Privacy policy

Privacy Policy

Last Updated: February 2026

1. INTRODUCTION AND SCOPE

Verozyro (doing business as “VeroZyro”), a limited liability company organized and existing under the laws of Germany (hereinafter referred to as “VeroZyro”, “we”, “us”, or “our”), operates the website www.verozyro.com (the “Site”).

VeroZyro is dedicated to protecting the confidentiality and privacy of information entrusted to us. We comply with applicable data privacy laws and regulations, including but not limited to the Kingdom of Saudi Arabia (KSA) Personal Data Protection Law (PDPL), the United Arab Emirates (UAE) Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data, and internationally recognized standards such as the General Data Protection Regulation (GDPR) for our global customers.

This Privacy Policy describes in detail how we collect, use, store, share, and protect your Personal Information when you visit our Site, purchase our products, or interact with us. By accessing or using the Site, you agree to the terms of this Privacy Policy.

2. INFORMATION WE COLLECT

Personal Information is any data that can be used to identify an individual, either directly or indirectly. We collect several types of information from and about users of our Site, including:

A. Information You Provide to Us Directly

We collect Personal Information that you voluntarily provide when you perform certain actions on our Site:

Identity Data: Includes first name, last name, username or similar identifier, title, date of birth, and gender.
Contact Data: Includes billing address, delivery address (including Building Number, Street Name, District, City, Zip Code, and National Address for KSA residents), email address, and mobile telephone numbers (essential for courier coordination in the GCC region).
Financial Data: Includes payment card details (processed via secure third-party payment gateways such as Stripe, Checkout.com, or local providers). Note: We do not store your full credit card number or CVV code on our servers.
Account Data: Includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.

B. Information We Collect Automatically

As you navigate through and interact with our Site, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns:

Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Site.
Usage Data: Information about how you use our Site, products, and services, including page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs).
Location Data: We may collect geolocation data to display prices in your local currency (SAR, AED, USD, etc.) and to calculate accurate shipping costs.

3. HOW WE USE YOUR PERSONAL INFORMATION

We will only use your Personal Information when the law allows us to. Most commonly, we will use your Personal Information in the following circumstances:

Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., processing your order, arranging for shipping via logistics partners like SMSA, Aramex, or DHL, and processing payments).
Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes fraud prevention, business analysis, and improving our Site.
Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., keeping records for tax authorities in KSA or UAE).
Consent: Generally, we do not rely on consent as a legal basis for processing your Personal Information other than in relation to sending third-party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time.

4. DISCLOSURE OF YOUR PERSONAL INFORMATION

We may have to share your Personal Information with the parties set out below for the purposes set out in Section 3:

Internal Parties: Employees and affiliates of VeroZyro who require access to data for operational purposes (e.g., customer support teams).
External Third-Party Service Providers:
- E-commerce Platform: Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products to you.
- Logistics & Fulfillment Partners: We share your Name, Address, and Phone Number with shipping companies (including but not limited to SMSA Express, Aramex, DHL, FedEx) to facilitate the delivery of your order.
- Payment Processors: Secure payment gateways (e.g., Stripe, PayPal) and "Buy Now, Pay Later" providers (e.g., Tabby, Tamara) to process your financial transactions.
- Marketing & Analytics Partners: Companies such as Google (Analytics), Meta (Facebook/Instagram), TikTok, and Snapchat, which assist us in analyzing Site traffic and delivering targeted advertisements.
Legal Authorities: We may disclose your Personal Information to law enforcement, government agencies, or authorized third parties if required by law, court order, or governmental regulation in the Kingdom of Saudi Arabia, United Arab Emirates, or other jurisdictions where we operate.
Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your Personal Information may be transferred as part of the transaction.

5. INTERNATIONAL DATA TRANSFERS

VeroZyro operates globally. Consequently, your Personal Information may be transferred to, stored, and processed in countries other than the country in which you reside.

For Residents of KSA and UAE: Please be aware that our Site is hosted on Shopify, which utilizes servers located in Canada and the United States. By providing your information and completing a transaction, you explicitly acknowledge and consent to the transfer of your data across international borders.
Safeguards: We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. We rely on adequacy decisions (for Canada) and Standard Contractual Clauses (SCCs) to ensure the protection of your data during international transfers.

6. DATA SECURITY

We have implemented appropriate technical and organizational security measures to prevent your Personal Information from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.

Encryption: All payment information is encrypted using Secure Socket Layer (SSL) technology.
Access Control: We limit access to your Personal Information to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.

However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

7. DATA RETENTION

We will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, and the applicable legal requirements (e.g., retention of transaction records for VAT purposes in KSA/UAE).

8. YOUR LEGAL RIGHTS

Under certain circumstances and depending on your jurisdiction (specifically under KSA PDPL, UAE Data Protection Law, and GDPR), you have rights under data protection laws in relation to your Personal Information:

Right of Access: You have the right to request a copy of the Personal Information we hold about you.
Right to Correction: You have the right to request correction of the Personal Information that we hold about you if it is inaccurate or incomplete.
Right to Erasure (Right to be Forgotten): You have the right to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it.
Right to Restriction of Processing: You have the right to ask us to suspend the processing of your Personal Information in certain scenarios.
Right to Withdraw Consent: Where we are relying on consent to process your Personal Information (e.g., for marketing), you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact our Data Privacy Officer at [ ]. We try to respond to all legitimate requests within 30 days.

9. COOKIES AND TRACKING TECHNOLOGIES

Our Site uses cookies to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site and also allows us to improve our Site.

Strictly Necessary Cookies: Required for the operation of our Site (e.g., shopping cart functionality).
Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our Site (e.g., Google Analytics).
Targeting/Advertising Cookies: Record your visit to our Site, the pages you have visited, and the links you have followed. We use this information to make our Site and the advertising displayed on it more relevant to your interests (e.g., Facebook Pixel, TikTok Pixel).

Managing Cookies: You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this Site may become inaccessible or not function properly.

10. THIRD-PARTY LINKS AND SOCIAL MEDIA

This Site may include links to third-party websites, plug-ins, and applications (including Instagram, X (Twitter), TikTok, Snapchat). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

Social Media Interaction: If you interact with us on social media platforms, please note that the platform provider (e.g., Meta, ByteDance) is the Data Controller for the data they collect. We only process anonymized statistical data provided by these platforms to better understand our audience.

11. CHILDREN'S PRIVACY

Our Site is not intended for children under 18 years of age. We do not knowingly collect Personal Information from children under 18. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us immediately so that we can delete such information.

12. CHANGES TO THE PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with an updated revision date. We encourage you to review our Privacy Policy whenever you visit the Site to stay informed about our information practices and the ways you can help protect your privacy.

13. CONTACT INFORMATION

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us using the details set out below:

Entity Name: Verozyro

Trading Name: VeroZyro

Email Address: info@verozyro.com