Privacy policy

1. Who handles your information

SHISHAZONE Tobacco Trade and Smoking Supplies L.L.C. is responsible for the personal information it uses to operate Shishazone and handle customer purchases and enquiries. This notice covers our storefront and related customer support. Contact us at the address or telephone below, or use the privacy request instructions.

SHISHAZONE Tobacco Trade and Smoking Supplies L.L.C.
Shop No. 6, Platinum Building
Al Mina Street, Dubai
United Arab Emirates

Call +971 55 755 7282
Open daily · 10:00 AM–12:00 AM (Dubai time, UTC+4).

Store information & directions

2. Information we receive

• Information you provide: name, email, telephone number, billing and delivery addresses, account details, messages and information needed to resolve an order or return.
• Shopping information: cart contents, chosen variants, saved items, purchases, delivery status, refunds and payment status or transaction references.
• Technical information: IP address, browser and device information, request and security logs, and cookies needed for sessions, age confirmation, carts and saved items.
• Information from service providers: payment confirmations, fraud or security signals, delivery updates and account authentication results.

Card details entered in hosted checkout are handled by the checkout and payment providers. Do not send full card details, passwords, sign-in codes or identity documents in a general support message. The storefront’s age confirmation records a declaration, not an identity-document scan.

3. Purposes and grounds for processing

We use information needed to take steps you request before a purchase, perform the purchase contract, authenticate accounts, save a cart or wishlist you request, arrange delivery and resolve returns. We also process records where necessary to meet legal obligations or establish and defend legal rights. Processing that requires consent will rely on a separate, specific choice; you can withdraw that consent.

Providing required order information is necessary to fulfil a purchase. Optional communications are separate from order updates. Confirming your age or accepting store terms does not sign you up to advertising. We do not sell customer personal information.

4. Who receives information

We use Shopify for storefront commerce, hosted checkout and customer accounts. Providers involved in payment, fulfilment, delivery, hosting and customer support receive information needed for their role. Professional advisers and competent authorities may receive information where required for legal obligations or claims.

Shopify may also process data for its own services as described in its Consumer Privacy Policy, including the rights customers can exercise directly with Shopify. The precise services used depend on the options you select.

Opening WhatsApp or a maps service shares information with that service under its own privacy notice. Maps are external links; a map is not embedded in the storefront and we do not request your device location for directions.

5. International processing

Shopify and other providers may process information outside the UAE. Cross-border processing must have a basis permitted by applicable data-protection law, such as appropriate contractual safeguards or a relevant legal exception. Contact us for information about the recipients and safeguards applicable to your data. Use of this website is not blanket consent to international transfers.

6. Retention and security

We retain information for the purpose for which it is needed, including fulfilment, customer support, applicable tax and accounting requirements, disputes and fraud prevention. When those purposes and retention requirements end, information should be deleted or anonymised. Different records have different retention needs; cookie lifetimes are listed in the cookie policy.

The storefront uses encrypted connections and protected session cookies. Access to customer records must be limited to authorised people and providers. No service can guarantee absolute security. If a breach occurs, we must assess it and make the notifications required by applicable law.

7. Your rights and requests

Subject to applicable law and its exceptions, you may ask for information about processing and recipients, a copy or portable transfer of eligible data, correction, erasure, restriction, or cessation of processing. You may withdraw consent and object to direct marketing. You may also request human review of a decision based on automated processing that affects you, where applicable.

Contact us using the privacy request instructions. We may verify your identity proportionately and ask for details needed to locate your records. We will explain if a legal obligation prevents deletion or another request cannot be met. Withdrawing consent does not invalidate earlier lawful processing. You may raise a complaint with the competent UAE data-protection authority.

8. Cookies, optional tracking and children

Our cookie policy describes essential storage and browser controls. This storefront does not currently run optional analytics or advertising pixels. Hosted checkout and account services have their own privacy controls.

The storefront is intended for adults aged 18 and over. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate, subject to legal record-keeping duties.

9. Updates

We will revise this notice when processing or legal requirements change, with the revision date shown above. A materially different use that requires consent will require a new choice; an updated notice alone does not provide that consent.