Privacy policy

This policy explains how the ZoqCard store collects, uses, protects and shares personal data when you visit the site, create an account, buy digital products or contact us. ZoqCard is an Omani online store and processes data in accordance with the laws applicable in the Sultanate of Oman, including the Personal Data Protection Law and its executive regulation, as applicable to our activity.

Data we may collect

  • Account and contact data, such as name, email, phone number and login details.
  • Order and transaction data, such as product, value, currency, country or region, order number, payment and delivery status, and purchase history.
  • Technical and usage data, such as IP address, device and browser type, login logs, pages visited and cookies.
  • Customer-service correspondence and the descriptions, screenshots or documents the customer provides to verify an order or resolve a complaint.

We do not normally request sensitive personal data; please do not send it to us unless legally required and clearly requested. Payment card data is processed by the payment provider; we do not ask customers to send full card details by email or WhatsApp.

Sources of data

We collect data directly from the customer, automatically when the site is used, or from payment providers, suppliers and technical platforms to the extent needed to fulfil an order, confirm payment and delivery, prevent fraud and handle complaints.

How we use data

  • Creating and managing the account, fulfilling the order and delivering the digital product.
  • Processing payment, verifying transactions, preventing fraud and misuse, and protecting the site and customers.
  • Providing support, checking faults or codes, and handling cancellations, refunds and complaints.
  • Improving the site and services, measuring performance, understanding usage and sending operational notifications.
  • Meeting legal, regulatory and accounting requirements and protecting rights and claims.
  • Sending marketing offers where the required consent is obtained, with the option to opt out at any time.

Legal basis and consent

We process data with the customer’s consent, or where processing is necessary to conclude and fulfil an order, to meet a legal obligation, or to protect the store’s security and prevent fraud within the limits allowed by law. Consent can be withdrawn where it is the basis of processing, without affecting the lawfulness of earlier processing or data we must retain by law.

Sharing data

We may share the minimum necessary data with payment gateway providers, digital-product suppliers and issuers, hosting, email, support, analytics and security services, professional advisers, and government or judicial authorities when there is a legal request. We require service providers, as appropriate to the relationship, to use data only for the specified purpose and keep it confidential and secure. We do not sell personal data.

Processing or transfer outside Oman

Some suppliers, service providers or their systems may be located outside the Sultanate of Oman. When data is transferred or accessed across borders, we apply the controls and safeguards required by applicable Omani law, to the extent necessary to provide the service.

Data retention

We keep data for as long as needed for the purposes in this policy, to fulfil orders, manage accounts, keep accounting and legal records, settle disputes and prevent fraud. When no longer needed, we delete, anonymise or securely isolate it, unless the law requires a longer period.

Data security and incident reporting

We apply reasonable administrative, technical and organisational measures to protect data from unauthorised access, use, alteration or disclosure. No electronic method is completely secure, so we review controls according to risk, handle any data incident, and notify the competent authorities or data subjects when the law requires it.

Your rights

Under applicable law, you may request access to your data or a copy of it, correct or update it, withdraw consent, request erasure, restriction or portability where applicable, opt out of direct marketing, and lodge a complaint. We may verify your identity before acting on a request, and may refuse or limit it where retaining the data is necessary to perform a contract, meet a legal obligation or protect rights, giving reasons where required.

Children’s data

The store does not knowingly target children; purchases must be made by a person with legal capacity or under a guardian’s supervision. If we learn that a child’s data has been collected, we handle it under the specific requirements and consents applicable in Oman, and may delete it or request guardian consent as appropriate.

Cookies

The site may use cookies that are necessary for login, the cart and security, and others for performance measurement and improving the experience, after consent where required. You can control them from browser settings or the site’s consent tool; disabling necessary cookies may break some functions.

External links and services

The site may link to external platforms or parties governed by their own privacy policies. This policy does not cover their practices; we recommend reviewing their policies before providing data.

Changes to this policy

This policy may be updated when the service or legal requirements change. The updated version is published on the site with its effective date, and we may give additional notice if the change is material.

Contact and privacy requests

To exercise any right or ask about this policy, contact us via:

Last updated: 15 September 2026