Legal
Privacy and Cookies.
Effective date: [DATE] · Last updated: [DATE]
This Privacy and Cookies Policy explains how [FULL UAE LEGAL ENTITY NAME], trading as Zenith Performance, collects, uses, stores, shares and protects personal information through [WEBSITE DOMAIN].
Who We Are
The data controller responsible for the website is:
Information We Collect
Depending on how you use the website, we may collect:
Identity and contact information
- full name;
- email address;
- telephone number;
- billing address;
- delivery address; and
- account details.
Transaction information
- products ordered;
- order values;
- discount use;
- payment status;
- refund information;
- invoices; and
- delivery history.
Complete payment-card details are ordinarily processed by our authorised payment provider and are not stored directly by Zenith unless expressly stated.
Product and support information
- customer-support correspondence;
- complaints;
- return reasons;
- product reviews;
- product preferences;
- adverse-event reports; and
- product batch and expiry information.
Website and device information
- IP address;
- browser type;
- device type;
- operating system;
- referring pages;
- pages viewed;
- session information;
- approximate location derived from IP data;
- cookie identifiers; and
- security and fraud-prevention data.
Marketing preferences
- consent to receive email, SMS or other marketing;
- communication preferences; and
- engagement with messages.
Health-related information
A supplement purchase, product enquiry, allergy disclosure or adverse-event report may reveal information relating to health.
We will only request health-related information where reasonably necessary for safety, customer support, a requested service, regulatory reporting or another lawful purpose.
The online store should not be used to submit complete medical records unless a separate secure health service expressly requests them.
How We Use Information
We may process information to:
- create and manage your account;
- accept and fulfil orders;
- process payments;
- deliver products;
- issue invoices;
- communicate about an order;
- process returns and refunds;
- provide customer support;
- investigate product complaints;
- respond to safety concerns;
- administer recalls;
- prevent fraud and misuse;
- comply with legal and regulatory duties;
- maintain website security;
- improve the website and customer experience;
- analyse aggregated commercial performance;
- send marketing where permitted; and
- establish, exercise or defend legal rights.
We will not use health-related information to target advertising in a manner that is unlawful, unfair or inconsistent with the context in which it was provided.
Legal Grounds and Consent
Depending on the processing activity, we rely on:
- your consent;
- the need to perform a contract with you;
- compliance with legal or regulatory obligations;
- protection of public or individual safety;
- legitimate commercial interests that do not improperly override your rights; or
- another lawful basis recognised under applicable UAE law.
Where consent is required, you may withdraw it by contacting us. Withdrawal does not invalidate processing lawfully completed before withdrawal and may not prevent processing required by law or necessary to complete an existing order.
Marketing Communications
We will send direct marketing only where permitted.
Marketing consent will be kept separate from acceptance of the Terms and will not be preselected.
You may unsubscribe by:
- selecting the unsubscribe link in an email;
- replying STOP where supported for SMS;
- changing account preferences; or
- contacting [MARKETING EMAIL].
Service messages concerning orders, safety notices, recalls, account security and legal updates are not marketing and may still be sent where necessary.
Cookies
The website may use:
Essential cookies
Required for checkout, account login, fraud prevention, security and core website operation.
Preference cookies
Used to remember language, location and display preferences.
Analytics cookies
Used to understand website use and improve performance.
Advertising cookies
Used to measure campaigns or provide relevant advertising, where lawful consent has been obtained.
Non-essential cookies should not be activated until the visitor has made the required consent choice.
You may manage cookies through the website consent tool and your browser settings. Blocking some cookies may affect functionality.
Advertising Technologies
We will not intentionally send sensitive health information, questionnaire answers, medical communications or detailed customer-account content to advertising platforms.
Advertising pixels and session-recording technologies must not be placed inside areas containing health information, complaint details or sensitive account data unless their use has been specifically assessed and lawfully authorised.
Sharing Information
We may share information with:
- payment processors;
- delivery and logistics providers;
- cloud-hosting providers;
- customer-support systems;
- website and cybersecurity providers;
- professional advisers;
- insurers;
- manufacturers and authorised distributors;
- regulatory authorities;
- law-enforcement bodies;
- product-safety and pharmacovigilance providers; and
- a purchaser or investor in connection with a legitimate corporate transaction.
We require service providers to use personal information only for authorised purposes and to apply appropriate confidentiality and security measures.
We do not sell personal information to advertisers.
International Transfers
Some service providers may process information outside the UAE.
Before transferring personal information internationally, we will assess the transfer, apply required contractual and security safeguards and obtain consent where required.
Health information collected through a separately licensed healthcare service may be subject to stricter UAE localisation and cross-border-transfer rules. Such information will be handled under the separate privacy notice governing that clinical service.
Security
We use reasonable technical and organisational measures designed to protect personal information, including where appropriate:
- encryption in transit;
- encryption at rest;
- access controls;
- multifactor authentication;
- logging and monitoring;
- secure backups;
- vulnerability management;
- staff confidentiality obligations;
- vendor assessments; and
- incident-response procedures.
No internet-based system is completely secure. You must protect your account credentials and notify us promptly of suspected unauthorised access.
Retention
We retain information only for as long as reasonably necessary to:
- fulfil orders;
- provide support;
- meet accounting and tax requirements;
- comply with product-safety and recall obligations;
- resolve disputes;
- prevent fraud; and
- meet legal and regulatory requirements.
Retention periods will differ according to the information and purpose.
When information is no longer required, we will securely delete it, anonymise it or restrict its use, subject to applicable law.
Your Rights
Subject to applicable UAE law and lawful exceptions, you may request to:
- access personal information we hold about you;
- correct inaccurate or incomplete information;
- receive information about how it is processed;
- withdraw consent;
- object to or restrict certain processing;
- request deletion where retention is no longer lawful or necessary; and
- lodge a complaint with the relevant authority.
To exercise a right, contact [PRIVACY EMAIL]. We may need to verify your identity before responding.
Children
The website and online store are not intended for persons under 18.
We do not knowingly collect personal information from children through the online shop. Where we become aware that information was collected contrary to this policy, we will take appropriate steps to delete or restrict it.
Data Breaches
Where a security incident affects personal information, we will investigate, contain and document the incident.
We will notify affected persons and the relevant authority where notification is required by applicable law.
External Links
The website may contain links to independent third-party websites. Their privacy practices are controlled by their respective operators.
Changes to This Policy
We may update this Policy to reflect changes in law, technology or our services.
The current version will be published with its effective date. Material changes may also be communicated through the website or directly where appropriate.
Contact and Complaints
Privacy questions and complaints may be directed to:
We will investigate privacy complaints and respond within a reasonable period.
Questions?
Contact our team for any privacy inquiries.