Privacy Policy

Privacy & Data Protection Policy -  ZURRIES BILLINERY (PVT) LTD

Effective Date: July 27, 2025

ZURRIES BILLINERY (PVT) LTD (“we,” “us,” or “our”) is committed to protecting your privacy and personal data. This policy explains how we collect, process, and safeguard your information.

This policy applies to all users of our website: www.zurriesbillinery.com.

1. Categories of Data We Collect

We collect both personally identifiable information (PII) and technical data for security and operational purposes:

• Personally Identifiable Information: Full name, billing/shipping addresses, email, phone number, and order history.

• Payment Information: Payment card metadata (we do not store full card details), OTP logs, and payment processor response logs.

• Technical Data: IP address, browser information, device fingerprinting, and cookies.

• Behavioral Data: On-site actions, communication logs, and dispute history.

2. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience, analyze site usage, and ensure security. We manage your consent for non-essential cookies via our website's cookie banner. For a detailed explanation, please see our separate Cookie Policy and Your privacy choices pages.

3. Purpose and Legal Basis for Data Processing

We use your data for legitimate business purposes, including:

• Fulfilling your order and managing shipping.

• Processing secure payments via DirectPay (with OTP verification).

• Preventing and detecting fraud, and providing evidence in chargeback cases.

• Improving user experience and site optimization.

• Complying with financial and tax regulations.

• Managing marketing communications (only with your explicit consent).

We do not sell or rent your information to third parties for their own marketing.

4. Payment Security & OTP Verification

All payments are processed through DirectPay, a PCI-DSS Level 1-certified gateway that uses OTP-based two-factor authentication (2FA). This process is a critical anti-fraud measure, providing irrefutable proof of cardholder authorization.

5. Data Retention Policy

We store your data for the minimum duration required by law (e.g., for tax or banking regulations) and for fraud monitoring. Your data may be anonymized or deleted upon your verified written request after these retention periods have expired.

6. Anti-Fraud Enforcement & Legal Protections

We operate a zero-tolerance anti-fraud framework. Customers who attempt fraud (e.g., false chargebacks) may be permanently banned from our service, reported to payment processors and law enforcement, and we reserve the right to recover any financial loss caused by such activity.

7. Your Privacy Rights

Depending on your jurisdiction, you have the right to access, rectify, or erase your personal data. You can also object to certain processing and opt out of targeted advertising as described on our Your privacy choices page. To exercise your rights, email us at contactus@zurriesbillinery.com. We will respond within 14 calendar days.

8. Data Security Measures

We use a range of safeguards to protect your information, including SSL encryption, firewalls, and multi-factor authentication (MFA).

9. International Data Transfers

Your personal data is primarily stored on servers located in the United States, in compliance with robust data protection standards.

10. Third-Party Processors

We use trusted third-party services like DirectPay and logistics partners. As our e-commerce platform, Shopify is a key third-party processor that uses your data to improve their products and for ad targeting specifically for our store, in accordance with their terms.

11. Changes to This Policy

We may update this policy periodically. The "Effective Date" at the top indicates the last revision.