzee is operated under the name شركة جيندو للبرمجة والتجارة الإلكترونية. The precise contracting entity and registered address must be completed before this draft takes effect. References to Shopyzee, we, us, and our refer to that identified operator. This policy covers Shopyzee’s platform activities. A merchant’s own storefront privacy notice governs the merchant’s independent decisions about its customers. Please read this policy together with our Terms and Conditions and any service-specific notice presented when information is collected.

For account administration, subscription billing, website security, and our own support communications, Shopyzee determines why and how relevant personal information is used, subject to applicable law. When a merchant uses our tools to handle its customer records, orders, or store content, the merchant generally determines the purposes of that processing. Shopyzee handles those records to provide the requested service and on the merchant’s documented instructions, except where an independent legal duty applies. Any required data-processing agreement must be completed before regulated processing begins. If you purchased from a Shopyzee-powered store, contact that merchant first about your order, returns, or access to information held by the store. We can help route a request where appropriate; hosting a store does not make Shopyzee the seller of its products.

Depending on the services used, information may include your name, business name, email, telephone number, billing or business address, account preferences, and information needed to administer your subscription. Where verification is legally required, we may request relevant business or identity documents through an appropriate channel. Store information may include customer contact details, delivery addresses, order contents, transaction references, product records, and communications you choose to place on the platform. Support requests may contain messages, attachments, and diagnostic information you voluntarily provide. Do not send passwords, unnecessary identity documents, or complete card details in support messages.

Our services may generate information such as IP addresses, browser and device details, timestamps, visited pages, account activity, errors, and security events. The information collected depends on the functions enabled and your interaction with them. Payment providers may return payment status, limited transaction identifiers, or verification results. Full payment credentials should be entered only through the authorized payment flow. The exact payment-data handling depends on the provider and integration selected.

We use relevant information to create and administer accounts; provide storefront and order-management services; process subscription transactions; answer support requests; investigate faults; protect accounts; and meet applicable recordkeeping obligations. We may use service information to understand reliability and improve functionality, using aggregated or de-identified information where practical. Marketing communications require an appropriate legal basis and must offer a way to opt out. We do not treat acceptance of a service contract as unlimited permission for unrelated marketing.

Where data-protection law requires a legal ground, processing may be necessary to perform a contract, comply with a legal duty, pursue a legitimate interest that is not overridden by individual rights, or act on valid consent. The relevant ground depends on the activity and jurisdiction. When we rely on consent, you may withdraw it for future processing without affecting earlier lawful processing. If information is required to provide a service or satisfy a legal duty, choosing not to provide it may limit the available service. Mandatory protections in your location continue to apply.

Essential cookies and similar technologies may support authentication, session continuity, security, and requested functionality. Other technologies may support analytics or marketing where enabled and lawfully permitted. Where consent is required for optional technologies, they must remain inactive until the appropriate choice is recorded. You may manage available choices through the site’s cookie controls and your browser settings. Blocking essential cookies may affect sign-in or other requested functions. A verified cookie inventory, provider list, purposes, and durations must be completed before publication.

Information may be disclosed to service providers supporting hosting, payments, communications, security, analytics, or support, only as relevant to the service and subject to appropriate obligations. A merchant’s selected apps, payment gateways, and logistics providers may receive information needed to carry out the merchant’s instructions. We may disclose information where legally required, to respond to valid official requests, protect lawful rights, investigate misuse, or address a genuine safety or security issue. If a corporate transaction involves personal information, appropriate confidentiality and applicable notice requirements must be considered. This policy does not grant merchants or integrations permission to reuse customer data for unrelated purposes. Any sale, targeted-advertising disclosure, or other regulated sharing practice would require a specific assessment and the notices and choices required by applicable law.

Shopyzee serves businesses across markets. Depending on the actual operating arrangements and providers used, information may be accessed or processed outside the country where it was collected. The owner has identified the United States, Egypt, the United Arab Emirates, and Oman as company-registration locations for verification; this does not establish that data is hosted in any of those countries. Before a restricted international transfer, the responsible party must identify the destination, assess applicable restrictions, and establish a lawful transfer mechanism and safeguards where required. We do not promise local data residency or a particular hosting location unless it is expressly documented in the relevant service agreement.

Information should be retained only for the period reasonably required for its stated purpose, an applicable legal requirement, or the establishment, exercise, or defense of legal claims. Relevant factors include the account relationship, recordkeeping duties, disputes, fraud prevention, and the nature of the information. Following account closure or a valid deletion request, information should be deleted or anonymized when those grounds no longer justify retention. Backup copies may remain within documented backup cycles and must not be restored for unrelated active use. Exact operational retention and backup schedules must be confirmed before publication.

Appropriate technical and organizational safeguards should be used in proportion to the information and risks involved. Access should be limited to authorized purposes, and suspected incidents should be investigated and addressed. No online service can promise absolute security. You are responsible for protecting your credentials, managing staff access, and reporting suspected unauthorized activity promptly. Where a personal-data incident triggers a notification duty, affected parties and authorities must be notified in the manner and time required by the applicable law and contractual commitments.

Depending on your location and the circumstances, you may have rights to request access, correction, deletion, restriction, a portable copy, or objection to certain processing. You may also withdraw consent or object to direct marketing where the law provides those rights. Send requests to support@shopyzee.com and describe your relationship with Shopyzee and the request. We may seek proportionate information to verify your identity or authority. We must respond within applicable legal time limits and explain any lawful restriction. You may also complain to the competent supervisory authority. For information controlled by a merchant, send the request to that merchant. We will assist the merchant as required by the applicable processing arrangement. Exercising a privacy right does not automatically resolve an outstanding order or billing dispute.

External websites, apps, gateways, and carriers have their own terms and privacy notices. Review those notices before enabling an integration or providing information to a third party. Merchants must select lawful configurations and ensure appropriate agreements and permissions for their stores. Merchants must publish accurate customer notices, collect only necessary information, establish lawful grounds, respond to customer requests, and avoid placing sensitive information on the platform without a suitable legal and technical arrangement.

Shopyzee’s merchant-account services are intended for persons who can legally enter a business agreement. They are not directed to children. Store operators remain responsible for age-related rules that apply to their products, customers, and markets. Do not intentionally submit children’s information or special-category personal information unless the service expressly supports that processing and all required permissions and safeguards are in place. Contact us if you believe such information has been submitted improperly.

When processing practices materially change, this policy should be updated and any required notice or consent obtained. The effective date and previous versions should be recorded. Changes do not remove rights provided by mandatory law. For privacy questions or requests, contact support@shopyzee.com. Operator: شركة جيندو للبرمجة والتجارة الإلكترونية. Registered address and exact contracting entity: awaiting verified company details. Draft prepared: 21 October 2026. Effective date: subject to approval and completion of the outstanding details.