Privacy policy

Product reviews

If you submit a product review, your chosen display name, star rating, review text and submission date are stored in Supabase and published under that product. Reviews are published only after approval and are not verified-purchase endorsements. Denied reviews remain private for moderation and may be reconsidered. Do not include contact details or private information. We do not collect an email address for reviews.

A temporary HMAC-hashed network identifier limits repeated submissions. Supabase processes technical request data to operate the service. Contact @zeitbladi on Instagram if you want your review corrected or removed. Reviews remain until removed by the author’s request or by the brand.

1. Who we are

Zeit Bladi brings Palestinian extra virgin olive oil to customers in Dubai. This policy covers this storefront and cart. Separate policies apply when you visit Instagram, Ziina, or another external service.

2. Information we collect

When online checkout is enabled and you submit an order, we collect your name, email address, phone number, emirate, delivery address, chosen products, quantities, and payment reference and status. We do not collect job titles or company details.

Card details are entered directly on Ziina’s hosted payment page. We do not receive or store your full card number, security code, account password, or payment credentials. Our website has no customer password system.

3. How information is collected

You provide order details through checkout. Our hosting and security providers also process technical request information needed to operate the website, such as IP addresses, browser details, and security logs. Rate limiting uses a secret-salted, time-limited hash of the requesting IP address.

The website currently uses no advertising pixels, marketing analytics, or third-party data brokers. Web fonts are loaded from Google Fonts, which receives the technical information needed to deliver them.

4. Browser storage

Essential browser storage remembers your bag and English/Arabic preference. For administrators, session storage also keeps a temporary Supabase sign-in session for the review dashboard. Session storage keeps an order reference and a random verification token during checkout, plus a hash used to avoid duplicate attempts. Contact and delivery details are not saved in that session record.

You can clear this storage in your browser settings. Doing so removes saved preferences and may prevent verification of an in-progress payment in this browser.

5. Why we use information

We use order details to arrange payment, prepare and deliver purchases, answer order questions, prevent fraud and duplicate payments, secure the website, and meet applicable accounting or legal obligations. We do not use order details for unrelated marketing or automated eligibility decisions.

Where applicable, processing is based on performing a purchase contract, legal obligations, necessary security interests, or consent where required.

6. Sharing and international processing

We do not sell, rent, or trade personal information. Necessary information may be processed by Ziina for payment, our Cloudflare/Sites hosting and database providers, and delivery or fulfilment partners when needed for your order. Contacting us on Instagram involves Meta’s services.

These providers may process information outside the UAE. Applicable contractual and legal safeguards must be considered for such transfers. Each external provider’s own privacy terms also apply.

7. Security and retention

Order contact and delivery details are encrypted on the server before database storage. Secrets are stored as server environment settings. Order status requires an order-specific verification token. No security measure can guarantee absolute protection.

We retain order information only for fulfilment, support, dispute handling, and applicable legal or accounting requirements. Operational retention periods and deletion procedures will be finalised before live checkout opens. You may ask about retention or request deletion through the contact route below.

8. Your privacy rights

Depending on applicable UAE data protection law and, where it applies, the GDPR, you may request access, correction, erasure, restriction, portability, or object to certain processing. You may withdraw consent for processing that relies on consent and contact a relevant data protection authority.

We may verify your identity before handling a request. Requests are handled within the period required by applicable law; where GDPR applies, this is normally one month, subject to permitted extensions. Some records may need to be retained for legal reasons.

9. Children

This storefront is intended for adults making purchases. It is not directed at children under 13, and we do not knowingly collect their personal information. A parent or guardian can contact us if a child’s information has been submitted.

10. Changes and contact

We may update this policy by publishing the revised text and changing the effective date. For privacy questions or requests, contact Zeit Bladi through @zeitbladi on Instagram. The business email and final website domain fields below are intentionally blank until confirmed.