Privacy policy.

• We collect what we need to deliver your hoodie and look after your order — nothing more.
• We’re cash on delivery only, so we never see or store card or bank details.
• No ad trackers, no analytics and no data selling. Ever.
• You can ask us to see, fix or delete your data at any time.

When you place an order: your name, phone number, delivery address, city, and — if you give them — your email and an order note. We also keep what you ordered (items, sizes, prices, delivery method, promo code and any discounts).

When you create an account: your name, email, phone (optional) and a password. Your password is stored only as a scrambled hash — nobody at ZIOR can read it.

When you join our newsletter: your email address, when you signed up, and whether you’re still subscribed.

When you message us: the name, email, optional phone, subject and message you send through the contact form, or what you send us on WhatsApp or email.

When you use the chat assistant: the messages you type (see the chat assistant).

Automatically: your IP address is used for a minute or so to stop spam and abuse (for example too many checkout attempts). Our hosting provider also keeps standard technical logs.

• To confirm, pack and deliver your order — including calling or messaging you to confirm a COD order.
• To email your order slip, if you gave an email address.
• To run your account: order history, tracking, saved details, and your Chill level and mystery box rewards (worked out from your delivered orders).
• To answer your messages and handle returns, exchanges and warranty claims.
• To prevent fraud, fake orders and abuse of the site.
• To understand what sells so we can make better hoodies.

Newsletter: only if you subscribe. We email about new drops, restocks and offers — a few times a month at most. Every email has an unsubscribe link, and unsubscribing never stops your order emails.

We never sell or rent your personal data. We share it only with:

• Delivery partners — your name, phone, address and the COD amount, so they can deliver and collect payment.
• Services that run the site — our hosting provider, database hosting (Neon), image hosting (Cloudinary), email delivery (Google Gmail) and the AI chat provider (Groq or OpenRouter). They process data only to provide their service to us.
• Authorities — only when the law requires it.

Some of these services keep data on servers outside Pakistan.

Our shop assistant is powered by an AI model. When you chat, your recent messages are sent to the AI provider to write a reply. We don’t save your chat history in our database.

Please don’t share sensitive details in the chat — like your CNIC, passwords or full address. For order problems, use the contact page or WhatsApp instead.

We only use what the site needs to work. There are no advertising or analytics cookies.

• Login: a secure cookie keeps you signed in — 7 days, or 30 if you tick “Remember me”.
• Your bag & wishlist: saved on your device so they’re still there when you come back.
• Offer popup: we remember when you close it so it doesn’t keep showing.

You can clear cookies and site data from your browser settings at any time — you’ll just be logged out and your bag will empty.

• Orders: as long as we need them for delivery, returns, our 1-year warranty, accounting and legal records.
• Your account: until you ask us to delete it.
• Contact messages: until they’re resolved, and afterwards for reference if the same issue comes up again.
• Newsletter: until you unsubscribe. After that we keep a note that you opted out, so you’re never emailed again by mistake — or we delete it entirely if you ask.
• Mystery box codes: until they’re used or expire.

The site runs over HTTPS, passwords are hashed, the login cookie can’t be read by page scripts, and only authorised ZIOR team members can see your orders. No online system is 100% secure, but we work to keep your data safe and will tell you if something goes wrong that affects you.

• See and update your name, email and phone any time on your profile.
• Unsubscribe from the newsletter in one click — the link is at the bottom of every email.
• Get a copy of the data we hold about you, or fix something that’s wrong.
• Delete your account. We’ll remove your account details; we may keep order records we’re required to keep for accounting.
• Ordered as a guest? Send us your order number and phone number and we’ll help the same way.

To make any of these requests, reach us using the details in Contact us. We may ask you to confirm it’s really you first.

ZIOR isn’t meant for children under 13, and we don’t knowingly collect their data. If you think a child has shared data with us, contact us and we’ll delete it.

If we change how we handle your data, we’ll update this page and the date at the top. For big changes, we’ll also flag it on the site.

Questions or requests about your privacy — we reply usually within 24h.