Privacy Policy

Who we are

ZamZam Shop Co. sells Zamzam water, Madinah dates, Sunnah essentials and Kashmiri saffron from Toronto, Ontario, through this website. We are responsible for the personal information you give us, and we handle it under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Customers in Quebec also have the rights set out in Quebec's private-sector privacy law (Law 25). This policy explains, in plain language, what we collect and why.

What we collect

We only collect what is needed to serve you:

• When you place an order: your name, email address, phone number and shipping address, entered in the checkout form.
• When you pay: your card details go directly to Stripe, our payment processor. They never reach or pass through our servers. We receive only a confirmation, the last four digits of the card and the amount paid.
• When you join the newsletter: your email address.
• When you contact us or request wholesale pricing: your name, email address, phone number if you give it, and the message you send.

We do not ask you to create an account, and we do not collect your date of birth, government identifiers or any sensitive personal information.

How we use it

• To process, pack and ship your order, and to send the confirmation and tracking emails for it.
• To reply to your questions and wholesale inquiries.
• To send the newsletter, only if you signed up, and only until you unsubscribe.
• To keep the records Canadian tax and consumer-protection law require us to keep.
• To detect and prevent fraudulent orders.

We do not sell or rent your information, build advertising profiles, or send marketing on behalf of anyone else.

Who we share it with

We share personal information only with the service providers that make the store work, and only what each one needs:

• Stripe processes your payment and collects your shipping and contact details in the secure checkout form.
• Google Firebase stores order records and newsletter sign-ups in our database.
• Resend delivers order confirmations, shipping updates and newsletters to your inbox.
• Vercel hosts the website and serves its pages.
• Shipping carriers receive your name, address and phone number so they can deliver your parcel.

We will also disclose information if a court order or Canadian law requires it. We do not share it with anyone else.

Cookies and browser storage

This website does not load advertising trackers or third-party analytics scripts. Your browser keeps a small amount of information locally so the site works as expected: the contents of your cart, products you recently viewed, and whether you have dismissed a promotional banner. This stays on your device, is never sent to us, and is removed when you clear your browser's site data. Stripe sets its own cookies inside the checkout form to protect against fraud, as described in its privacy policy linked above.

How long we keep it

• Order records: seven years from the date of purchase, as the Canada Revenue Agency requires for business records.
• Newsletter sign-ups: until you unsubscribe, after which your address is removed from the mailing list.
• Contact and wholesale messages: up to one year after our last exchange, so we can follow up on your inquiry.

Your rights

You can, at any time:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct anything that is inaccurate.
• Withdraw consent to the newsletter by using the unsubscribe link in any email, or by writing to us.
• Ask us to delete your information. We will do so unless we are legally required to keep it, for example an order record within the seven-year retention period.

Email info@zamzamshop.ca with your request. We will confirm your identity, respond within 30 days, and never charge a fee.

Security and where your data is stored

Every page and form on this site is served over an encrypted connection. Payments are handled by Stripe, which is certified to PCI DSS Level 1, the highest standard for card security. Access to order records is limited to the people who fulfil orders. Our service providers are based in the United States and may store your information there; each is bound by a contract requiring protection comparable to Canadian law. No online system is completely secure, so we keep the amount of personal information we hold to the minimum described above.

Children

This store is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact us and we will delete it.

Changes to this policy

If we change how we handle personal information, we will update this page and the date at the top. Significant changes will also be announced by email to newsletter subscribers.

Questions and complaints

Write to us first and we will do our best to resolve any concern:

Email: info@zamzamshop.ca

Phone: +1 (437) 580-9680

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada. See also our Terms of Service, Shipping Policy and Refund Policy.